Danish authorities in rush to close security loophole in Chinese electric buses.
Investigation launched after discovery that Chinese supplier had remote access to vehicles’ control systems.
"Authorities in Denmark are urgently studying how to close an apparent security loophole in hundreds of Chinese-made electric buses that enables them to be remotely deactivated.
The investigation comes after transport authorities in Norway, where the Yutong buses are also in service, found that the Chinese supplier had remote access for software updates and diagnostics to the vehicles’ control systems – which could be exploited to affect buses while in transit.
Amid concerns over potential security risks, the Norwegian public transport authority Ruter decided to test two electric buses in an isolated environment.
Bernt Reitan Jenssen, Ruter’s chief executive, said: “The testing revealed risks that we are now taking measures against. National and local authorities have been informed and must assist with additional measures at a national level.”
Their investigations found that remote deactivation could be prevented by removing the buses’ sim cards, but they decided against this because it would also disconnect the bus from other systems.
Ruter said it planned to bring in stricter security requirements for future procurements. Jenssen said it must act before the arrival of the next generation of buses, which could be even “more integrated and harder to secure”.
Movia, Denmark’s largest public transport company, has 469 Chinese electric buses in operation – 262 of which were manufactured by Yutong.
This is not a Chinese bus problem. It is a problem for all types of vehicles and devices with Chinese electronics built in.”
https://www.theguard...-electric-buses
Ministers to investigate ‘kill switch’ on Chinese buses.
IT experts to check whether hundreds of vehicles in UK could be remotely deactivated.
The Department for Transport is investigating whether Chinese bus maker Yutong can deactivate the buses remotely
Ministers are set to investigate the potential threat posed by “kill switches” on hundreds of Chinese-made electric buses in the UK.
The Department for Transport is working with IT experts at the National Cyber Security Centre (NCSC) to evaluate whether Chinese bus maker Yutong can deactivate buses remotely.
It comes after the company’s buses were found to contain software that allowed them to be remotely turned off.
Norway’s public transport company Ruter recently investigated the buses, claiming they could be “stopped or rendered inoperable” by the Zhengzhou-based business.
Around 700 Yutong buses are currently in operation across Britain, used by well-known groups including Stagecoach and First Bus. Those two companies alone are thought to have more than 200 buses each."
https://archive.ph/88bzE
