Threat Register
Evidence-based Automotive Cybersecurity Threat Register
57
Threats
2
Critical
24
High
29
Moderate
2
Low
All Threats
| ID | Threat | Category | Risk | Evidence |
|---|---|---|---|---|
| T-001 | Large-scale cyber disruption of vehicles and mobility services | Mobility Services and Large-Scale Disruptions | High | 0 |
| T-002 | Cyberattack on EV charging infrastructure | Energy, Charging, and V2G Infrastructure | High | 0 |
| T-003 | Sabotage of the electricity grid impacting vehicles | Energy, Charging, and V2G Infrastructure | Moderate | 0 |
| T-004 | Misuse of Vehicle-to-Grid (V2G) functionality to destabilize the energy grid | Energy, Charging, and V2G Infrastructure | Moderate | 0 |
| T-005 | Misuse of vehicles for sabotage or targeted attacks | Vehicle Control and Function Manipulation | Moderate | 0 |
| T-006 | Targeted attack on critical infrastructure or VIP transportation | Critical Infrastructure and National Security | Moderate | 0 |
| T-007 | Use of a vehicle as a cyber-physical attack tool | Vehicle Control and Function Manipulation | Moderate | 0 |
| T-008 | Insufficient capability to disable an unsafe vehicle | Vehicle Control and Function Manipulation | High | 0 |
| T-009 | Compromise of vehicles for use in botnets | Development, Approval, and Lifecycle Management | High | 0 |
| T-010 | Deterioration of road safety due to cyber incidents | Road Safety and Autonomous Vehicles | High | 0 |
| T-011 | Outage of digital vehicle and mobility services | Mobility Services and Large-Scale Disruptions | High | 0 |
| T-012 | Vulnerabilities in autonomous driving functions | Road Safety and Autonomous Vehicles | High | 0 |
| T-013 | Critical vulnerabilities in autonomous vehicles | Road Safety and Autonomous Vehicles | High | 0 |
| T-014 | Geopolitical influence over vehicle manufacturers | Vehicle Ecosystem, Supply Chain, and Dependencies | Moderate | 0 |
| T-015 | Unauthorized monitoring of vehicle occupants | Privacy, Personal Data, and Surveillance | Moderate | 0 |
| T-016 | Unlawful behavioral or location tracking of individuals | Privacy, Personal Data, and Surveillance | Moderate | 0 |
| T-017 | Digital espionage through vehicles | Espionage and Intelligence Gathering | High | 0 |
| T-018 | Espionage through vehicle sensors or suppliers | Espionage and Intelligence Gathering | High | 0 |
| T-019 | Insufficient oversight due to the complexity of the vehicle ecosystem | Governance, Regulation, and Oversight | Moderate | 0 |
| T-020 | Cyber incidents leading to societal disruption | Critical Infrastructure and National Security | Moderate | 0 |
| T-021 | Declining trust in digital mobility infrastructure | Critical Infrastructure and National Security | Moderate | 0 |
| T-022 | Insufficient regulation and oversight of vehicle cybersecurity | Governance, Regulation, and Oversight | Moderate | 0 |
| T-023 | Takeover of vehicle functions through the infotainment system | Vehicle Control and Function Manipulation | Critical | 0 |
| T-024 | Safety receives insufficient priority from manufacturers | Development, Approval, and Lifecycle Management | High | 0 |
| T-025 | Inadequate testing prior to market approval | Development, Approval, and Lifecycle Management | High | 0 |
| T-026 | Limited visibility into vehicle software | Software, Hardware, and Architecture Transparency | Moderate | 0 |
| T-027 | Incomplete visibility of vehicles within the ecosystem | Software, Hardware, and Architecture Transparency | Moderate | 0 |
| T-028 | Uncertainty regarding the applicability of the Cyber Resilience Act | Governance, Regulation, and Oversight | Low | 0 |
| T-029 | Uncertainty regarding applicable regulations | Governance, Regulation, and Oversight | Low | 0 |
| T-030 | Loss of OEM support | Vehicle Ecosystem, Supply Chain, and Dependencies | High | 0 |
| T-031 | Loss of critical suppliers | Vehicle Ecosystem, Supply Chain, and Dependencies | High | 0 |
| T-032 | Insufficient cybersecurity requirements for individual vehicle types | Governance, Regulation, and Oversight | Moderate | 0 |
| T-033 | Cross-supply-chain cyberattacks spanning multiple layers | Vehicle Ecosystem, Supply Chain, and Dependencies | High | 0 |
| T-034 | Absence of centralized detection of anomalous vehicle behavior | Detection, Monitoring, and Incident Response | High | 0 |
| T-035 | GNSS jamming and spoofing of vehicles | Communication, Navigation, and Wireless Attacks | Critical | 0 |
| T-036 | Insufficient protection of occupant data | Privacy, Personal Data, and Surveillance | Moderate | 0 |
| T-037 | AI accelerates the discovery and exploitation of vulnerabilities | AI, Software Supply Chains, and External Services | High | 0 |
| T-038 | Lack of visibility into AI and software supply chains | AI, Software Supply Chains, and External Services | Moderate | 0 |
| T-039 | Lack of transparency regarding data processing | Privacy, Personal Data, and Surveillance | Moderate | 0 |
| T-040 | Misuse of location and movement data | Privacy, Personal Data, and Surveillance | Moderate | 0 |
| T-041 | Unwanted collection of data from the surrounding environment | Privacy, Personal Data, and Surveillance | Moderate | 0 |
| T-042 | Inadequate management of physical attack vectors such as USB devices | Development, Approval, and Lifecycle Management | Moderate | 0 |
| T-043 | Unauthorized locking of vehicles | Vehicle Control and Function Manipulation | Moderate | 0 |
| T-044 | Digital vehicle theft | Vehicle Theft and Digital Crime | High | 0 |
| T-045 | Inadequate deletion of vehicle data during disposal, sale, rental, or [source text truncated after 'or'] | Privacy, Personal Data, and Surveillance | Moderate | 0 |
| T-046 | Insufficient protection of personal data throughout the vehicle lifecycle | Privacy, Personal Data, and Surveillance | Moderate | 0 |
| T-047 | Manipulation or unauthorized influence of vehicle behavior through software, data, or communication services | Vehicle Control and Function Manipulation | High | 0 |
| T-048 | Insufficient visibility and oversight across the entire vehicle supply chain and lifecycle | Development, Approval, and Lifecycle Management | High | 0 |
| T-049 | Underestimation of the impact of large-scale cyber incidents affecting vehicle fleets | Mobility Services and Large-Scale Disruptions | High | 0 |
| T-050 | Insufficient visibility into hardware and software variants within the same vehicle type | Software, Hardware, and Architecture Transparency | Moderate | 0 |
| T-051 | Differences in vehicle architectures resulting in unknown data flows and functionalities | Software, Hardware, and Architecture Transparency | Moderate | 0 |
| T-052 | Migration of vehicle intelligence to external AI and communication services outside the vehicle | AI, Software Supply Chains, and External Services | High | 0 |
| T-053 | Insufficient oversight of aftermarket hardware, software, and vehicle modifications | Development, Approval, and Lifecycle Management | Moderate | 0 |
| T-054 | Misuse of Software Defined Radio (SDR) for disruption, eavesdropping, and manipulation of wireless vehicle communications | Communication, Navigation, and Wireless Attacks | High | 0 |
| T-055 | Dependence on satellite communication infrastructure owned or controlled by foreign or untrusted parties | Critical Infrastructure and National Security | Moderate | 0 |
| T-056 | Deteriorating financial health of vehicle manufacturers resulting in reduced cybersecurity support | Vehicle Ecosystem, Supply Chain, and Dependencies | Moderate | 0 |
| T-057 | Insufficient logging, monitoring, and incident analysis across vehicles and vehicle ecosystems | Detection, Monitoring, and Incident Response | High | 0 |