Automotive Security Faces New AI Threats as Domestic Awareness Still Lags

AI adoption is driving a growing cybersecurity threat for the automotive industry. As connections between vehicles and external systems increase, the attack surface is expanding, and with AI risks added on top, the scope of security is widening across the entire automotive ecosystem. The industry emphasized on the 15th that security is an essential element, given the connectivity of a vehicle's various systems.

This trend is also reflected in VicOne's Situation Awareness Report for the second quarter of 2026, released last July. According to VicOne's report, automotive-related cybersecurity incidents totaled 477 in the second quarter of this year, up 17.8% from 405 in the first quarter.

By category, incidents involving in-vehicle systems rose from 129 in the first quarter to 168 in the second quarter, marking the largest increase among the areas tracked. Operational technology systems increased by 31 incidents, charging infrastructure by 28, and connected vehicle backend services by 18.

Vehicle apps also increased by 2 incidents. This rise in incidents is spreading across the entire automotive ecosystem.

The automotive industry continues to face ransomware threats. Ransomware attacks related to the automotive industry totaled 160 in the second quarter. By segment, logistics and transportation had the most at 64, followed by suppliers at 35, dealerships and retailers at 27, and OEM at 19.

At the same time, new security risks stemming from AI are also continuing to emerge. VicOne warned that AI-related risks could extend beyond AI models applied to vehicles. Areas subject to expansion included electronic control unit (ECU) modification tools and software packages, automotive pipelines, and engineering workflows.

Industry insiders pointed out that despite these expanding threats, the domestic market still does not regard security as an essential element. They also said domestic security awareness remains insufficient relative to the rise in cyber risks.

In response, the government is pushing measures aligned with the tightening of automotive cybersecurity regulations in major countries around the world. It is also building institutional foundations, including guidelines for an automotive cybersecurity certification system.

As part of these efforts, the Ministry of Land, Infrastructure and Transport and Hyundai Motor conducted a joint public-private tabletop exercise for automotive cybersecurity incident response on the 15th.

The industry believes that as vehicles become more digital, the attack surface is expanding and security is becoming more important, but says it will take time before awareness changes on the ground. An industry official also explained that the number of hacking paths has increased as vehicles have become more digital, and that security is essential because cars are now at the level of moving computers.

However, while various efforts are underway to respond to automotive cybersecurity threats, an industry official said that, from the field's perspective, the domestic market still does not recognize security as an essential element. Insiders and outsiders alike say there is still a lingering tendency to view security not as something that should be considered proactively, but as a cost incurred after a problem occurs, so it will take time for perceptions to actually change.

Source: TECHWORLD · Kim Hye-jin
Original: https://www.epnc.co.kr/news/articleView.html?idxno=406959

References

• https://www.epnc.co.kr/news/articleView.html?idxno=406959