#Japan #Cyber Threats #automotive cybersecurity #Shinjuku #VicOne

VicOne Reports Significant Rise in Automotive Cybersecurity Threats

In a groundbreaking report released by VicOne, a subsidiary of Trend Micro and a leader in automotive cybersecurity, the alarming trends in automotive cybersecurity for 2025 have been unveiled. According to the "VicOne 2025 Automotive Cybersecurity Report," the number of incidents reported in 2024 has surged to 215, showcasing a worrying landscape of rising threats in the automotive sector.

Key Findings from the Report

The report highlights several crucial statistics:

• - A total of 215 automotive cybersecurity incidents were reported in 2024.
• - The number of automotive vulnerabilities published reached 530, doubling since 2019.
• - A noted shift in attack vectors from hardware to software.
• - Cyber attackers in the underground are becoming increasingly sophisticated, exploiting vulnerabilities in the latest vehicle models.

Trends of Cyber Incidents in 2024

In 2024, it was indicated that the automotive industry faced 215 cybersecurity incidents, with cloud and backend vulnerabilities being prime targets for various attacks. Cybercriminals executed a range of malicious activities including ransomware attacks, data breaches, social engineering, and phishing attacks. The notable impact of data breaches in this sector has been overwhelming, affecting over 100 companies and showcasing the interconnectedness of the automotive industry. The prevalence of these vulnerabilities signifies a steep increase in complexity and attack surfaces in automotive systems.

The Soaring Vulnerabilities

The statistics are staggering — 530 new vulnerabilities were identified in 2024 within the automotive industry, marking a steep incline over the past decade. Despite hardware vulnerabilities still dominating the landscape, there's a growing number of software vulnerabilities involving operating systems and In-Vehicle Infotainment (IVI) systems, emphasizing a critical need for enhanced software security as vehicles become more connected.

Emergent Threats from the Underground

VicOne has been actively monitoring underground forums on the dark web for automotive-related threats, revealing an evolution in the tactics employed by cybercriminals. There is a concerning transition from manual vehicle modification attacks to more harmful and large-scale attacks involving user impersonation and account theft. This evolution heightens the urgency for preemptive strategies against potential exploitations of these vulnerabilities.

Emerging Trends for 2025

With the automotive landscape transitioning towards Software-Defined Vehicles (SDVs) and an increase in AI-integrated vehicles, cybersecurity risks are poised to escalate. The interconnected nature of vehicles with their external environments is expected to enhance the complexity of the automotive ecosystem. While AI promises greater convenience, it also introduces new security risks due to vulnerabilities within the AI systems and the potential misuse of training data.

VicOne’s Initiatives

VicOne is committed to safeguarding the future of automotive security, implementing numerous initiatives to combat the evolving threats. One of the standout efforts is the contest titled Pwn2Own Automotive, aimed at discovering unknown vulnerabilities. Additionally, VicOne organizes the Automotive CTF Japan, sponsored by the Ministry of Economy, Trade, and Industry, to nurture talent in automotive cybersecurity and drive industry collaboration.

Moreover, VicOne continues to collaborate with a wide array of leading partner companies across various sectors, integrating specialized knowledge to provide industry-leading comprehensive solutions. Their offerings empower OEMs and suppliers to proactively defend against evolving threats to ensure the safety of vehicles, drivers, and data alike.

Conclusion

In the words of VicOne's CEO, Max Chen, the transition to SDV technology boosts market differentiation, speeds time-to-market, and enhances customer experiences. By employing proactive and layered cybersecurity measures across the supply chain, the automotive industry is positioned to stay ahead of continually evolving threats while seizing unprecedented business opportunities and fostering growth.

For more detailed insights, passionate readers should check out the full report at VicOne. Further details regarding their comprehensive cybersecurity solutions can be found here.