Security Loophole in Chinese Electric Buses Raises Concerns in Denmark and Norway

Danish and Norwegian authorities are investigating a security loophole in Chinese-made electric buses from Yutong that allows remote access to control systems. This vulnerability could potentially enable the manufacturer to deactivate buses while in transit. Ruter, the Norwegian public transport authority, conducted tests on two buses and confirmed risks associated with the connectivity of the vehicles. Movia, Denmark's largest public transport company, operates 469 Yutong buses, raising alarms about the security of these vehicles. Experts have identified vulnerabilities in the software update platform used by Yutong, prompting calls for stricter security measures. Both countries are working on implementing additional protective measures before the next generation of buses is introduced. Yutong has stated that it complies with applicable laws and regulations.

Key Points: • Danish and Norwegian authorities are investigating remote access vulnerabilities in Yutong buses. • Ruter's tests revealed risks that could allow remote deactivation of buses during operation. • Movia operates 469 Yutong buses, highlighting the widespread impact of the security issue.