Remote car access exposed headlights, location and cabin audio
This is a DailyCyber.News update, brought to you by BareMetalCyber.com, for Monday, September 21st, 2026.
Connected-car weaknesses can create both physical danger and surveillance risk for drivers and passengers. During a reported two-week test of a BYD Shark 6, a security researcher found an entry point protected by no password. The researcher then remotely controlled the vehicle’s doors, audio, infotainment display, wipers, and headlights. Location tracking and the cabin microphone were also accessible. Brakes and cameras had stronger protections and were not reached during the test. Turning off headlights while a vehicle is moving shows how a digital weakness can create an immediate safety consequence. Access to cabin audio and location data can also expose private conversations, credentials, travel patterns, and sensitive work. Leaders should assess connected vehicles as mobile computing and surveillance platforms, not simply transport assets. Fleet defenders should examine remote-access controls, update obligations, data handling, and the risks of pairing work devices. Before approving a connected vehicle for fleet use, assess its security and prohibit sensitive conversations where remote audio access remains unclear.
For the sources and the full Daily Cyber newsletter, visit DailyCyber.News.
