Automotive sector frets over potential cyber threats

In a recent survey conducted by Diconium, three out of four companies in the German automotive sector have rated the danger of cyber attacks as "high" or "very high". The survey, which polled 200 cybersecurity experts and IT decision-makers in the vehicle industry, revealed that the sector is particularly concerned about security gaps in the cloud.

While other industries primarily fear ransomware and malware attacks, the automotive sector finds these threats less pressing. Instead, they are focusing on the risks posed by inadequate infrastructure (32 percent), a lack of suitable personnel (30 percent), and appropriate processes (24 percent) as the top hindrances to better protection against attacks.

In response, 46.7 percent of automotive companies plan to invest in better threat detection and incident response, while 33.7 percent want to promote security training and awareness programs. Interestingly, investments in over-the-air (OTA) update systems are further down the list, with only 20.6 percent of companies planning to invest in this area.

The survey also showed that 42.7 percent of automotive companies plan to spend on AI-assisted security analyses, with 14.5 percent expressing concerns about AI-based attack scenarios. Data breaches are a concern for 16.5 percent of companies, but surprisingly, investments in secure vehicle architectures are less prioritised.

The findings come at a time when the regulatory landscape is changing. The Cyber Resilience Act, effective since late 2024, mandates demonstrable security throughout digital products' lifecycles starting in 2027. This regulatory pressure is driving German car manufacturers to invest in secure vehicle architectures (26.6%) and OTA update systems (20.6%) in the coming years.

The survey results also reflect the reality of the industry, with less than half of the surveyed automotive companies (47 percent) believing in their cyber defense capabilities. This lack of confidence was evident in a recent attack on British carmaker Jaguar Land Rover, which resulted in a global IT outage with severe disruptions in production and sales.

As the automotive industry continues to digitise and connect vehicles, the focus on cybersecurity will only grow. The survey findings underscore the need for improved infrastructure, personnel, processes, and investment in cybersecurity solutions to protect against the growing threat of cyber attacks.