265 unique automotive-specific vulnerabilities identified in Q1 2026

28% increase in automotive vulnerabilities in Q1 2026 compared to Q4 2025

83% of CISOs report being confident in their businesses' ability to recover from ransomware.

42% of CISOs report legacy system patching is the second most challenging ransomware mitigation method.

In-vehicle and Backend systems accounted for more than 81% of Q1 2026 automotive vulnerability targets

PCA identified 14 unique methods of entry in the Q1 2026 automotive threat landscape

Phantom hacker scams are a concern for more than 56% of Americans aged 55 to 64 and those 65 and older.

Pwn2Own Automotive 2026 had a record 73 entries

Quarkslab's audit of EVerest open-source EV charging stack found 6 high-severity, 6 medium-severity, 5 low-severity and 3 informational issues

70% of malicious PDFs contain QR codes leading to phishing websites.

Ultra-Fast Wireless Charging hack drained 76% of EV power on the Alpitronic HYC50 commercial DC fast charger

Small organizations remediate vulnerabilities fastest, averaging 14–18 days to fix exposures.

Ransomware group exfiltrated nearly 1 TB of data from a major Asian vehicle manufacturer's customer and dealership environment in early January 2026 via a third-party vendor

Organizations in the 5,000–10,000 employee range average 56 days to remediate exposures.

Delta Alarm cyberattack disabled mobile-app vehicle controls for hundreds of thousands of Russian vehicle owners for up to two weeks in late January 2026

Delta Alarm took approximately five days to restore partial functionality and nearly two weeks to fully recover from the cloud control plane attack

US Commerce Department rule prohibits Chinese and Russian connected-vehicle software starting Model Year 2027

US connected vehicle hardware restrictions arrive for Model Year 2030 or January 1, 2029 for non-model-year components

US connected vehicle rule covers vehicles under 10,001 pounds

Banks remediate exposures in 11 days on average.