Skip to main content
VendorsPCA Cyber Security

PCA Cyber Security

Cybersecurity reports and statistics published by PCA Cyber Security

8 categories2 reports

Recent Statistics & Reports

Kenwood DNR1007XR aftermarket head unit exposes a Linux login prompt over UART at 115200 bps via a hidden board-edge connector

5/27/2026
Automotive CybersecurityInfotainmentKenwood

Ransomware group exfiltrated nearly 1 TB of data from a major Asian vehicle manufacturer's customer and dealership environment in early January 2026 via a third-party vendor

5/27/2026
Automotive CybersecurityRansomwareThird-Party Vendor

Delta Alarm cyberattack disabled mobile-app vehicle controls for hundreds of thousands of Russian vehicle owners for up to two weeks in late January 2026

5/27/2026
Automotive CybersecurityTelematicsCloud Hijack

Delta Alarm took approximately five days to restore partial functionality and nearly two weeks to fully recover from the cloud control plane attack

5/27/2026
Automotive CybersecurityTelematicsIncident Response

US Commerce Department rule prohibits Chinese and Russian connected-vehicle software starting Model Year 2027

5/27/2026
Automotive CybersecurityRegulationUS Commerce

US connected vehicle hardware restrictions arrive for Model Year 2030 or January 1, 2029 for non-model-year components

5/27/2026
Automotive CybersecurityRegulationHardware

US connected vehicle rule covers vehicles under 10,001 pounds

5/27/2026
Automotive CybersecurityRegulationConnected Vehicles

China's amended Cybersecurity Law took effect on 1 January 2026 (passed 28 October 2025) with raised penalties and extraterritorial reach

5/27/2026
Automotive CybersecurityRegulationChina

64 distinct CWEs mapped in Q4 2025, down from 82 in Q3 2025

5/27/2026
Automotive CybersecurityCWEs

Over 100 advertised leaks and ransomware breaches targeted the automotive supply chain on the dark web in Q4 2025

5/27/2026
Automotive CybersecurityDark WebRansomware

UK SI 2025/1110 mandates UN R155 and R156 for type-approval effective 13 November 2025

5/27/2026
Automotive CybersecurityRegulationUNECE R155

EU Delegated Regulation 2025/1455 extends UN R155 to L-category vehicles: new types compliant by 11 December 2027, existing types by 11 June 2029

5/27/2026
Automotive CybersecurityRegulationEU

ControlLoc adversarial attack on AV object trackers achieved up to 98.5% success digitally and over 79% in physical tests against the Baidu Apollo stack

5/27/2026
Automotive CybersecurityAutonomous VehiclesAdversarial AI

US Tier-1 automotive supplier had approximately 1.9 TB of internal files publicly posted on an extortion site at the end of October 2025

5/27/2026
Automotive CybersecurityTier-1 SupplierExtortion

Japanese vehicle manufacturer's customer management environment breach exfiltrated roughly 900 GB in December 2025

5/27/2026
Automotive CybersecurityCRM BreachJapan

Japanese vehicle manufacturer third-party cloud compromise exposed around 21,000 customer records in December 2025

5/27/2026
Automotive CybersecurityThird-Party CloudCRM

German aftermarket parts and distribution business had 1.4 TB of internal data advertised on underground forums in December 2025

5/27/2026
Automotive CybersecurityAftermarketGermany

Showing 41-57 of 57 results