Automotive Cybersecurity Market 2025 to 2032: Software-Defined Vehicles and the Mandatory Security Layer/Alert detail
MediumMarketSignal detected 5d ago
Targeted OTA Software Supply Chain Vulnerabilities Identified in IVI Systems (August 2026)
Automotive Cybersecurity Market 2025 to 2032: Software-Defined Vehicles and the Mandatory Security Layer →What Changed
Security researchers uncovered a critical campaign targeting Android-based in-vehicle infotainment (IVI) systems via the 'TWCore' system application. Hackers injected malware into the update cache to deploy a reverse-proxy module ('zhima'), compromising car displays into botnet nodes. This vulnerability demonstrates how OTA software supply chains can be weaponized if system applications lack stringent cryptographic verification.
At a Glance
Severity
Medium
Likelihood
High
Spend Exposed
-
Add your annual spend to quantify exposure:
$
Confidence
90%
Recommended Actions 1
Mandate end-to-end cryptographic verification and SBOMs for tier-1 software suppliers.
Enforcing strict code-signing integrity and software bill of materials prevents untrusted software injections into OTA update caches.
Evidence 2