Loading story…
Reports from industry policy groups say the U.S. auto sector remains strategically important but has lost ground in global market share, production, domestic content, and trade performance as import competition, offshoring, and transplant manufacturing reshaped North American vehicle production. The findings describe China as the dominant force in automotive and electric vehicle manufacturing, with major gains in EV output, battery production, patents, and exports, while Mexico has expanded as a key regional manufacturing hub and intensified pressure on U.S.-based production.
The publications call for a stronger U.S. industrial strategy for motor vehicles, arguing that the country retains advantages in some advanced technologies such as autonomy but trails in electrification and faces mounting competitive pressure from Chinese EV makers. A separate warning on connected vehicles says the challenge is no longer limited to manufacturing capacity, highlighting growing concern that foreign-linked vehicle technology and supply chains near U.S. borders could create broader economic and security risks for the American automotive base.
See the reporting duties and controls this puts on the clock.
1 event from the most recent confirmed update back to the earliest known activity.
On March 23, 2026, the Information Technology and Innovation Foundation published a report assessing the evolving global competitiveness of the U.S. auto industry. The report argues that the industry remains strategically important but has declined substantially relative to foreign competitors, especially China.
Vulnerabilities, threat actors, malware, products, organizations, and breaches Mallory has linked to this story.
See what this changes for your reporting obligations and which controls it puts on the clock.
4 references tracked. Mallory keeps watching after this page renders.
americanmanufacturing.org
Open sourceitif.org
Open sourceitif.org
Open sourceitif.org
Open sourceMap indicators from this story to your assets and identify affected systems in minutes.
Every observed campaign, victim, and pivot linked to actors named in this story.
Malware, exploits, and IOCs connected to the activity described here.
YARA, Sigma, and Snort rules deployed to your SIEM as soon as they’re published.
Get matching new stories delivered to your team as they break — not the next morning.
Ask questions about this story and take action on the answers.
Other stories Mallory is tracking that overlap on entities, sources, or topic labels.
Automotive cybersecurity is facing unprecedented challenges as vehicles become increasingly connected and autonomous, exposing them to a wide array of cyber threats. Industry leaders emphasize that a mature automotive cybersecurity program must go beyond compliance checklists and frameworks, such as ISO standards, by implementing tailored risk management strategies that address the unique threat landscape of each organization. External audits and maturity scoring are essential for organizations to understand their security posture, but these must be complemented by proactive controls and continuous monitoring across all enterprise assets, including cloud environments. The complexity of cloud configurations in automotive systems requires specialized monitoring tools and skilled cybersecurity teams to maintain visibility and respond to incidents around the clock. Supply chain risks are a significant concern, as vulnerabilities can be introduced through third-party components and software, necessitating rigorous vendor assessments and ongoing oversight. Regulatory requirements, such as UNECE WP.29, are shaping the industry’s approach to cybersecurity, mandating robust processes for risk assessment, incident response, and ongoing compliance. The integration of artificial intelligence and emerging technologies is both an opportunity and a challenge, as these tools can enhance detection and response but also introduce new attack vectors. Real-world penetration testing of autonomous vehicles has revealed critical vulnerabilities, such as the ability to hijack navigation systems through entertainment consoles, demonstrating that smart features can become security liabilities if not properly protected. Autonomous vehicles, functioning as data centers on wheels, are constantly connected to external networks, making them susceptible to remote attacks that can compromise safety-critical functions like braking and navigation. Sensor spoofing is another major risk, as attackers can manipulate the vehicle’s perception of its environment, potentially leading to dangerous outcomes. The automotive industry must prioritize complete threat surface visibility, including all connected components and communication channels, to effectively defend against sophisticated cyber threats. Smaller organizations face resource constraints, but the investment in comprehensive cybersecurity measures is justified by the potential financial and reputational damage of a breach. Continuous improvement, driven by metrics and real-world testing, is necessary to keep pace with evolving threats. Collaboration between manufacturers, suppliers, and cybersecurity experts is vital to address the complex ecosystem of modern vehicles. As the industry moves toward greater automation and connectivity, the stakes for automotive cybersecurity have never been higher, requiring a holistic, adaptive, and forward-looking approach to protect both vehicles and their occupants.
Jun 29, 2026
The automotive industry faces increasing cybersecurity challenges as vehicles and manufacturing processes become more digitized and interconnected. Modern vehicles now rely heavily on digital electronics, with systems controlling everything from engines and safety features to infotainment and connectivity, making them susceptible to a wide range of cyber threats. The convergence of IT and operational technology (OT) in automotive manufacturing means that a cyberattack can disrupt both production lines and retail operations simultaneously, potentially leading to operational paralysis. Recent incidents have highlighted how attacks on a single system can cascade throughout the entire automotive ecosystem, affecting suppliers, vendors, and end customers. Notably, attacks are no longer limited to individual vehicles; threat actors now target manufacturers' servers, as seen in the 2024 Toyota breach where 240GB of sensitive data, including customer information and internal network details, was compromised. This breach demonstrated the scale of risk, with a single server compromise potentially impacting millions of vehicles. The industry’s reliance on cloud-based systems for customer relationship management and advanced analytics for supply chain optimization further increases the attack surface. Regulatory bodies such as the United Nations have responded by introducing standards like UN R155 and UN R156, which set cybersecurity and software update requirements for automakers, and ISO/SAE 21434:2021, which provides guidelines for mitigating cyber risks throughout the vehicle lifecycle. Compliance with these standards is critical, as non-compliance can result in costly mass recalls and reputational damage. The need for resilience extends beyond data protection; manufacturers must ensure that their operational processes can withstand and recover from cyber incidents that may not involve data theft but can halt production. The interconnectedness of automotive systems means that a ransomware attack or intrusion into factory control systems can be as damaging as a breach of intellectual property. As the demand for new vehicles peaks during certain seasons, the impact of cyber disruptions can be even more pronounced. The industry is urged to adopt a holistic approach to resilience, integrating cybersecurity into every aspect of operations, from design to decommissioning, to safeguard both digital and physical assets. The evolving threat landscape requires continuous adaptation and proactive measures to protect against increasingly sophisticated attacks targeting the automotive sector.
Jun 29, 2026
U.S. lawmakers were warned during a House Homeland Security subcommittee hearing that **Chinese-developed AI-enabled robots** could create security risks extending beyond traditional cyberattacks. Witnesses said these systems combine data collection, network connectivity, and real-world operational access in ways that could enable surveillance, operational disruption, and even physical harm if deployed in sensitive environments. The hearing focused on robotics platforms from companies tied to mainland China and the growing use of such systems across **logistics, manufacturing, energy, and public safety**. Industry representatives told lawmakers that Beijing's industrial strategy, including initiatives such as **"Made in China 2025"** and state-backed investment, is accelerating both domestic deployment and global market penetration, raising concerns that vulnerable or compromised robotic systems could be embedded in economically critical and operationally sensitive sectors.
Jun 29, 2026