# Regulators Review Vehicle Cloud Vulnerabilities

A study of 413 automotive software vulnerabilities found that more than one-third originated in external apps, websites, and cloud services, rather than vehicle hardware or internal networks alone. Regulators in the European Union and United States are reviewing the findings. The report identifies potential demand for connected-vehicle security assessments, secure cloud and over-the-air (OTA) update engineering, and zero-trust controls, but does not announce a specific procurement, funding opportunity, or solicitation.

- Agencies and contractors assessing connected-vehicle systems should account for risks across external apps, websites, and cloud services, not only in-vehicle components and networks.
- Security firms and technology providers may find opportunities in connected-vehicle assessments, cloud security, OTA-update engineering, and zero-trust controls; the signal does not identify a specific buyer or active procurement.
- Organizations planning procurements in this area can use the study’s findings to inform the scope of security assessments and technical requirements for connected-vehicle services.

**Jurisdictions:** international
**Industries:** Information Technology, Transportation
**Topics:** Cybersecurity, Cloud Services
**Published:** October 30, 2026

### Government Entities
- European Union transport safety regulators (EU)
- United States regulators

### Sources
- [Connected vehicle vulnerabilities increasingly stem from external cloud services, researchers find](https://streamlinefeed.co.ke/news/connected-vehicle-vulnerabilities-increasingly-stem-from-external-cloud-services-researchers-find) - https://streamlinefeed.co.ke/