Overview
- Oslo operator Ruter confirmed a clandestine cybersecurity test showed certain Yutong electric buses could be remotely stopped and controlled from abroad.
- Access ran via an electronic SIM routed through Romania, enabling full diagnostic data visibility and remote actions including opening, closing and locking driver doors.
- Yutong told Aftenposten that only auxiliary systems such as climate control and lighting are operable remotely, rejecting any remote control of steering, brakes or driving.
- Ruter is drafting procedures to exclude such risks in future purchases and operators are removing SIM cards, delaying updates for inspection, and noting onboard cameras are not internet-connected.
- About 850 Yutong buses are affected within more than 1,350 Chinese-made e-buses nationwide, while a Dutch VDL vehicle tested showed no comparable cybersecurity risk.