Latest / Cybersecurity Under Pressure. Real Attacks, Real Lessons
BYD Shark 6: Remote Access Is Not the Same as Remote Authority
The BYD Shark 6 cybersecurity demonstration raised an important question: when someone gains access to a connected vehicle, how much authority can that access provide?
Fortify Labs' research involved physical access to a 2025 BYD Shark 6 to install software on its Android-based head unit. Subsequent control operated remotely through a researcher-controlled cellular hotspot. The vehicle's original telematics SIM was removed, and separate CAN bus effects were demonstrated using a Raspberry Pi to simulate a compromised ECU.
The demonstration did not establish an internet-only compromise of an…
The skinny
The skinny isn't ready yet — notes appear once the transcript is processed.