Risky Chinese Electric Buses Spark Aussie Gov't Review

Risky Chinese Electric Buses Spark Aussie Gov’t Review

Australia is investigating whether Chinese-made Yutong electric buses, deployed across its major cities, pose a national security risk due to potential remote access and a perceived “kill switch” capability. Currently, there are 133 electric city buses and 12 electric charter/coach buses from Yutong operating in Australia.

January 22, 2026

Australia’s government is investigating whether a brand of Chinese-made electric buses on the streets of its major cities pose a national security risk.

Why This Matters

Modern connected vehicles, while offering efficiency and convenience, inherently introduce cybersecurity risks due to their reliance on network connectivity. Idealized security models assume robust authentication and encryption, but real-world implementations often lack these protections, leaving systems vulnerable to compromise. The potential impact of a compromised fleet of public transport vehicles could range from service disruption to data breaches, costing cities millions in remediation and impacting public safety.

Key Insights

• CAN Bus Vulnerability: Researchers found Yutong’s control system interfaces directly with the CAN bus, lacking authentication and encryption (Ruter Report, 2024).
• OTA Updates & Control: The ability for manufacturers to remotely access and potentially control vehicle functions via over-the-air (OTA) updates presents a significant security concern.
• Supply Chain Risk: China’s Cybersecurity and National Intelligence Laws can compel companies to cooperate with intelligence gathering, raising concerns about data security and potential exploitation.

Practical Applications

• Use Case: City of Oslo, Norway, conducted security assessments on Yutong buses to identify vulnerabilities before widespread deployment.
• Pitfall: Relying on vendor assurances of security without independent verification can lead to undetected vulnerabilities and potential compromise.

References:

• https://www.darkreading.com/cyber-risk/chinese-electric-buses-aussie-govt