Security becomes part of the vehicle
Wireless connections, apps, diagnostic ports and software updates create useful capabilities and possible routes for cyberattack.
Canvas of Knowledge · 14 November 2026 · Illustrated explainerChinese example
XPENG’s 2025 ESG disclosure describes information-security and vehicle-cybersecurity certifications. Certification concerns a defined scope and process; it does not mean a vehicle is impossible to compromise.
Global engineering task
NHTSA recommends layered protection, risk assessment, vulnerability monitoring and incident response. Safety-critical functions need careful isolation from less-trusted connections.
A lifetime responsibility
Cybersecurity continues after a car leaves the factory. Software provenance, authenticated updates, support policies and responsible vulnerability handling matter throughout its service life.
THE IDEA TO KEEPTrust should rest on sustained engineering and transparent processes, not a claim that any connected car is unhackable.
Sources & further reading
- XPENG · 2025 ESG report, information security →
- NHTSA · Vehicle cybersecurity →
- NHTSA · 2022 cybersecurity best practices →
Sources reviewed 14 November 2026. Specifications and availability depend on the product, market and date. Source organisations do not endorse this website.