A Wake-Up Call for Robotaxis: The Cybersecurity Crisis Looming in the Age of Autonomous Vehicles

The recent “tech prank” orchestrated by Riley Walz in San Francisco, where 50 Waymos were simultaneously ordered onto the same street, has exposed a pressing concern that extends far beyond novelty hacking. The incident highlights the rapidly advancing world of robotaxis’ woefully inadequate preparedness for cyber threats to public safety.

The proliferation of autonomous vehicles on our roads has been met with excitement and optimism, but beneath the surface lies a ticking time bomb. Every connected vehicle introduces some degree of cyber risk, as Louay Abdelkader, director of product management at QNX, pointed out in his conversation with Fortune. The debate over robotaxis has focused on more visible concerns: their ability to avoid collisions, liability in accidents, and policing traffic infractions. Cybersecurity has been relegated to the backseat – until now.

Modern attacks are unlikely to target the vehicle itself but rather its broader ecosystem. Disrupted communications can degrade an autonomous system’s ability to navigate safely, putting passengers at risk. The consequences of such incidents could be catastrophic, and it’s only a matter of time before we witness a cyber-related accident involving a robotaxi.

Abdelkader has been sounding the alarm for quite some time, emphasizing that protecting individual vehicles is not enough. “We’re talking about protecting the entire ecosystem around autonomous transportation,” he warns. Policymakers have been slow to grasp the gravity of this issue.

Regulators in jurisdictions like California, Arizona, and Michigan have taken initial steps towards integrating cybersecurity into their regulations for autonomous vehicles. The United Nations’ UN Regulation No. 155 now requires automakers to maintain certified cybersecurity management systems throughout a vehicle’s lifecycle. However, these efforts are still piecemeal and inadequate given the scale of the challenge.

In New York City, Mayor Zohran Mamdani has prioritized labor protection over cybersecurity concerns, focusing on taxi drivers rather than the inherent risks posed by robotaxis. This approach ignores the elephant in the room: that our cities are rapidly becoming hubs for autonomous transportation with little consideration given to their cybersecurity infrastructure.

Abdelkader’s prescription for lawmakers is clear: build upon existing frameworks and don’t wait for a cyber incident to expose weaknesses. Policymakers must recognize that safety and cybersecurity are intertwined – they can’t be treated as separate concerns. This requires collaboration between manufacturers, regulators, and industry experts to establish robust security measures from the ground up.

The recent prank may have been dismissed as a lighthearted stunt by some, but it’s a stark warning sign for what’s to come. As we hurtle towards a future of increasingly connected vehicles, we must confront our collective failure to address the cybersecurity crisis threatening our streets.