413 Digital Vulnerabilities Threaten Connected Cars: Swedish Study Reveals the Scale of Risk

413 vulnerabilities. That's the number a recent scientific study from researchers at the University of Gothenburg and Chalmers University of Technology in Sweden has brought to light, after analyzing software linked to internet-connected cars. The study also identified 827 software libraries containing security weaknesses — a finding that puts automakers face to face with unprecedented challenges in protecting driver data and electronic systems. The numbers are staggering.

Phone Apps and Cloud Services: The Biggest Weak Point

External applications and services accounted for 36.2% of all analyzed vulnerabilities, making them the largest category of risk sources for connected vehicles. These include the apps owners use on their phones, the websites linked to the vehicle. The cloud services that exchange data with its systems. The irony is that these technologies let drivers perform multiple remote functions — checking battery status in electric cars, locating the vehicle, controlling certain features — yet they open additional attack paths. Attacks become easier when apps have flaws in account management, data protection, or server communication.

January 2022 to September 2024: The Study Window

Published in the scientific journal Software Quality Journal, the study analyzed vulnerabilities recorded between January 2022 and September 2024, then compared them with earlier research on automotive software security from 2010 to 2019. The researchers set out to map how the security landscape has evolved as cars become increasingly dependent on constant internet connectivity. The takeaway: risks are no longer limited to engine failures or brake and steering systems — they now extend to data protection and electronic architecture. Some weak points may even exist outside the car itself, inside a phone app or a manufacturer's cloud service.

Why These Numbers Matter to the Average Owner

The modern car has become an internet-connected device. That means a breach may go beyond data theft and reach control of vital functions. Apps that allow remote unlocking or remote engine start become a perfect entry point for cyberattacks if not properly secured. Automakers face growing pressure to harden these systems, especially as electric vehicles become fully digital platforms. 827 software libraries with weaknesses means the problem isn't in a single app — it runs through the entire software supply chain.

The Bottom Line: Car Security Is No Longer a Luxury

413 vulnerabilities and 827 weak software libraries are numbers that demand attention. The Swedish study found that 36.2% of risks come from external apps and services, meaning securing a car is no longer the manufacturer's responsibility alone — it extends to app developers and cloud service providers. Owners of connected cars need to keep software updates current and ensure the apps linked to their vehicles receive regular security patches. The numbers speak for themselves.