Event f7cfe13e-83e3-4f7c-a9dd-4b6fcf0bcb67

Approved event from Hybrid War Tracker

Status: Approved Confidence: High Classification: Cyber & Information Warfare > Cyber Attacks > Attacks on critical infrastructure (energy, transport, hospitals) Country: United Kingdom Where: Land Node: Node 1: Borders Tag: China Tag: United Kingdom Tag: Yutong buses Tag: Kill switch Tag: Cyber security Tag: Department for Transport Tag: National Cyber Security Centre Tag: Transport Tag: Public transport Tag: GCHQ Tag: Beijing Tag: Norway Tag: Electric buses Tag: Infrastructure security Aggressor Defense Confidence: High
🕐
Event Time
2w ago
Created
1w ago
✏️
Updated
10h ago

Summary

Headline: Hundreds of British buses have Chinese ‘kill switch’

Short Summary: Hundreds of electric buses in Britain using Chinese Yutong technology could be remotely switched off by Beijing using onboard SIM card vulnerabilities, officials warn.

Extended Summary: A security inquiry launched after Norway raised concerns about Chinese Yutong electric buses revealed that hundreds of similar buses operating in Britain could be remotely disabled by China via a 'kill switch' embedded in the software connected to onboard SIM cards. The UK Department for Transport and National Cyber Security Centre (NCSC) have identified this risk, though government experts state no concrete evidence exists that the function has been used or that the buses can be remotely controlled through their main driving systems. Around 700 Yutong buses are in operation across Britain, employed by major transport groups such as Stagecoach and First Bus. Meanwhile, the UK government is pushing for increased Chinese investment despite the security concerns. The NCSC has confirmed it's technically possible for the buses to be shut down remotely but has not implemented bans on the vehicles, citing lack of concrete evidence and diplomatic considerations. Local authorities such as Nottingham City Council have fully adopted Yutong electric buses. The manufacturer, based in Zhengzhou, China, says the vehicles cannot be controlled remotely as the internet-enabled software is not linked to critical driving controls. Officials at the Department for Transport said they are working closely to understand and mitigate potential risks. No plans exist to place explicit security warnings on buses in the UK, though other countries like Norway have taken protective measures.

Description

Hundreds of electric buses on UK roads using Chinese Yutong technology connected by onboard SIM cards could be remotely disabled by Beijing, UK security agencies warn. The Department for Transport and National Cyber Security Centre believe the buses have a 'kill switch' function for remote software updates but vulnerable to meddling. An inquiry was launched after similar concerns emerged in Norway. The NCSC confirms technical possibility of remote shutdown but no evidence of use or remote control over driving systems such as braking and steering. Around 700 Yutong buses operate in Britain, including fleets in Nottingham and Yorkshire. The UK government is balancing economic growth via Chinese investment and infrastructure while addressing national security risks. The manufacturer denies buses can be remotely controlled over critical functions. The Department for Transport is working with transport sectors to mitigate risks. No UK-wide security warnings are planned.

Event Classification

Aggressor Event Defense Preparation Event

Rationale

Classified as aggressor because the article details a Chinese 'kill switch' capability that could remotely disable British buses, a form of potential hostile cyber interference. Classified as defense because UK authorities including the Department for Transport and the National Cyber Security Centre are actively investigating and collaborating with transport sectors to understand and mitigate these cybersecurity risks.

Evidence

Quotes

"Hundreds of electric buses on Britain’s roads could be remotely switched off by China with a 'kill switch', Britain’s security services have found."
"The NCSC, the public-facing branch of Britain’s GCHQ, said it was 'technically possible' for the buses to be remotely shut down from China."
"Government security experts do not believe there is a serious risk that the buses will actually be remotely switched off, and investigators do not think the 'kill switch' function has yet been used."
"Sources told The Telegraph that the software on most Yutong buses in the UK is updated manually, with a physical cable connection, rather than with 'over the air' wireless technology."
"The company has said that its buses cannot be remotely controlled because their internet-enabled software unit is not connected to the main driving controls, including braking and steering."
"A DfT spokesman said: 'We take security extremely seriously and are working closely across Government and with the transport sector to understand this issue and mitigate potential risks.'"
Subscribe via Weekly Briefs RSS or Approved Events RSS .