LIVE · cybersecurity feed
Live wire
privacymedium

Your next car could be watching your face

New car buyers in the European Union will soon find their vehicles equipped with mandatory driver-monitoring technology, a measure designed to enhance road safety. This requirement, effective July 7, 2026, mandates systems like Driver Drowsiness and Attention Warning (DDAW) and Advanced Driver Distraction Warning (ADDW) in all new vehicles sold within the bloc. The United States is also moving…

ZeroDay News ·

Source: Malwarebytes Labs

New car buyers in the European Union will soon find their vehicles equipped with mandatory driver-monitoring technology, a measure designed to enhance road safety. This requirement, effective July 7, 2026, mandates systems like Driver Drowsiness and Attention Warning (DDAW) and Advanced Driver Distraction Warning (ADDW) in all new vehicles sold within the bloc. The United States is also moving in a similar direction, with the National Highway Traffic Safety Administration (NHTSA) directed by the 2021 Infrastructure Investment and Jobs Act to develop regulations for advanced impaired driving prevention technology in new passenger vehicles.

While the specific implementation details are not yet finalized in the US, camera-based systems are widely anticipated. Many current technologies utilize infrared cameras to continuously monitor the driver's face and eyes for indicators of drowsiness, distraction, or potential impairment. This widespread adoption of monitoring technology, however, has sparked considerable debate among privacy advocates and civil liberties experts.

Key concerns revolve around the potential for constant biometric surveillance within the private space of a vehicle. Infrared cameras and other sensors can track eye movement, pupil dilation, and drowsiness patterns, effectively turning cars into environments where biometric data is perpetually assessed. This raises questions about who has access to this sensitive information and how it might be used.

Furthermore, the flow of data from these systems remains unclear, with worries that biometric data could be uploaded to manufacturer servers and potentially shared with third parties, such as insurance companies. While not explicitly mandated by law, critics fear this data could be used to adjust insurance premiums based on driving behavior, a practice that has precedents in other contexts.

Beyond privacy, the integration of these advanced systems is expected to increase vehicle costs, with estimates ranging from $100 to $500 per vehicle. This added expense is likely to be passed on to consumers already facing elevated car prices, despite the potential benefits to insurers through reduced accident claims.

Technical readiness and the potential for false positives are also significant concerns. Automakers worry that systems may not be fully reliable, leading to incorrect assessments of driver impairment. Poorly calibrated models could misinterpret fatigue, certain disabilities affecting eye or facial patterns, or even momentary distractions as impairment, potentially leading to the denial or limitation of vehicle operation.

Another area of concern is the evolving nature of these systems. Integrated into broader automotive software stacks, these monitoring technologies may receive over-the-air updates. This could lead to expanded monitoring capabilities after a vehicle has been purchased, without explicit consent or awareness from the owner.

Even organizations dedicated to road safety, like Mothers Against Drunk Driving (MADD), have voiced caution, emphasizing that vehicle technology standards must protect driver privacy and prevent the misuse of collected data for commercial or malicious purposes. Consumers looking to mitigate these risks when purchasing a new vehicle are advised to carefully review manufacturer privacy documentation, inquire about data retention and sharing practices, and disable optional features that may collect or share sensitive driver data.

privacyautomotivebiometricsregulationsurveillance
ShareXLinkedInWhatsAppFacebook

More News

view all →
security

Canadian cybersecurity executive arrested in federal extortion case

A Canadian cybersecurity executive was arrested in Pennsylvania on Thursday, facing federal charges of conspiracy to commit extortion. Edward Dubrovsky, 54, a co-founder and former Chief Operating Officer of CYPFER, a firm specializing in ransomware negotiation, is charged with conspiring to threaten the confidentiality of information for extortion and conspiring to commit Hobbs Act extortion,…

breach

Criminal IP Introduces AITEM as the Next Evolution of Attack Surface Management

AI SPERA, the company behind the cyber threat intelligence platform Criminal IP, has announced AITEM (AI-Powered Threat Exposure Management), an expansion of its Attack Surface Management (ASM) offerings. AITEM aims to move beyond traditional asset discovery to provide a more comprehensive approach to understanding, prioritizing, and responding to security exposures. The platform is scheduled…

ai

AI Is Getting Really Good at Messing With Cybercriminals

Anti-cybercrime initiatives are increasingly deploying artificial intelligence to disrupt scammers by engaging them with lifelike bots, which the criminals mistake for genuine victims. This strategy aims to waste scammers' time and resources while gathering intelligence on their operations.

ransomware

FBI Arrests Ransomware Negotiation Firm Co-Founder in ShinyHunters Probe

The Federal Bureau of Investigation (FBI) has reportedly arrested Edward Dubrovsky, a co-founder of the ransomware negotiation firm Cypfer and currently associated with CyberSteward. The arrest is said to be part of the ongoing ShinyHunters investigation, specifically in connection with an incident involving FBI job applicant data.

ai

The Third-Party Agent Problem: Why Security Built for AI You Chose Misses the Agents You Didn't

A new report highlights a significant blind spot in enterprise security architectures concerning the proliferation of third-party AI agents. The forthcoming 2026 State of Agent Security Report indicates that current security models, often designed to protect AI systems directly chosen and deployed by an organization, frequently fail to account for AI capabilities embedded within third-party…

security

Insider Cyber Extortion Plot Against Industrial Firm Lands Engineer in Prison

A former core infrastructure engineer has been sentenced to prison for an attempted cyber extortion plot against an industrial firm. The engineer reportedly deleted administrative accounts and reset hundreds of user passwords, subsequently demanding a ransom of 20 Bitcoin to prevent further disruption to the company's servers.