The OTA Loop as Attack Surface: Evidence, Exposure and Rules

The OTA Loop as Attack Surface

Over-the-air update channels that fix fleets and can also break them.

OTA software fixes covered 25.7% of China's recalled vehicles in 2025, but only about 2.9% of US recalled vehicles from 2021 to 2025. Tesla is the outlier at 99% OTA, and China now requires filing and user consent before an update.

Evidence

The same channel that delivers a fix can deliver a fleet-wide failure

Documented cases: the OTA Loop
Date	Case	Country	What happened	Source
Jul 19, 2024	CrowdStrike content update	Global	About 8.5 million devices stuck in boot loops	Source
2024	Tesla recalls	United States	15 recalls covering 5.1 million vehicles, 99.23% fixed over the air	Source
Feb 25, 2025	MIIT and SAMR OTA notice	China	Updates need filing; using OTA to hide defects is banned	Source
Mar 19, 2026	China 2025 recall statistics	China	190 recalls, 13 by OTA	Source

Registry

Two registry incidents involve the OTA loop

Registry incidents meet a stricter bar than the cases above: public sources name the developer, the failed control and who found it.

Registry incidents linked to this risk
Incident	Date	Agent	Control that failed
Tesla Recalls Autopilot After NHTSA Investigation	Dec 2023	Level 2 driver assistance	Driver engagement controls too weak for the system's reach
Waymo Robotaxis Pass Stopped School Buses	Sep 2025	Robotaxi	School bus stop behavior in the driving software

Exposure

Eight of 17 agent types rate very significant or critical on OTA and update pipeline

From the attack surface ratings, the agent types where this risk has the widest path in.

Agent types most exposed
Agent type	Dimension	Rating
Fleets and swarms	OTA and update pipeline	Critical
Robotaxis and autonomous vehicles	OTA and update pipeline	Very significant
Humanoid robots	OTA and update pipeline	Very significant
Autonomous trucks	OTA and update pipeline	Very significant
Phones and tablets	OTA and update pipeline	Very significant
Vehicle cabin AI	OTA and update pipeline	Very significant
Smart home assistants	OTA and update pipeline	Very significant
Medical devices	OTA and update pipeline	Very significant

Controls that bound it

Identity and Cryptographic Attestation: who or what is acting, proven cryptographically
Telemetry Integrity: whether the data feeding an agent has been tampered with
Monitoring and Anomaly Detection: seeing failures and misuse while they happen

Rules

China and UNECE markets regulate the update loop; the US treats OTA as a recall remedy

Rules that address the OTA loop
Rule	Jurisdiction	What it requires	Status
GB 44496-2024	China	Software update management; user notice and confirmation	Applies Jan 1, 2026
MIIT and SAMR OTA filing notice	China	Filing before update; consent	Feb 25, 2025
UN R155 and R156	UNECE	Certified cybersecurity and update management	All new EU vehicles from Jul 2024
49 CFR 573	US	OTA counts as a recall remedy	In force

Status colors: green in force, blue voluntary standard or framework, amber adopted and phasing in, gray draft or pending, red withdrawn.

Record

Page Record

Risk group: Risks Hub
Datasets: ai_risk_evidence.csv (4 rows); registry incidents (2 linked); ai_attack_surface.csv
Key sources: CrowdStrike content update
Tesla recalls
MIIT and SAMR OTA notice
China 2025 recall statistics
Last verified: October 2026