As technology advances, so do the potential risks associated with it. The convergence of electric vehicles (EVs) and smart charging technology has brought about a new set of challenges in the realm of cybersecurity. Recently, at Black Hat USA 2025, Salvatore Gariuolo from Trend Micro shed light on a concerning issue: the ISO 15118 standard, designed for EV smart charging and vehicle-to-grid communications, could be exploited by malicious actors.
The ISO 15118 standard was developed to facilitate communication between EVs and charging stations, streamlining the charging process and enabling vehicle-to-grid capabilities. However, as with any connected system, the introduction of this standard also opens up potential vulnerabilities that threat actors could exploit for nefarious purposes.
Gariuolo’s insights at Black Hat USA 2025 underscore the importance of understanding and addressing these cyber risks proactively. By exploiting weaknesses in the ISO 15118 standard, hackers could potentially launch attacks that disrupt charging processes, manipulate energy flow, or even compromise the security and privacy of EV owners.
Imagine a scenario where a threat actor gains unauthorized access to the communication between an EV and a charging station. This could result in the manipulation of charging parameters, leading to overloading or damaging the vehicle’s battery. Moreover, unauthorized access to vehicle-to-grid communications could enable attackers to control energy distribution, causing power outages or grid instability.
To mitigate these risks, stakeholders in the EV ecosystem must prioritize cybersecurity measures. This includes implementing robust encryption protocols, conducting regular security assessments, and staying informed about emerging threats and vulnerabilities. Collaborative efforts between automakers, charging infrastructure providers, cybersecurity experts, and regulatory bodies are essential to safeguarding EV smart charging systems from potential cyber-attacks.
In conclusion, while the evolution of EV smart charging technology brings about numerous benefits in terms of efficiency and sustainability, it also introduces new cybersecurity challenges that must be addressed. Trend Micro’s Salvatore Gariuolo’s warning at Black Hat USA 2025 serves as a reminder that proactive security measures and vigilance are crucial to protecting EVs and their infrastructure from cyber threats. By staying ahead of potential vulnerabilities and investing in robust cybersecurity practices, the industry can ensure a safer and more secure transition to electric mobility.