Norwegian public transport operator found that 
Yutong electric buses can be stopped and taken out of service by the manufacturer remotely
Ruter, the public transport operator in Norway's capital Oslo, secretly tested two electric buses this summer — one built by Yutong and the other by 
VDL — and discovered that the Chinese model featured a SIM card which allowed the manufacturer to remotely install software updates. The manufacturer also had remote access to the diagnostics and battery / power supply control system of the bus.
Therefore the bus can theoretically be stopped or rendered unusable by the manufacturer. This is a serious flaw or vulnerability that could allow nefarious actors to take control of the vehicle.
There’s no SIM card in the Dutch model.
“We've found that everything that is connected poses a risk — and that includes buses.”
“There is a risk that for example suppliers could take control, but also that other players could break into this value chain and influence the buses.”
Ruter is now developing a digital firewall to guard against the issue.
The Norwegian government is studying the issue.
“We want to thoroughly assess the risks associated with having buses from countries we do not have security cooperation with.”
Ruter has also tested whether the buses' cameras can send images out of the country. The test concluded that the cameras are not connected to the internet, and that this is therefore not possible.
Ruter operates about 300 Chinese electric buses in Oslo and the surrounding areas.
According to the Norwegian Public Roads Administration, there are approximately 1,350 Chinese buses registered in Norway. About 850 of them are of the Yutong brand.
In June, 140 Yutong buses were deployed in Vestland County.
One in five Skyss buses in the county are from this manufacturer.
Brakar in Buskerud also has several buses from the manufacturer.
m.economictimes.com/news/internati
nrk.no/stor-oslo/rute