BYD confirms hacking claim: Fix developed for 2026 BYD Shark 6 following extensive investigation into the popular ute
Tim covers motoring news at CarsGuide as a News Journalist, having previously reported on football for Football NSW and Football Australia, and interned at ABC Illawarra.
Read full bioCarsGuide puts every effort into ensuring the accuracy of the information it publishes. Double-check the details that matter to you before buying. Learn more about how we fact check.
Key takeaways:
- BYD acknowledged the risk of unauthorised external access to the Shark 6 ute’s developer-only software and key functions
- The brand will release an over-the-air software update to rectify the glitch used in an ABC Four Corner report
- BYD is still investigating if the concerns impact other vehicles in its Australian line-up
BYD has revealed key details following vehicle hacking concerns emerging in an ABC Four Corners investigation.
BYD acknowledged someone can gain unauthorised access to the Shark 6 ute’s developer-only software and also control functions like headlights and windscreen wipers.
The brand said this access can only be approved by a prompt on the ute’s central touchscreen and tapping into vehicle wiring.
It is still investigating whether these issues affect other models in its line-up.
BYD will issue a future over-the-air update to fix software issues and continue to assess what other changes are necessary.
The 2026 BYD Shark 6’s susceptibility to unapproved access
BYD acknowledged a software bug can enable unapproved apps to bypass internal protections and gain access to the Android Debug Bridge (ADB) used for software developers to work on the car.
BYD said someone must manually approve the access via a prompt on the car’s central touchscreen for internal protection to be bypassed.
The brand said cybersecurity expert Dan Hreszczuk in the Four Corners report exploited a software defect to enable the ADB and then install a third-party app.
Subscribe to our newsletter
Stay up to date with the CarsGuide weekly newsletter
By subscribing you agree to our Privacy Policy.
BYD has announced it will remove the software pathway that could approve access through the Shark 6's central touchscreen.
It will roll out this fix in a future over-the-air (OTA) update, following a validation process.
External control of headlights and windscreen wipers on 2026 BYD Shark 6 requires physical access
BYD said someone must tap into vehicle wiring responsible for the Control Area Network (CAN) bus to gain external access to the Shark 6’s headlights and windscreen wipers.
As a result, BYD will implement new security measures, including device authentication and physical isolation to increase cybersecurity safeguards.
It will conduct a risk assessment to evaluate the necessity of additional measures to prevent unapproved access to the vehicle's CAN.
2026 BYD Shark 6 alleged hacking controversy
In a September 2026 ABC Four Corners report, Hreszczuk said he gained remote access to various functions on the BYD Shark 6, including operating the wipers and headlights.
Hreszczuk said by unpicking the software programs controlling different functions on the ute, he could blast music over the speakers and remotely switch the car’s lights on and off.
“It’s a little bit scary how open … the BYD Shark is to a hacker,” Hreszczuk told the ABC.
Why you should trust us
Read More
Tim covers motoring news at CarsGuide as a News Journalist, having previously reported on football for Football NSW and Football Australia, and interned at ABC Illawarra.
About Tim