Connected Series, Part 1 of 6 | Connected Vehicles
Headline: The car is where this architecture was proven. Everything that follows this week, the plant, the fab, the robot, the battery, is the same pattern moved to a different asset.
This week we are sharing Connected: A Case Study in Six Sections
1. Connected Vehicles (today)
2. Smart Manufacturing and Logistics
3. Semiconductors
4. Robotics
5. Digital Twins
6. Energy and Storage
The Setup
A connected car is any vehicle with a network link to outside systems: the OEM cloud, mobile apps, other vehicles, and road infrastructure. Every one of those connection points is also an attack surface. The threats look like any networked IT system. The consequences are physical.
The Architecture
Five parts carry the load. The Telematics Control Unit is the vehicle’s cellular modem and gateway out. The in-vehicle network, CAN bus plus automotive Ethernet, lets the control units talk to each other. The over-the-air update system pushes software and firmware remotely. The backend cloud handles data, diagnostics, and app connectivity. The Software Update Management System governs all of it.
Risk sits in four places: remote exploitation through the TCU, infotainment, or app APIs; vulnerable components from Tier 1 and Tier 2 suppliers; hijacked OTA updates pushed to a fleet; and exposure of location, driving behavior, and biometric data.
The Compliance Frame: R155 and R156
R155 requires a certified, organization-wide Cybersecurity Management System covering design, production, and in-service monitoring, plus risk assessment, incident response, and supplier verification.
R156 governs how updates are planned, deployed, and verified, with RXSWIN traceability and safe rollback that does not compromise safety-critical systems if an update is interrupted. Both are now a precondition for type approval in major markets.
Note what these regulations actually regulate. They sit on the process, not on the box. That is the single most useful thing to carry into the rest of the week.
Case: Hyundai Motor Group, Owning the Stack
The Group sells into the EU and Korea, both R155 and R156 markets, while converging on one in-house software brand, one consolidated telematics unit, and in-house certification.
Pleos launched as the mobility software brand at the Pleos 25 conference in Seoul in March 2025. The first production deliverable, Pleos Connect, shipped in May 2026 on the new Grandeur in Korea, with the IONIQ 3 in Europe next and a target of roughly 20 million Hyundai, Kia, and Genesis vehicles by 2030. Mobis introduced a 5G antenna-integrated Multi-Function Telematics Control Unit at CES 2026.
AutoEver holds a Level 3 cybersecurity capability certification and earned ASIL-D functional safety certification for its mobilgene platform in February 2025. AllDayEnergy launched in July 2026 as the global V2X brand.
Three design choices raise exposure: continuous OTA feature delivery, which puts R156 discipline on the product roadmap rather than only on recalls; an LLM-based agent that interprets driver intent instead of executing fixed commands; and an open platform giving third-party developers access to automotive endpoints. V2X adds grid interconnection as a new risk category.
Supplier cybersecurity verification is the hardest R155 obligation, because it depends on parties you do not control. Hyundai owns AutoEver, Pleos, and Mobis, so it certifies in house. The advantage is ownership, not technology.
Volvo
Volvo built its connectivity case around safety rather than features. More than one million Volvo models had active OTA capability as of August 2026, and through the European Data for Road Safety ecosystem the alerts reach vehicles Volvo did not build.
Four warnings arrived in 2026 software: Large Animal Alert, Vulnerable Road User Alert, Roadwork Alert, and Accident Ahead Alert.
Sharing safety data outside the brand deliberately widens the R155 boundary.
BCW Take
Two mo, and neither is really a technology strategy. Hyundai reduces exposure by owning the stack. Volvo accepts a wider boundary in exchange for network effect, because a hazard warning is worth more when it reaches cars outside your fleet. Toyota runs software through Woven, Volkswagen through CARIAD. Most other OEMs get neither position and will manage dozens of Tier 1 relationships under an obligation that reaches into every one of them.
Takeaways
- The connected vehicle is a networked system with physical safety consequences. Every connection point is an attack surface.
- R155 and R156 regulate the process, not the product. That pattern repeats every day this week.
- Vertical integration is a compliance strategy before it is a technology strategy.
- Continuous OTA delivery turns compliance from a one-time event into a permanent operating discipline.
Don Southerton
Founder and CEO, Bridging Culture Worldwide
bridgingculture.com
South Korea seeks US visa rule changes after mass arrests spark outrage
I am quoted and contributed to the article …. Don Southerton
KIM JAEWON and PAK YIU
September 11, 2025 12:16 JST
Updated on September 11, 2025 14:47 JST
SEOUL/NEW YORK — Moon Young-ju could not contain his anger when he heard the news that over 300 South Koreans had been detained after U.S. immigration authorities last week raided a joint Hyundai Motor-LG Energy Solution battery factory under construction in the state of Georgia.
The 54-year-old former merchant protested in front of the U.S. Embassy in downtown Seoul on Wednesday with a yellow banner reading: “Yankees go home. Get out america army.”
“I came here because I was so upset,” Moon said after lighting a cigarette. “We invested as they demanded. We built factories as they demanded. It’s our blood, sweat and tears.”
Moon is not alone. South Korea’s government faces widespread public outcry and calls to stand up to the U.S. over the treatment of its arrested citizens, some of whom were seen in footage being led away restrained by body chains, although the two sides have since agreed to send the detained workers home this week on a charter flight.
The raid came as U.S. President Donald Trump pushes ahead with a crackdown on illegal immigration even as he demands that countries like South Korea make massive investments to build state-of-the art production facilities in America — part of his policy of “reshoring” manufacturing and reducing trade deficits.
South Korean President Lee Jae Myung said at a news conference on Thursday that the raid would likely make some companies from his country “hesitant” to carry out more large investments in the U.S. “Companies are quite taken aback. The fact is that they sent these workers to the U.S. not for the long term, but to set up machinery in a factory because there aren’t enough workers in the U.S. who know how to do that,” he said.
The raid and the accompanying national indignation have pushed Seoul to demand that Washington loosen visa rules for workers from abroad amid confusion about the status of the detained.
Lee expressed hope that authorities in the two nations could negotiate changes to visa regulations that would make it easier for South Korean firms to send workers to the U.S. for limited periods.
The government dispatched Foreign Minister Cho Hyun to Washington. The ministry said that he had a meeting with U.S. counterpart Marco Rubio on Wednesday, asking the secretary of state to set up a new visa category for South Korean workers.
He also told Rubio that South Koreans were “hurt and shocked” by the arrests of their compatriots, who came to the U.S. to contribute to the revival of the country’s manufacturing industry.
After arriving on Tuesday, he hosted a meeting with executives from eight South Korean companies operating businesses in the U.S., including LG and Hyundai Motor.
Company executives asked the minister to bring up with the U.S. the potential launch of a separate visa under the E-4 category — which currently covers certain classes of special immigrants — for South Korean professionals, as well as increasing approvals of E-2 visas — which cover professionals with advanced degrees and persons of exceptional ability — for South Korean companies investing in America. They also asked the U.S. government to clarify guidelines for B-1 visas, a short-term business visa that employees of South Korean companies get when they make work trips to the country. Many of the detained South Korean workers held such a visa.
Cho told the businesspeople that their concerns had already been conveyed to Washington and pledged to continue making efforts to ensure the smooth operation of South Korean companies investing in the U.S.
Moon Young-ju stands next to his protest banner near the U.S. Embassy in Seoul on Sept. 10. (Photo by Kim Jaewon)
South Korean companies complain that there is only a limited quota of B-1 visas, meaning they cannot get them when they need them.
“Sometimes we need to send our employees immediately,” said an industry source familiar with the issue, who also requested anonymity. “It’s not easy to set up a plan a year in advance. Many Korean companies raised this issue before. I’m very sorry that [the raid] happened before the problem was resolved.”
The incident has rattled Asian investors who have set up factories in the U.S. and highlights some of the labor difficulties foreign companies face. Companies are now wondering how they can set up and build manufacturing in the U.S. if they don’t have support from the authorities, said Don Southerton, a business consultant who works with South Korean companies such as Hyundai.
He anticipates some projects will slow down, and this will send ripples through America’s battery market. Southerton says the incident underscores the urgency of visa revisions that would allow expat engineers to work more effectively and streamline projects that will foster American manufacturing. Currently, he said, the visa system “allows them to teach how to use a screwdriver but doesn’t actually allow them to use a screwdriver. How can you show them how it’s done without actually demonstrating?”
On Monday, South Korea’s foreign minister said that resolving the visa issue is a precondition for the country to deliver the$150 billion in investments promised during a summit between the two allies last month.
“At the previous summit, there was a request for … [South] Korea’s large-scale investment, and we also responded to it. To achieve it, I would stress to the U.S. side that this visa issue is a precondition,” Cho told lawmakers before his trip to the U.S. capital.
In a post on Truth Social on Sunday, Trump said foreign companies were encouraged to legally bring “your very smart people, with great technical talent, to build World Class products.” He added, “We will make it quickly and legally possible for you to do so. What we ask in return is that you hire and train American Workers.”
Analysts said that South Korea needs to use its investment package as leverage to pressure the Trump administration into reaching an agreement on the issue.
“Because there are already pledges of large-scale investment, it should be possible to solve the visa quota issue within that framework,” said Jung Jae-hwan, a professor of international politics and economy at Inha University in Incheon.
“Of course the U.S. could impose new conditions, such as a certain portion of local hires, but at least they should be able to mitigate the recurrence of this kind of detention case.”
Additional reporting by Steven Borowiec.
South Korea seeks US visa rule changes after mass arrests spark outrage