- What: Tire pressure sensors can be exploited for silent tracking
- Impact: Vehicles may be tracked without user knowledge
TechTarget and Informa Tech’s Digital Business Combine. Dark Reading Resource Library Black Hat News Omdia Cybersecurity Advertise NEWSLETTER SIGN-UP Cybersecurity Topics World The Edge DR Technology Events Resources ICS/OT SECURITY CYBER RISK THREAT INTELLIGENCE DATA PRIVACY NEWS Vehicle Tire Pressure Sensors Enable Silent Tracking Like many other features and systems in modern cars, tire pressure sensors leak sensitive data that can be abused by threat actors. Jai Vijayan,Contributing Writer March 3, 2026 3 Min Read SOURCE: TRONG NGUYEN VIA SHUTTERSTOCK Most people would never imagine that the innocuous tire pressure monitoring system (TPMS) in their vehicles could be used to track their movements. But, as with many things digital, it turns out the feature, designed for vehicle safety and maintenance, can also expose unintended signals that enable precisely that capability. Low Cost Vehicle Tracking A team of researchers from universities in Spain, Switzerland, and Luxembourg recently conducted a study where they deployed a small network of low-cost spectrum receivers, priced at around $100 each, along a road to capture TPMS transmissions from passing vehicles. Their goal was to explore the potentially sensitive information they could infer by analyzing the TPMS transmission data from a set of 12 test vehicles. Over a 10-week period, the researchers gathered more than six million TPMS transmissions from some 20,000 vehicles that used the road. The researchers then used custom-developed algorithms to try and match TPMS signals from each of the different tires on a vehicle to the same car and from there to infer movement of the 12 vehicles in the study. Related:Quantum-Resistant Data Diode Secures Sensitive Data on Edge Devices, Critical Systems "Our results show that TPMS transmissions can be used to systematically infer potentially sensitive information such as the presence, type, weight or driving pattern of the driver," the researchers noted in a research paper. Anyone can misuse a TPMS signal to track vehicles and, by extension, the movements of their owners, the researchers said. TPMS sensors — mandated in the US since 2007 — transmit tire pressure readings automatically and at regular intervals whenever a vehicle is in motion. It requires no pairing or authentication and cannot be disabled without compromising the safety function it is designed to provide. The data is sent wirelessly to a receiver module, which is often integrated with the vehicle's onboard computer or a dedicated TPMS controller. The receiver monitors tire pressure and triggers a dashboard alert if the pressure drops below a predetermined safe threshold. In the Clear (Text) The security issue the researchers discovered is that TPMS transmissions are sent over the air in clear text without any authentication. Thus, anyone with a receiver capable of picking up that frequency — like the $100 devices the researchers used — can intercept the transmission from outside the vehicle, just as the vehicle's own internal receiver can. As the researchers noted in their report, previous studies have "highlighted that TPMS signals can be intercepted up to 40m from the car." Their own study showed data capture is possible from 50 meters away from a vehicle and even when a receiver might be located inside a building without any nearby windows. Related:'Richter Scale' Model Measures Magnitude of OT Cyber Incidents What makes the tracking itself possible is the fact that when a sensor transmits tire pressure data, it includes a unique ID so the vehicle's TPMS control module can tell which specific tire the data is coming from. The unique IDs also allows the control module to ignore signals from other vehicles nearby. "Researchers have discovered that most TPMS sensors transmit a unique identifier in clear text that never changes during the lifetime of the tire," the researchers pointed out. "This unencrypted wireless communication makes the signals susceptible to eavesdropping and potential tracking by any third party in proximity to the car." The finding adds to a growing body of research showing how modern vehicles have become unintended platforms for all kinds of surveillance and exploits. Modern cars contain numerous components that emit signals that can be intercepted, analyzed, and exploited in ways the equipment manufacturers never intended. Researchers previously demonstrated how to track vehicles through their keyless entry fobs, spy on drivers through in-car entertainment systems, and even remotely manipulate safety-critical functions through connected diagnostic ports. Related:OT Attacks Get Scary With 'Living-off-the-Plant' Techniques About the Author Jai Vijayan Contributing Writer Jai Vijayan is a seasoned technology reporter with over 20 years of experience in IT trade journalism. He was most recently a Senior Editor at Computerworld, where he covered information security and data privacy issues for the publication. Over the course of his 20-year career at Computerworld, Jai also covered a variety of other technology topics, including big data, Hadoop, Internet of Things, e-voting, and data analytics. Prior to Computerworld, Jai covered technology issues for The Economic Times in Bangalore, India. Jai has a Master's degree in Statistics and lives in Naperville, Ill. More Insights Industry Reports ThreatLabz 2025 Ransomware Report The Total Economic Impact™ Of Zscaler Private Access (ZPA) Zscaler ThreatLabz 2025 VPN Risk Report GigaOm Radar for CNAPP The Total Economic Impact™ of Google SecOps Access More Research Webinars Building a Robust SOC in a Post-AI World Retail Security: Protecting Customer Data and Payment Systems Rethinking SSE: When Unified SASE Delivers the Flexibility Enterprises Need Securing Remote and Hybrid Work Forecast: Beyond the VPN AI-Powered Threat Detection: Beyond Traditional Security Models More Webinars You May Also Like ICS/OT SECURITY Critical Telnet Server Flaw Exposes Forgotten Attack Surface by Rob Wright JAN 27, 2026 ICS/OT SECURITY Undocumented Radios Found in Solar-Powered Devices by Robert Lemos, Contributing Writer SEP 12, 2025 ICS/OT SECURITY How Has IoT Security Changed Over the Past 5 Years? by Arielle Waldman SEP 05, 2025 CYBERATTACKS & DATA BREACHES DeepSeek Breach Opens Floodgates to Dark Web by Emma Zaballos APR 22, 2025 Editor's Choice VULNERABILITIES & THREATS Cisco SD-WAN Zero-Day Under Exploitation for 3 Years byRob Wright FEB 26, 2026 4 MIN READ ICS/OT SECURITY 'Richter Scale' Model Measures Magnitude of OT Cyber Incidents byKelly Jackson Higgins FEB 25, 2026 6 MIN READ THREAT INTELLIGENCE Enigma Cipher Device Still Holds Secrets for Cyber Pros byBecky Bracken FEB 23, 2026 3 MIN READ 2026 Security Trends & Outlooks THREAT INTELLIGENCE Cybersecurity Predictions for 2026: Navigating the Future of Digital Threats JAN 2, 2026 CYBER RISK Navigating Privacy and Cybersecurity Laws in 2026 Will Prove Difficult JAN 12, 2026 ENDPOINT SECURITY CISOs Face a Tighter Insurance Market in 2026 JAN 5, 2026 THREAT INTELLIGENCE 2026: The Year Agentic AI Becomes the Attack-Surface Poster Child JAN 30, 2026 Download the Collection Keep up with the latest cybersecurity threats, newly discovered vulnerabilities, data breach information, and emerging trends. Delivered daily or weekly right to your email inbox. SUBSCRIBE Webinars Building a Robust SOC in a Post-AI World THURS, MARCH 19, 2026 AT 1PM EST Retail Security: Protecting Customer Data and Payment Systems THURS, APRIL 2, 2026 AT 1PM EST Rethinking SSE: When Unified SASE Delivers the Flexibility Enterprises Need WED, APRIL 1, 2026 AT 1PM EST Securing Remote and Hybrid Work Forecast: Beyond the VPN TUES, MARCH 10, 2026 AT 1PM EST AI-Powered Threat Detection: Beyond Traditional Security Models WED, MARCH 25, 2026 AT 1PM EST More Webinars White Papers Industry Report: AI, SOC, and Modernizing Cybersecurity The Threat Prevention Buyer's Guide: Find the best AI-driven threat protection solution to stop file-based attacks. Assessing Security Architectures: Zero Trust vs. Network-Centric Models 5 Steps to Stop Ransomware With Zero Trust 10 Ways a Zero Trust Architecture Protects Against Ransomware Explore More White Papers GISEC GLOBAL 2026 GISEC GLOBAL is the most influential and the largest cybersecurity gathering in the Middle East & Africa, uniting global CISOs, government leaders, technology buyers, and ethical hackers for three power-packed days of innovation, strategy, and live cyber drills. 📌 BOOK YOUR SPACE Discover More Black Hat Omdia Working With Us About Us Advertise Reprints Join Us NEWSLETTER SIGN-UP Follow Us Copyright © 2026 TechTarget, Inc. d/b/a Informa TechTarget. This website is owned and operated by Informa TechTarget, part of a global network that informs, influences and connects the world’s technology buyers and sellers. All copyright resides with them. Informa PLC’s registered office is 5 Howick Place, London SW1P 1WG. Registered in England and Wales. TechTarget, Inc.’s registered office is 275 Grove St. Newton, MA 02466. Home| Cookie Policy| Privacy| Terms of Use