assuming it's a remote exploit then you can't trust the update code that's on board, because that could be compromised and just pretending to run the update. w

assuming it's a remote exploit then you can't trust the update code that's on board, because that could be compromised and just pretending to run the update. when a system is breached with methods that don't leave a signature a clean reinstall from scratch is the only option. once one to all your system are potentially breached by remote exploits it's recall time. local exploit that require access to the car innards could potentially be patched over the air if the method allows the owner to know if the car was breached into. then it'd be update for safe car and recall for breached cars.