The advent of connected and intelligent vehicles has ushered in a paradigm shift in cybersecurity risks. Recent studies indicate that the most vulnerable security aspect in contemporary vehicles has transitioned from the vehicle's hardware system to the interconnected applications, websites, and cloud services. Serving as the vehicle's control center, these systems harbor sensitive information, including the owner's home address, driving routes, and personal contact details. Should security flaws emerge, hackers could seize control of the vehicle and gain access to the owner's private data. For instance, by the close of 2024, around 800,000 vehicles from brands like Volkswagen and Audi had their owners' precise GPS locations, email addresses, and phone numbers compromised due to inadequate cloud service configurations. Researchers have highlighted that numerous cloud vulnerabilities originate from fundamental mistakes, such as the prolonged use of default passwords. These well-known 'old tricks' in the IT industry have evolved into critical security loopholes in modern vehicles' defense mechanisms.