A head unit is the vehicle’s central infotainment computer. It typically runs the touchscreen, media playback, navigation, Bluetooth, app support, and network connectivity, and in some vehicles it runs a full Android-based operating system.
In cyber security, head units matter because they are always-on, internet-connected endpoints with update paths and software ecosystems that attackers can abuse. Threats include malicious app installation, persistence through firmware or updater abuse, and covert use of the device for proxying, ad fraud, or other traffic laundering. A compromised head unit usually poses a data and infrastructure risk first, not an immediate safety-critical takeover. Defenders should track device inventory, restrict sideloading, verify update provenance, segment infotainment traffic, and restore only from trusted vendor firmware when incident response is needed.