Automated City Shuttles (ACS), are they revolutionising urban mobility or compromising privacy and security? This talk, grounded in research by the I-Sec team at the University of Geneva (UNIGE), examines the transformative potential of ACS in enhancing public transportation and logistics while addressing critical cybersecurity and privacy challenges. Drawing from Swiss pilot programmes and findings from penetration tests and privacy risk assessments, we explore vulnerabilities such as data breaches, unauthorised intrusions, and ethical concerns over data collection. By highlighting the balance between innovation and trust, this presentation paves the way for responsibly advancing ACS in urban mobility.