With the rapid development of information technology and the increasing maturity of intelligent transportation systems, autonomous vehicles, as an important carrier of future travel, are gradually moving from concept to commercial application. However, the highly connected and intelligent nature of autonomous vehicles also makes them face unprecedented cybersecurity and privacy protection challenges. This paper deeply discusses the security threats and privacy disclosure risks of autonomous vehicles in network architecture, data transmission, data processing and other links, and systematically reviews the current technical means and research progress to address these challenges. This paper Outlines the data collection and transmission mechanism of autonomous vehicles, including the collection and processing of sensor data as well as the communication process between vehicles and the cloud, other vehicles and transportation infrastructure, and analyzes in detail the network security threats faced by autonomous vehicles, including remote control attacks, malware attacks, communication hijacking, etc. These threats can lead to serious consequences such as vehicle failure, data breach, or system crash. At the same time, the paper also points out the challenges faced by autonomous vehicles in terms of privacy protection, such as the risk of leakage of sensitive data such as personal location information and driving habits, as well as the risk of data abuse and sharing. In order to address the above challenges, this paper focuses on the technical research progress of cybersecurity and privacy protection of autonomous vehicles. In the aspect of network security, this paper discusses the key technical means such as data encryption, access control, intrusion detection and response system, and emphasizes the importance of security hardware and software in improving the overall security of the system. In terms of privacy protection, this paper proposes strategies such as anonymization and desensitization technology, privacy protection protocols and standards to protect users' privacy from invasion.