Resources | Automotive Cybersecurity Insights

US Connected Vehicle Rule: Live Since March 2025. MY2027/MY2030 Supply-Chain Playbook

The BIS final rule on PRC/Russia-linked connected-vehicle software has been in force since 17 March 2025. Supply-chain certification, MY2027 software and MY2030 hardware deadlines, and a supplier playbook for OEMs that import into the US.

Resources & guides

All articles

US Connected Vehicle Rule: Live Since March 2025. MY2027/MY2030 Supply-Chain Playbook

Euro 7 Anti-Tampering: A Cybersecurity & Software Governance Guide for OEMs

EU Data Act for Connected Vehicles: Build a Secure, Traceable Data-Access Operating Model

Automotive Cybersecurity Assurance Cases: A Practical Guide to Claims, Arguments & Evidence

EV Charging Cybersecurity: Securing ISO 15118, Plug & Charge, OCPP and the Backend

Connected Vehicle API Security: Protecting Telematics, Mobile Apps and Fleet APIs

AI Governance for Automotive Engineering: Control GenAI, Agents, and AI-Generated Artifacts

Autonomous Vehicle Cybersecurity: Building Operational Assurance for ADS and Robotaxi Fleets

Building a Unified CSMS: Why ISO/SAE 21434, R155, R156 & CRA Belong in One Operating Model

Project Baselines & Release Management in ThreatZ

Network Communication Matrix: Signal-Level Security for Connected Vehicles

Programs & Vehicle Architecture: Managing Cybersecurity Across Vehicle Platforms

Mastering Automotive Network Service Discovery Protocols

Digital Certificate Management for Automotive Security

X.509 Certificates in Automotive: The Ultimate Guide

ISO/SAE 21434 TARA: Step-by-Step Implementation Guide

UNECE R155 Type Approval: What OEMs Need to Know

SBOM Management Best Practices for Automotive

Automating TARA with AI: From Manual Worksheets to Continuous Risk Assessment

Attack Trees vs. Attack Paths: Choosing the Right Threat Model for Your ECU Architecture

Mapping STRIDE to Automotive: Threat Categories That Actually Matter for Vehicles

Cybersecurity Goals vs. Security Requirements: Getting the ISO/SAE 21434 Hierarchy Right

CycloneDX vs. SPDX: Which SBOM Format Should Automotive Choose?

Third-Party Component Risk Scoring for Automotive Software

Building a Supplier Cybersecurity Questionnaire That Actually Works

CSMS Audit Preparation: The Evidence Package Checklist

ISO/PAS 5112: Auditing Automotive Cybersecurity — What Auditors Actually Look For

EU Cyber Resilience Act vs. UNECE R155: How They Overlap and Where They Diverge

GB 44495 vs UNECE R155: What Changes for OEMs Entering China

Tier-2 → Tier-1 → OEM Cybersecurity Evidence-Handover Playbook

EU CRA Conformity Roadmap for Automotive Suppliers

Automotive Fuzz Testing: From CAN Bus to Automotive Ethernet

Penetration Testing Connected Vehicles: A Structured Methodology

Building a Vehicle SOC: From IT Security Operations to Automotive Fleet Monitoring

Anomaly Detection on CAN Bus: Machine Learning Approaches That Scale to Production Fleets

Fleet-Wide Incident Response: Playbooks for Connected Vehicle Emergencies

V2X Security Monitoring: Detecting Attacks on Vehicle-to-Everything Communication

OTA Update Security: Ensuring Integrity from Cloud to ECU

Scaling Vehicle Telemetry Ingestion: Architecture Patterns for 100K+ Connected Vehicles

From Design-Time TARA to Runtime Detection: Closing the Automotive Security Loop

Vulnerability Management Lifecycle for Connected Vehicles: Discovery to Fleet Patch

Cybersecurity Monitoring as Evidence: Using Runtime Data to Satisfy R155 Post-Production Requirements

Software-Defined Vehicles and the Cybersecurity Debt Problem

Automotive Cybersecurity Maturity Model: Where Does Your Organization Stand?

The True Cost of a Vehicle Cybersecurity Recall: A Financial Analysis

SBOM Signing & Verification for Automotive

EU CRA Conformity Assessment for Automotive Components

OEM–Supplier Vulnerability Disclosure Protocol

OEM–Supplier Incident Escalation Framework

TARA Version Control: Managing Risk Assessment Revisions

SBOM Version Tracking Across the Vehicle Lifecycle

Closing the Threat Intelligence Loop in Automotive CSMS

Monthly digest, no noise.