One of the things that makes connected vehicle cybersecurity particularly challenging is scale. If a researcher or attacker discovers a remotely exploitable vulnerability in software running on a particular vehicle model, that flaw potentially exists in thousands of...
The European Union’s Cyber Resilience Act (CRA) began requiring manufacturers of connected products to report actively exploited vulnerabilities on a tight schedule in September 2026. Medical device makers have lived with similar post-market expectations from...
On July 27, 2026, the European Commission published its most substantial guidance yet on applying the EU Cyber Resilience Act (CRA). The guidance helps manufacturers, developers, and businesses of all sizes by working through questions that have caused the most...
On July 29, 2026, CISA and a coalition of international cybersecurity agencies published the 2026 Minimum Elements for a Software Bill of Materials (SBOM)—the first full update to the baseline the National Telecommunications and Information Administration (NTIA)...
The EU Cyber Resilience Act is currently top of mind for manufacturers, importers, and distributors across Europe and beyond. For many organizations, the regulation clarifies the distance between having a Software Bill of Materials (SBOM) tool and having an SBOM...
Modern vehicles are built on layers of software that few teams fully control and even fewer can fully see. Between supplier-delivered components, open source dependencies, and long product lifecycles, gaining a clear, reliable view of what’s actually in a vehicle—and...
