Driving Automotive
Cybersecurity Forward

We examine how a signed Windows installer was used to deploy Redline Stealer malware, successfully bypassing traditional defenses. The incident reveals critical blind spots in automotive cybersecurity and highlights the need for zero-trust principles across the entire software supply chain.

The EU Cyber Resilience Act (CRA) has set cybersecurity requirements focusing on Products with Digital Elements (PDE). This means that manufacturers within the supply chain must monitor and report vulnerabilities once discovered. Otherwise, a fine of a substantial financial penalty will be imposed. In this landscape, what manufacturers need is a solution that offers proactive Vulnerability and SBOM Management.

This research paper provides an organized summary of key discussions on software-defined vehicles (SDVs), which have garnered increasing attention in recent years from the perspective of cybersecurity. It offers practical insights and proposals to address specific risks associated with APIs, container technologies, OTA updates, and AI models, as well as possible countermeasures.