{"id":2253,"date":"2026-10-06T12:02:30","date_gmt":"2026-10-06T10:02:30","guid":{"rendered":"https:\/\/integratr.tech\/?p=2253"},"modified":"2026-10-20T10:05:05","modified_gmt":"2026-10-20T08:05:05","slug":"automotive-cybersecurity-heavy-duty","status":"publish","type":"post","link":"https:\/\/integratr.tech\/nl\/blog\/automotive-cybersecurity-heavy-duty\/","title":{"rendered":"Automotive cybersecurity: why heavy-duty vehicles are the new frontline"},"content":{"rendered":"\n<style>\n@import url('https:\/\/fonts.googleapis.com\/css2?family=Rubik:wght@400;500;600;700;800&display=swap');\n@font-face{font-family:'Cal Sans';src:url('https:\/\/integratr.tech\/wp-content\/uploads\/2025\/10\/CalSans-Regular.ttf') format('truetype');font-weight:400;font-display:swap}\n\n:root{\n  --ir:#4CD9D2;--ird:#2CB8B2;--irl:#EBF9F8;--irb:#B8EEE9;\n  --navy:#000A2D;--navym:#13228E;--navyc:#0a1540;--icn:#00469A;\n  --tx:#333333;--txl:#64748B;--txm:#94A3B8;\n  --brd:#E2E8F0;--bg:#F2F4FF;--white:#ffffff;\n  --r:24px;--rs:16px;\n}\nhtml{scroll-behavior:smooth !important}\nbody{font-family:'Rubik',-apple-system,BlinkMacSystemFont,sans-serif !important;font-size:17px !important;color:var(--tx) !important;background:var(--white) !important;line-height:1.75 !important;-webkit-font-smoothing:antialiased !important}\nimg{max-width:100% !important;display:block !important}\na{color:inherit !important}\n.ir-container{max-width:1200px !important;margin:0 auto !important;padding:0 32px !important}\n\/* Theme header on blog pages: white menu text, never wrapping, breathing room inside the glass panel *\/\n.elementor-location-header .elementor-nav-menu--main .elementor-item{color:#F2F4FF !important;white-space:nowrap !important}\n.elementor-location-header .elementor-nav-menu--main .elementor-item:hover,.elementor-location-header .elementor-nav-menu--main .elementor-item.elementor-item-active{color:var(--ir) !important}\n.elementor-location-header .elementor-nav-menu--main{flex-wrap:nowrap !important}\n@media(min-width:1025px){.elementor-location-header>.e-con{padding-left:60px !important;padding-right:60px !important}}\n@media(min-width:1400px){.elementor-location-header>.e-con{padding-left:95px !important;padding-right:95px !important}}\n@media(min-width:1700px){.elementor-location-header>.e-con{padding-left:130px !important;padding-right:130px !important}}\n\/* Header button exactly like the homepage: white label and white arrow on the navy disc *\/\n.elementor-location-header .ue_neon_btn,.elementor-location-header .ue_neon_btn .ue-btn-icon,.elementor-location-header .ue_neon_btn .ue-btn-icon i{color:#F2F4FF !important}\n\/* Language flag stays inline: menu never wraps and its wrapper grows with the items *\/\n.elementor-location-header .elementor-nav-menu--main .elementor-nav-menu{flex-wrap:nowrap !important}\n.elementor-location-header .elementor-element-98de9c6{width:auto !important}\n\/* Keep logo + menu + flag + button on one row at every desktop width *\/\n@media(min-width:1400px) and (max-width:1699px){.elementor-location-header .elementor-nav-menu--main{--e-nav-menu-horizontal-menu-item-margin:18px !important}}\n@media(max-width:1399px){.elementor-location-header .elementor-nav-menu--main{--e-nav-menu-horizontal-menu-item-margin:14px !important}}\n@media(max-width:1199px){.elementor-location-header .elementor-element-ed0dae4{display:none !important}}\n.ir-nav,.ir-blog-hero,.ir-blog-body,.ir-blog-faq,.ir-blog-related,.ir-container,\n.ir-nav *,.ir-blog-hero *,.ir-blog-body *,.ir-blog-faq *,.ir-blog-related *,.ir-container *{box-sizing:border-box !important}\n\n\/* \u2500\u2500 NAVBAR \u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500 *\/\n.ir-nav,html body .ir-nav,html body nav.ir-nav{position:fixed !important;top:0 !important;left:0 !important;right:0 !important;width:100% !important;height:72px !important;background:transparent !important;z-index:99999 !important;transition:background .25s,box-shadow .25s !important;border:none !important;border-top:none !important;border-bottom:none !important;border-left:none !important;border-right:none !important;outline:none !important;box-shadow:none !important;padding:0 !important;margin:0 !important;border-radius:0 !important;appearance:none !important;-webkit-appearance:none !important}\n.ir-nav.ir-nav--scrolled{background:rgba(0,10,45,.97) !important;backdrop-filter:blur(16px) !important;-webkit-backdrop-filter:blur(16px) !important;box-shadow:0 1px 16px rgba(0,0,0,.3) !important}\n.ir-nav-inner{max-width:1200px !important;margin:0 auto !important;padding:0 36px !important;height:100% !important;display:flex !important;align-items:center !important;justify-content:space-between !important;gap:24px !important}\n.ir-nav-logo{display:flex !important;align-items:center !important;flex-shrink:0 !important;text-decoration:none !important}\n.ir-nav-links{display:flex !important;align-items:center !important;gap:4px !important;list-style:none !important;margin:0 !important;padding:0 !important}\n.ir-nav-links li{list-style:none !important;margin:0 !important;padding:0 !important}\n.ir-nav-links a{font-family:'Rubik',sans-serif !important;font-size:14px !important;font-weight:600 !important;color:rgba(255,255,255,.75) !important;padding:8px 14px !important;border-radius:8px !important;transition:color .15s,background .15s !important;text-decoration:none !important;display:block !important;background:transparent !important;border:none !important}\n.ir-nav-links a:hover{color:#fff !important;background:rgba(255,255,255,.08) !important}\n.ir-nav-right{display:flex !important;align-items:center !important;gap:10px !important;flex-shrink:0 !important}\n.ir-nav-cta{display:inline-flex !important;align-items:center !important;gap:10px !important;padding:8px 8px 8px 22px !important;background:#4CD9D2 !important;color:#000A2D !important;font-family:'Rubik',sans-serif !important;font-size:14px !important;font-weight:800 !important;border:none !important;border-radius:100px !important;cursor:pointer !important;transition:all .18s !important;text-decoration:none !important;white-space:nowrap !important;box-shadow:none !important;letter-spacing:normal !important;text-transform:none !important}\n.ir-nav-cta:hover{background:#5DE8E1 !important;transform:translateY(-1px) !important;box-shadow:0 6px 20px rgba(76,217,210,.3) !important;color:#000A2D !important}\n.ir-nav-cta-icon{width:32px !important;height:32px !important;background:#000A2D !important;border-radius:50% !important;display:flex !important;align-items:center !important;justify-content:center !important;flex-shrink:0 !important}\n.ir-nav-cta-icon svg{width:14px !important;height:14px !important;color:#fff !important}\n@media(max-width:900px){.ir-nav-links{display:none !important}}\n\n\/* \u2500\u2500 HERO \u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500 *\/\n.ir-blog-hero{position:relative !important;padding:232px 0 112px !important;overflow:hidden !important;background-color:var(--navy) !important;background-size:cover !important;background-position:center !important;background-repeat:no-repeat !important}\n@media(max-width:767px){.ir-blog-hero{padding-top:152px !important;padding-bottom:72px !important}}\n.ir-blog-hero>.ir-container{position:relative !important;z-index:1 !important}\n\/* Glass panel: same recipe as the homepage hero (inset 50px, radius 25px, blur 2px, inset highlight) *\/\n.ir-blog-hero-glass{position:absolute !important;inset:50px !important;border-radius:25px !important;backdrop-filter:blur(2px) saturate(1.1) !important;-webkit-backdrop-filter:blur(2px) saturate(1.1) !important;box-shadow:rgba(255,255,255,.5) 1px 1px 2px 0 inset,rgba(0,0,0,.2) 1px 1px 5px 0 inset,rgba(0,0,0,.4) 5px 5px 20px 0,rgba(255,255,255,.1) 0 1px 1px .5px !important;pointer-events:none !important}\n@media(min-width:768px) and (max-width:1399px){.ir-blog-hero-glass{inset:36px !important}}\n@media(max-width:767px){.ir-blog-hero-glass{inset:12px !important;border-radius:20px !important}}\n.ir-blog-hero::before{content:'' !important;position:absolute !important;inset:0 !important;\n  background:linear-gradient(180deg,rgba(13,30,110,.78) 0%,rgba(0,10,45,.88) 100%),\n             radial-gradient(ellipse 70% 80% at 5% 60%,rgba(76,217,210,.12) 0%,transparent 60%) !important;\n  pointer-events:none !important}\n.ir-blog-breadcrumb{display:flex !important;align-items:center !important;flex-wrap:wrap !important;gap:6px !important;font-size:.8rem !important;color:#64748B !important;margin-bottom:24px !important;position:relative !important;z-index:1 !important}\n.ir-blog-breadcrumb a{color:rgba(242,244,255,.8) !important;text-decoration:none !important;transition:color .2s !important}\n.ir-blog-breadcrumb a:hover{color:var(--ir) !important}\n.ir-blog-breadcrumb span{color:rgba(242,244,255,.55) !important}\n.ir-blog-breadcrumb span:last-child{color:#F2F4FF !important}\n.ir-blog-cat-badge{display:inline-block !important;background:rgba(76,217,210,.18) !important;color:var(--ir) !important;border:1px solid rgba(76,217,210,.35) !important;border-radius:100px !important;padding:4px 16px !important;font-size:.75rem !important;font-weight:700 !important;letter-spacing:.1em !important;text-transform:uppercase !important;margin-bottom:20px !important;position:relative !important;z-index:1 !important}\n.ir-blog-hero-title{font-size:clamp(2rem,4.5vw,3.2rem) !important;font-weight:400 !important;font-family:'Cal Sans','Rubik',sans-serif !important;color:#fff !important;line-height:1.12 !important;margin:0 0 20px !important;max-width:900px !important;position:relative !important;z-index:1 !important}\n.ir-blog-hero-lead{font-size:1.05rem !important;color:rgba(255,255,255,.7) !important;max-width:760px !important;margin:0 0 28px !important;position:relative !important;z-index:1 !important;line-height:1.7 !important}\n.ir-blog-meta-row{display:flex !important;align-items:center !important;gap:12px !important;flex-wrap:wrap !important;position:relative !important;z-index:1 !important}\n.ir-blog-meta-avatar{width:38px !important;height:38px !important;border-radius:50% !important;border:2px solid rgba(76,217,210,.5) !important;background:var(--navym) !important;display:flex !important;align-items:center !important;justify-content:center !important;color:#fff !important;font-weight:700 !important;font-size:.85rem !important;flex-shrink:0 !important}\n.ir-blog-meta-author a{color:#fff !important;font-weight:600 !important;font-size:.92rem !important;text-decoration:none !important}\n.ir-blog-meta-dot{color:#475569 !important}\n.ir-blog-meta-date,.ir-blog-meta-read{color:rgba(255,255,255,.55) !important;font-size:.85rem !important;display:inline-flex !important;align-items:center !important;gap:5px !important}\n\n\/* \u2500\u2500 BODY LAYOUT \u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500 *\/\n.ir-blog-body{padding-top:56px !important;padding-bottom:80px !important;background:var(--white) !important}\n.ir-blog-layout{display:grid !important;grid-template-columns:1fr 300px !important;gap:64px !important;align-items:stretch !important}\n@media(max-width:1023px){.ir-blog-layout{grid-template-columns:1fr !important;gap:0 !important}}\n.ir-blog-main{min-width:0 !important}\n.ir-blog-featured-img{margin:0 0 40px !important;border-radius:var(--r) !important;overflow:hidden !important;aspect-ratio:16\/7 !important;background:linear-gradient(135deg,var(--navy) 0%,var(--navym) 55%,#1a3fa0 100%) !important;position:relative !important}\n.ir-blog-featured-img img{width:100% !important;height:100% !important;object-fit:cover !important;display:block !important}\n.ir-blog-featured-img::after{content:'' !important;position:absolute !important;inset:0 !important;background:radial-gradient(ellipse 55% 65% at 15% 55%,rgba(76,217,210,.28) 0%,transparent 55%) !important;pointer-events:none !important}\n.ir-blog-featured-placeholder{position:absolute !important;inset:0 !important;display:flex !important;align-items:center !important;justify-content:center !important;color:rgba(255,255,255,.35) !important;font-size:.8rem !important;font-weight:500 !important;letter-spacing:.1em !important;text-transform:uppercase !important;z-index:1 !important}\n.ir-blog-toc-mobile{display:none !important;margin-bottom:36px !important}\n@media(max-width:1023px){.ir-blog-toc-mobile{display:block !important}.ir-blog-toc-desktop{display:none !important}}\n\n\/* \u2500\u2500 ARTICLE CONTENT \u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500 *\/\n.ir-blog-article-content{font-size:1.05rem !important;line-height:1.8 !important;color:var(--tx) !important}\n.ir-blog-article-content h2{font-size:1.9rem !important;font-weight:400 !important;font-family:'Cal Sans','Rubik',sans-serif !important;color:var(--navy) !important;margin:56px 0 18px !important;line-height:1.15 !important;scroll-margin-top:90px !important}\n.ir-blog-article-content h3{font-size:1.2rem !important;font-weight:700 !important;color:var(--navy) !important;margin:36px 0 12px !important;font-family:'Rubik',sans-serif !important}\n.ir-blog-article-content h4{font-size:1rem !important;font-weight:700 !important;color:var(--navy) !important;margin:24px 0 8px !important;font-family:'Rubik',sans-serif !important}\n.ir-blog-article-content p{margin:0 0 1.35em !important}\n.ir-blog-article-content a{color:var(--navym) !important;text-decoration:underline !important;text-decoration-color:rgba(76,217,210,.5) !important;text-decoration-thickness:2px !important;text-underline-offset:3px !important;font-weight:500 !important;transition:color .15s,text-decoration-color .15s !important}\n.ir-blog-article-content a:hover{color:var(--ird) !important;text-decoration-color:var(--ir) !important}\n.ir-blog-article-content strong{font-weight:700 !important;color:var(--navy) !important}\n.ir-blog-article-content ul,.ir-blog-article-content ol{margin:0 0 1.35em !important;padding-left:0 !important;list-style:none !important}\n.ir-blog-article-content ul li{position:relative !important;padding-left:1.5em !important;margin-bottom:.6em !important}\n.ir-blog-article-content ul li::before{content:'' !important;position:absolute !important;left:2px !important;top:.72em !important;width:7px !important;height:7px !important;background:var(--ir) !important;border-radius:50% !important}\n.ir-blog-article-content ol{counter-reset:ol-c !important}\n.ir-blog-article-content ol li{position:relative !important;padding-left:2.2em !important;margin-bottom:.6em !important;counter-increment:ol-c !important}\n.ir-blog-article-content ol li::before{content:counter(ol-c)'.' !important;position:absolute !important;left:0 !important;top:0 !important;font-weight:700 !important;color:var(--ir) !important;font-size:.92rem !important}\n.ir-blog-article-content blockquote{border-left:4px solid var(--ir) !important;margin:36px 0 !important;padding:20px 26px !important;background:var(--irl) !important;border-radius:0 var(--rs) var(--rs) 0 !important;font-style:italic !important;color:var(--navy) !important}\n.ir-blog-article-content blockquote p{margin:0 !important}\n.ir-blog-article-content hr{border:none !important;border-top:1px solid var(--brd) !important;margin:48px 0 !important}\n\n\/* \u2500\u2500 TABLES \u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500 *\/\n.tbl-scroll{overflow-x:auto !important;margin:32px 0 !important;border-radius:var(--r) !important;background:var(--white) !important;box-shadow:0 2px 20px rgba(0,10,45,.07) !important;border:1px solid var(--brd) !important}\n.compare-table{width:100% !important;border-collapse:collapse !important;font-size:.93rem !important}\n.compare-table th{background:var(--bg) !important;color:var(--navym) !important;font-size:.75rem !important;font-weight:700 !important;text-transform:uppercase !important;letter-spacing:.09em !important;padding:12px 18px !important;text-align:left !important;border-bottom:2px solid var(--irb) !important}\n.compare-table td{padding:13px 18px !important;border-bottom:1px solid var(--brd) !important;vertical-align:top !important;color:var(--tx) !important}\n.compare-table td:first-child{font-weight:700 !important;color:var(--navy) !important}\n.compare-table tr:last-child td{border-bottom:none !important}\n.compare-table tr:hover td{background:var(--irl) !important}\n\n\/* \u2500\u2500 STEP CARDS \u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500 *\/\n.ir-step-card{display:flex !important;align-items:flex-start !important;gap:20px !important;padding:20px 24px !important;background:var(--bg) !important;border-radius:var(--rs) !important;border-left:3px solid var(--ir) !important;margin:0 0 12px !important}\n.ir-step-num{font-family:'Cal Sans','Rubik',sans-serif !important;font-size:1.35rem !important;font-weight:400 !important;color:var(--ir) !important;flex-shrink:0 !important;width:32px !important;line-height:1.6 !important}\n.ir-step-content{flex:1 !important;min-width:0 !important}\n.ir-step-content p{margin:0 0 .4em !important;font-size:.95rem !important;line-height:1.65 !important;color:var(--tx) !important}\n.ir-step-content p:last-child{margin:0}\n.ir-step-content p strong,.ir-step-content strong{font-weight:700;color:var(--navy)}\n\n\/* \u2500\u2500 INLINE CTA \u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500 *\/\n.ir-inline-cta{background:linear-gradient(135deg,var(--navy) 0%,var(--navym) 100%) !important;border-radius:var(--rs) !important;padding:28px 32px !important;margin:36px 0 !important;color:#fff !important;position:relative !important;overflow:hidden !important}\n.ir-inline-cta::before{content:'' !important;position:absolute !important;inset:0 !important;background:radial-gradient(ellipse 60% 80% at 80% 30%,rgba(76,217,210,.15) 0%,transparent 55%) !important;pointer-events:none !important}\n.ir-inline-cta p{color:rgba(255,255,255,.85) !important;margin:0 0 .6em !important;position:relative !important;font-size:.97rem !important}\n.ir-inline-cta p:last-child{margin:0 !important}\n.ir-inline-cta strong{color:#fff !important;font-weight:700 !important}\n.ir-inline-cta-btn{display:inline-flex !important;align-items:center !important;gap:14px !important;padding:8px 10px 8px 24px !important;background:var(--ir) !important;color:#fff !important;font-size:.9rem !important;font-weight:700 !important;border-radius:100px !important;text-decoration:none !important;margin-top:4px !important;transition:background .2s !important}\n.ir-inline-cta-btn:hover{background:#5DE8E1 !important;color:#fff !important}\n.ir-inline-cta-btn .btn-icon{width:30px !important;height:30px !important;background:var(--icn) !important;border-radius:50% !important;display:flex !important;align-items:center !important;justify-content:center !important;flex-shrink:0 !important}\n\n\/* \u2500\u2500 CALLOUT \u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500 *\/\n.callout{background:var(--irl) !important;border:1px solid var(--irb) !important;border-radius:var(--rs) !important;padding:22px 26px !important;margin:32px 0 !important;display:flex !important;gap:16px !important}\n.callout-icon{flex-shrink:0 !important;width:36px !important;height:36px !important;border-radius:10px !important;background:var(--ir) !important;color:#fff !important;display:flex !important;align-items:center !important;justify-content:center !important}\n.callout-body p{margin:0 0 .5em !important;font-size:.97rem !important}\n.callout-body p:last-child{margin:0 !important}\n\n\/* \u2500\u2500 INTERNAL LINKS \u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500 *\/\n.ir-blog-internal-links{border-radius:var(--r) !important;overflow:hidden !important;margin:0 0 40px !important;box-shadow:0 2px 16px rgba(0,10,45,.06) !important;border:1px solid var(--irb) !important}\n.ir-blog-internal-links-label{display:block !important;padding:12px 22px !important;background:var(--navy) !important;color:var(--ir) !important;font-size:.75rem !important;font-weight:700 !important;text-transform:uppercase !important;letter-spacing:.1em !important}\n.ir-blog-internal-link{display:flex !important;align-items:center !important;gap:16px !important;padding:16px 22px !important;background:var(--white) !important;text-decoration:none !important;transition:background .2s !important;border-top:1px solid var(--brd) !important}\n.ir-blog-internal-link:hover{background:var(--irl) !important}\n.ir-blog-internal-link-icon{display:flex !important;align-items:center !important;justify-content:center !important;width:38px !important;height:38px !important;background:var(--irl) !important;color:var(--ird) !important;border-radius:10px !important;flex-shrink:0 !important;border:1px solid var(--irb) !important}\n.ir-blog-internal-link-text{flex:1 !important;min-width:0 !important}\n.ir-blog-internal-link-text strong{font-size:.95rem !important;font-weight:600 !important;color:var(--navy) !important;display:block !important}\n.ir-blog-internal-link-text span{font-size:.8rem !important;color:var(--txl) !important}\n.ir-blog-internal-link-arrow{color:var(--ird) !important;flex-shrink:0 !important;transition:transform .2s !important}\n.ir-blog-internal-link:hover .ir-blog-internal-link-arrow{transform:translateX(4px) !important}\n\n\/* \u2500\u2500 AUTHOR CARD \u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500 *\/\n.ir-blog-author-card{display:flex !important;gap:24px !important;margin-top:56px !important;padding:32px !important;background:var(--bg) !important;border-radius:var(--r) !important;align-items:flex-start !important}\n.ir-blog-author-avatar{width:68px !important;height:68px !important;border-radius:50% !important;flex-shrink:0 !important;border:3px solid var(--ir) !important;background:var(--navy) !important;display:flex !important;align-items:center !important;justify-content:center !important;color:#fff !important;font-weight:700 !important;font-size:1.5rem !important}\n.ir-blog-author-label{font-size:.72rem !important;font-weight:700 !important;color:var(--ird) !important;text-transform:uppercase !important;letter-spacing:.1em !important;margin-bottom:4px !important}\n.ir-blog-author-name{font-size:1.05rem !important;font-weight:700 !important;font-family:'Cal Sans','Rubik',sans-serif !important;color:var(--navy) !important;text-decoration:none !important;display:block !important;margin-bottom:3px !important}\n.ir-blog-author-role{font-size:.82rem !important;color:var(--txl) !important;margin-bottom:10px !important}\n.ir-blog-author-bio{font-size:.9rem !important;line-height:1.65 !important;color:var(--tx) !important}\n\n\/* \u2500\u2500 TOC \u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500 *\/\n.ir-blog-toc{background:var(--white) !important;border:1px solid var(--brd) !important;border-radius:var(--r) !important;overflow:hidden !important;box-shadow:0 2px 16px rgba(0,10,45,.06) !important}\n.ir-blog-toc-header{display:flex !important;align-items:center !important;gap:8px !important;padding:16px 20px !important;background:var(--navy) !important;color:#fff !important;font-size:.78rem !important;font-weight:700 !important;text-transform:uppercase !important;letter-spacing:.1em !important}\n.ir-blog-toc-list{list-style:none !important;margin:0 !important;padding:8px 0 !important;counter-reset:toc-c !important}\n.ir-blog-toc-list li{counter-increment:toc-c !important;list-style:none !important;margin:0 !important;padding:0 !important}\n.ir-blog-toc-list li a{display:flex !important;align-items:baseline !important;gap:10px !important;padding:9px 20px !important;font-size:.84rem !important;color:var(--tx) !important;text-decoration:none !important;line-height:1.4 !important;border-left:3px solid transparent !important;transition:all .15s !important;background:transparent !important;font-family:'Rubik',sans-serif !important;font-weight:400 !important}\n.ir-blog-toc-list li a::before{content:counter(toc-c,decimal-leading-zero) !important;font-size:.7rem !important;font-weight:700 !important;color:var(--txm) !important;flex-shrink:0 !important}\n.ir-blog-toc-list li a:hover,.ir-blog-toc-list li a.ir-toc-active{color:var(--ird) !important;border-left-color:var(--ir) !important;background:var(--irl) !important}\n.ir-blog-toc-list li a:hover::before,.ir-blog-toc-list li a.ir-toc-active::before{color:var(--ird) !important}\n\n\/* \u2500\u2500 SIDEBAR \u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500 *\/\n.ir-blog-sidebar{position:relative !important}\n.ir-blog-sidebar-sticky{position:sticky !important;top:88px !important;display:flex !important;flex-direction:column !important;gap:20px !important;max-height:calc(100vh - 112px) !important;overflow:visible !important}\n.ir-blog-sidebar-sticky>*{flex-shrink:0 !important}\n\/* The TOC is the only block allowed to shrink; its list scrolls, its header stays *\/\n.ir-blog-sidebar-sticky>.ir-blog-toc{flex:0 1 auto !important;min-height:0 !important;display:flex !important;flex-direction:column !important}\n.ir-blog-sidebar-sticky .ir-blog-toc-header{flex-shrink:0 !important}\n.ir-blog-sidebar-sticky .ir-blog-toc-list{overflow-y:auto !important;min-height:96px !important;overscroll-behavior:contain !important;scrollbar-width:thin !important;scrollbar-color:rgba(0,10,45,.18) transparent !important}\n@media(max-width:1023px){.ir-blog-sidebar{display:none !important}}\n.ir-blog-sidebar-author{display:flex !important;align-items:center !important;gap:14px !important;padding:18px 20px !important;background:var(--white) !important;border:1px solid var(--brd) !important;border-radius:var(--rs) !important;box-shadow:0 2px 12px rgba(0,10,45,.05) !important}\n.ir-blog-sidebar-author-avatar{width:46px !important;height:46px !important;border-radius:50% !important;background:var(--navy) !important;display:flex !important;align-items:center !important;justify-content:center !important;color:#fff !important;font-weight:700 !important;font-size:1rem !important;flex-shrink:0 !important;border:2px solid var(--irb) !important}\n.ir-blog-sidebar-author-label{font-size:.7rem !important;color:var(--txm) !important;font-weight:600 !important;text-transform:uppercase !important;letter-spacing:.08em !important;margin-bottom:2px !important}\n.ir-blog-sidebar-author-name{font-size:.9rem !important;font-weight:700 !important;color:var(--navy) !important;text-decoration:none !important}\n.ir-blog-sidebar-cta{padding:24px !important;background:var(--navy) !important;border-radius:var(--rs) !important;color:#fff !important}\n.ir-blog-sidebar-cta h4{font-size:1rem !important;font-weight:400 !important;font-family:'Cal Sans','Rubik',sans-serif !important;margin:0 0 10px !important;color:#fff !important;line-height:1.3 !important}\n.ir-blog-sidebar-cta p{font-size:.83rem !important;color:rgba(255,255,255,.6) !important;margin:0 0 16px !important;line-height:1.55 !important}\n.ir-blog-sidebar-cta a{display:inline-flex !important;align-items:center !important;gap:16px !important;padding:6px 6px 6px 20px !important;background:var(--ir) !important;color:#fff !important;font-size:.85rem !important;font-weight:700 !important;border-radius:100px !important;text-decoration:none !important;transition:background .2s !important;border:none !important;box-shadow:none !important}\n.ir-blog-sidebar-cta a:hover{background:#5DE8E1 !important;color:#fff !important}\n.ir-blog-sidebar-cta a .btn-icon{width:30px !important;height:30px !important;background:var(--icn) !important;border-radius:50% !important;display:flex !important;align-items:center !important;justify-content:center !important;color:#fff !important;flex-shrink:0 !important}\n.ir-blog-sidebar-share{padding:18px 20px !important;background:var(--white) !important;border:1px solid var(--brd) !important;border-radius:var(--rs) !important}\n.ir-blog-sidebar-share-label{font-size:.72rem !important;font-weight:700 !important;color:var(--txm) !important;text-transform:uppercase !important;letter-spacing:.08em !important;margin-bottom:12px !important}\n.ir-blog-share-btns{display:flex !important;gap:8px !important}\n.ir-share-btn{display:flex !important;align-items:center !important;justify-content:center !important;width:38px !important;height:38px !important;border-radius:50% !important;color:#fff !important;text-decoration:none !important;transition:transform .2s,opacity .2s !important}\n.ir-share-btn:hover{transform:translateY(-2px) !important;opacity:.9 !important}\n.ir-share-li{background:#0A66C2 !important}.ir-share-em{background:var(--navym) !important}\n.ir-sidebar-follow-li{display:inline-flex !important;align-items:center !important;gap:8px !important;padding:8px 14px !important;background:#0A66C2 !important;color:#fff !important;font-size:.78rem !important;font-weight:600 !important;border-radius:100px !important;text-decoration:none !important;transition:opacity .2s !important;border:none !important;box-shadow:none !important}\n.ir-sidebar-follow-li:hover{opacity:.85 !important;color:#fff !important}\n\n\/* \u2500\u2500 CTA BANNER \u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500 *\/\n.ir-blog-cta-banner{background:linear-gradient(135deg,var(--navy) 0%,var(--navym) 100%) !important;padding:56px 48px !important;border-radius:var(--r) !important;margin:56px 0 0 !important;color:#fff !important;position:relative !important;overflow:hidden !important}\n.ir-blog-cta-banner::before{content:'' !important;position:absolute !important;inset:0 !important;background:radial-gradient(ellipse 60% 80% at 85% 40%,rgba(76,217,210,.18) 0%,transparent 55%) !important;pointer-events:none !important}\n.ir-blog-cta-banner h3{font-size:2rem !important;font-weight:400 !important;font-family:'Cal Sans','Rubik',sans-serif !important;color:#fff !important;margin:0 0 12px !important;position:relative !important;max-width:640px !important;line-height:1.2 !important}\n.ir-blog-cta-banner p{font-size:.97rem !important;color:rgba(255,255,255,.65) !important;margin:0 0 28px !important;max-width:580px !important;position:relative !important;line-height:1.65 !important}\n.ir-blog-cta-banner a{display:inline-flex !important;align-items:center !important;gap:20px !important;padding:8px 10px 8px 32px !important;background:var(--ir) !important;color:#fff !important;font-size:.97rem !important;font-weight:700 !important;border-radius:100px !important;text-decoration:none !important;position:relative !important;transition:background .2s !important;border:none !important;box-shadow:none !important}\n.ir-blog-cta-banner a:hover{background:#5DE8E1 !important;color:#fff !important}\n.ir-blog-cta-banner a .btn-icon{width:38px !important;height:38px !important;background:var(--icn) !important;border-radius:50% !important;display:flex !important;align-items:center !important;justify-content:center !important;color:#fff !important;flex-shrink:0 !important}\n\n\/* \u2500\u2500 FAQ \u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500 *\/\n.ir-blog-faq{padding:80px 0 72px !important;background:var(--bg) !important}\n.ir-blog-faq-inner{max-width:860px !important;margin:0 auto !important}\n.ir-blog-faq-title{font-size:2.2rem !important;font-weight:400 !important;font-family:'Cal Sans','Rubik',sans-serif !important;color:var(--navy) !important;margin:0 0 40px !important;line-height:1.1 !important}\n.ir-blog-faq-title span{color:var(--ir) !important}\n.ir-blog-faq-list{display:flex !important;flex-direction:column !important;gap:12px !important}\n.ir-blog-faq-item{border:1px solid var(--brd) !important;border-radius:var(--rs) !important;background:var(--white) !important;overflow:hidden !important;transition:border-color .2s,box-shadow .2s !important}\n.ir-blog-faq-item:hover{box-shadow:0 4px 20px rgba(0,10,45,.07) !important}\n.ir-blog-faq-item.ir-faq-open{border-color:var(--irb) !important;box-shadow:0 4px 20px rgba(76,217,210,.1) !important}\n.ir-blog-faq-question{width:100% !important;display:flex !important;align-items:center !important;justify-content:space-between !important;gap:16px !important;padding:20px 24px !important;background:none !important;border:none !important;cursor:pointer !important;text-align:left !important;font-family:'Rubik',sans-serif !important;font-size:1rem !important;font-weight:600 !important;color:var(--navy) !important;line-height:1.4 !important;transition:color .2s !important}\n.ir-blog-faq-question:hover{color:var(--ird) !important}\n.ir-blog-faq-item.ir-faq-open .ir-blog-faq-question{color:var(--ird) !important}\n.ir-blog-faq-icon{flex-shrink:0 !important;width:24px !important;height:24px !important;display:flex !important;align-items:center !important;justify-content:center !important;background:var(--irl) !important;border-radius:50% !important;color:var(--ird) !important;transition:transform .25s,background .2s !important}\n.ir-blog-faq-item.ir-faq-open .ir-blog-faq-icon{transform:rotate(45deg) !important;background:var(--ir) !important;color:#fff !important}\n.ir-blog-faq-answer{display:none !important;padding:0 24px 20px !important;font-size:.95rem !important;line-height:1.75 !important;color:var(--tx) !important;border-top:1px solid var(--brd) !important}\n.ir-blog-faq-item.ir-faq-open .ir-blog-faq-answer{display:block !important}\n.ir-blog-faq-answer p{margin:16px 0 0 !important}\n.ir-blog-faq-answer p:first-child{margin-top:16px !important}\n\n\/* \u2500\u2500 RELATED POSTS \u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500 *\/\n.ir-blog-related{background:var(--navy) !important;padding:80px 0 88px !important;position:relative !important;overflow:hidden !important}\n.ir-blog-related::before{content:'' !important;position:absolute !important;inset:0 !important;background:radial-gradient(ellipse 60% 80% at 10% 50%,rgba(76,217,210,.07) 0%,transparent 55%),radial-gradient(ellipse 40% 50% at 90% 20%,rgba(19,34,142,.4) 0%,transparent 55%) !important;pointer-events:none !important}\n.ir-blog-related-header{display:flex !important;align-items:center !important;justify-content:space-between !important;margin:0 0 40px !important;position:relative !important;z-index:1 !important}\n.ir-blog-related-title{font-size:2.2rem !important;font-weight:400 !important;font-family:'Cal Sans','Rubik',sans-serif !important;color:#fff !important;line-height:1.1 !important}\n.ir-blog-related-grid{display:grid !important;grid-template-columns:repeat(3,1fr) !important;gap:24px !important;position:relative !important;z-index:1 !important}\n.ir-blog-related-grid--2{grid-template-columns:repeat(2,1fr) !important}\n@media(max-width:900px){.ir-blog-related-grid{grid-template-columns:repeat(2,1fr) !important}}\n@media(max-width:560px){.ir-blog-related-grid{grid-template-columns:1fr !important}}\n.ir-blog-related-card{display:flex !important;flex-direction:column !important;background:rgba(255,255,255,.05) !important;border:1px solid rgba(255,255,255,.1) !important;border-radius:var(--r) !important;overflow:hidden !important;text-decoration:none !important;transition:transform .3s,border-color .3s,box-shadow .3s !important;backdrop-filter:blur(4px) !important}\n.ir-blog-related-card:hover{transform:translateY(-6px) !important;border-color:rgba(76,217,210,.4) !important;box-shadow:0 16px 40px rgba(0,0,0,.4) !important}\n.ir-blog-related-img{position:relative !important;aspect-ratio:16\/9 !important;background-color:var(--navyc) !important;overflow:hidden !important;background-size:cover !important;background-position:center !important}\n.ir-blog-related-img::after{content:'' !important;position:absolute !important;inset:0 !important;background:radial-gradient(ellipse at 25% 60%,rgba(76,217,210,.22) 0%,transparent 55%) !important}\n.ir-blog-related-cat{position:absolute !important;top:12px !important;left:12px !important;background:var(--ir) !important;color:var(--navy) !important;font-size:.68rem !important;font-weight:700 !important;text-transform:uppercase !important;letter-spacing:.06em !important;padding:3px 10px !important;border-radius:100px !important;z-index:1 !important}\n.ir-blog-related-body{padding:20px 22px !important;flex:1 !important}\n.ir-blog-related-body h3{font-size:1rem !important;font-weight:600 !important;color:#fff !important;line-height:1.45 !important;margin:0 0 10px !important;display:-webkit-box !important;-webkit-line-clamp:3 !important;-webkit-box-orient:vertical !important;overflow:hidden !important;font-family:'Rubik',sans-serif !important}\n.ir-blog-related-meta{display:flex !important;align-items:center !important;gap:6px !important;font-size:.78rem !important;color:rgba(255,255,255,.4) !important}\n<\/style>\n<section class=\"ir-blog-hero\" style=\"background-image:url('https:\/\/integratr.tech\/wp-content\/uploads\/2025\/12\/IntegratR-building-night-scaled.png')\">\n  <div class=\"ir-blog-hero-glass\" aria-hidden=\"true\"><\/div>\n  <div class=\"ir-container\">\n    <nav class=\"ir-blog-breadcrumb\">\n      <a href=\"https:\/\/integratr.tech\/\">Home<\/a><span>\u203a<\/span>\n      <a href=\"https:\/\/integratr.tech\/blog-overview\/\">Blog<\/a><span>\u203a<\/span>\n      <span>Knowledge base<\/span>\n    <\/nav>\n    <span class=\"ir-blog-cat-badge\">Knowledge base<\/span>\n    <h1 class=\"ir-blog-hero-title\">Automotive cybersecurity: why heavy-duty vehicles are the new frontline<\/h1>\n    <p class=\"ir-blog-hero-lead\">Vehicle cybersecurity used to be a passenger-car story. It is not anymore: electric trucks, connected machines and megawatt charging have given heavy-duty vehicles the same attack surfaces and higher stakes. This article maps the threat landscape, the regulations that now apply, and the five defences that matter most.<\/p>\n    <div class=\"ir-blog-meta-row\">\n      <time class=\"ir-blog-meta-date\" datetime=\"2026-10-06\"><svg width=\"13\" height=\"13\" viewBox=\"0 0 24 24\" fill=\"none\" stroke=\"currentColor\" stroke-width=\"2\"><rect x=\"3\" y=\"4\" width=\"18\" height=\"18\" rx=\"2\"\/><line x1=\"16\" y1=\"2\" x2=\"16\" y2=\"6\"\/><line x1=\"8\" y1=\"2\" x2=\"8\" y2=\"6\"\/><line x1=\"3\" y1=\"10\" x2=\"21\" y2=\"10\"\/><\/svg> October 6, 2026<\/time>\n      <span class=\"ir-blog-meta-dot\">\u00b7<\/span>\n      <span class=\"ir-blog-meta-read\"><svg width=\"13\" height=\"13\" viewBox=\"0 0 24 24\" fill=\"none\" stroke=\"currentColor\" stroke-width=\"2\"><circle cx=\"12\" cy=\"12\" r=\"10\"\/><polyline points=\"12 6 12 12 16 14\"\/><\/svg> 10 min read<\/span>\n    <\/div>\n  <\/div>\n<\/section>\n\n<div class=\"ir-blog-body\">\n  <div class=\"ir-container\">\n    <div class=\"ir-blog-layout\">\n\n      <main class=\"ir-blog-main\">\n        \n\n        \n    <div class=\"ir-blog-toc ir-blog-toc-mobile\">\n      <div class=\"ir-blog-toc-header\"><svg width=\"15\" height=\"15\" viewBox=\"0 0 24 24\" fill=\"none\" stroke=\"currentColor\" stroke-width=\"2\"><line x1=\"3\" y1=\"6\" x2=\"21\" y2=\"6\"\/><line x1=\"3\" y1=\"12\" x2=\"15\" y2=\"12\"\/><line x1=\"3\" y1=\"18\" x2=\"18\" y2=\"18\"\/><\/svg> Contents<\/div>\n      <ol class=\"ir-blog-toc-list\">\n          <li><a href=\"#the-attack-surface-of-a-modern-heavy-vehicle\" class=\"ir-toc-link\" data-target=\"the-attack-surface-of-a-modern-heavy-vehicle\">The attack surface of a modern heavy vehicle<\/a><\/li>\n          <li><a href=\"#what-regulators-now-demand\" class=\"ir-toc-link\" data-target=\"what-regulators-now-demand\">What regulators now demand<\/a><\/li>\n          <li><a href=\"#the-five-defences-that-matter-most\" class=\"ir-toc-link\" data-target=\"the-five-defences-that-matter-most\">The five defences that matter most<\/a><\/li>\n          <li><a href=\"#anatomy-of-a-fleet-incident\" class=\"ir-toc-link\" data-target=\"anatomy-of-a-fleet-incident\">Anatomy of a fleet incident<\/a><\/li>\n          <li><a href=\"#the-fleet-operators-angle-questions-to-ask-before-buying\" class=\"ir-toc-link\" data-target=\"the-fleet-operators-angle-questions-to-ask-before-buying\">The fleet operator&#8217;s angle: questions to a\u2026<\/a><\/li>\n          <li><a href=\"#a-maturity-staircase-that-actually-works\" class=\"ir-toc-link\" data-target=\"a-maturity-staircase-that-actually-works\">A maturity staircase that actually works<\/a><\/li>\n        <\/ol>\n    <\/div>\n\n        <article class=\"ir-blog-article-content\">\n          <p><em>Ask why someone would hack a truck and the answer is: for the same reasons they hack anything, except the prize is bigger. A single compromised passenger car is an incident. A compromised logistics fleet is an extortion case, a stopped port terminal, or a supply chain problem with a country attached to it. As heavy-duty vehicles electrify and connect, cybersecurity has moved from the IT department&#8217;s worry to a vehicle engineering discipline.<\/em><\/p><p><strong>Quick answers<\/strong><\/p><ul><li><strong>What is automotive cybersecurity?<\/strong> The engineering discipline of protecting vehicles, their networks and their connected services against unauthorised access and manipulation<\/li><li><strong>Why does it matter for heavy-duty?<\/strong> Electric and connected trucks and machines carry the same interfaces as cars, but the operational and safety stakes of a compromise are far higher<\/li><li><strong>What does the law require?<\/strong> UN R155 makes a certified Cybersecurity Management System a condition for type approval; ISO 21434 is the engineering standard behind it<\/li><li><strong>Where do attacks enter?<\/strong> Telematics and remote access, the charging connection, diagnostic ports, in-vehicle networks and the software supply chain<\/li><\/ul><h2 id=\"the-attack-surface-of-a-modern-heavy-vehicle\">The attack surface of a modern heavy vehicle<\/h2><p>Map a modern electric truck or machine and five doors appear. <strong>Telematics<\/strong>: the fleet management unit with its own SIM and cloud connection, powerful by design because operators want remote diagnostics and geofencing. <strong>The charging port<\/strong>: high-power charging is a data session as much as a power transfer; [ISO 15118 communication] includes contract handling and payment, which makes it interesting to more than vandals. <strong>Diagnostics<\/strong>: the OBD or service connector that speaks directly to control units, protected in the workshop by little more than physical access. <strong>The in-vehicle network<\/strong>: CAN was designed in an era of trust and will execute any well-formed frame it hears. <strong>The supply chain<\/strong>: every third-party control unit and library ships with its own history, documented or not.<\/p><p>None of this is theoretical. Demonstrated attacks on trucks have shown remote engine shutdown and instrument manipulation, and charging infrastructure has produced a steady stream of published vulnerabilities. The honest summary: the entry points are standard, the tooling is public, and the only variable is how well the vehicle was engineered.<\/p><h2 id=\"what-regulators-now-demand\">What regulators now demand<\/h2><p>Since UN R155, cybersecurity is a type approval subject in UNECE markets: no certified Cybersecurity Management System, no approval. Its sibling UN R156 does the same for software updates. The engineering method behind both is [ISO 21434], which we cover in depth in its own explainer. For fleet buyers the practical effect is simpler: <strong>cybersecurity evidence is becoming a procurement requirement<\/strong>, exactly as EMC and functional safety evidence did before it. Tenders for electric fleets increasingly ask for the CSMS certificate next to the [type approval] papers.<\/p><h2 id=\"the-five-defences-that-matter-most\">The five defences that matter most<\/h2><p>Perfect security does not exist, but proportionate security is an engineering deliverable like any other. Five measures carry most of the weight.<\/p><p><strong>1. Segment the network.<\/strong> The telematics unit must not sit on the same unfiltered bus as the brake and battery controllers; a gateway with an allow-list turns a remote compromise into a contained one. <strong>2. Authenticate the critical messages.<\/strong> Message authentication on safety-relevant frames removes the classic CAN injection attack. <strong>3. Harden the charging interface.<\/strong> Treat the charge port as an untrusted network connection: validated stacks, certificate management and no debug services in production. <strong>4. Sign and gate the software.<\/strong> Secure boot plus signed updates through an R156-compliant process close the door on persistent implants. <strong>5. Watch and respond.<\/strong> A vulnerability monitoring routine and an incident plan, because the threat landscape moves faster than vehicle generations.<\/p><h2 id=\"anatomy-of-a-fleet-incident\">Anatomy of a fleet incident<\/h2><p>To make the risk concrete, walk through the scenario security teams actually plan for. Day one: a fleet management platform credential leaks, through phishing or reuse, nothing exotic. The attacker logs in as the operator and learns the fleet: vehicle positions, charging schedules, remote commands the platform offers. Day two: they test reach, perhaps a remote immobilise command intended for theft recovery, perhaps a diagnostic session through the always-on telematics link. Day three: the demand arrives, priced against the cost of a fleet standing still. At no point did anyone attack cryptography or write vehicle exploits; they used legitimate functions through a stolen identity. The defences that break this chain are unglamorous: multi-factor authentication on the platform, remote commands that require a second authorisation, telematics sessions that the vehicle logs and rate-limits, and an operator who rehearsed the response. The lesson generalises: <strong>vehicle cybersecurity is a system property<\/strong>, spanning the truck, the cloud and the humans, and the weakest of the three sets the level.<\/p><h2 id=\"the-fleet-operators-angle-questions-to-ask-before-buying\">The fleet operator&#8217;s angle: questions to ask before buying<\/h2><p>Most readers of this article do not build vehicles; they buy and operate them. For that seat, cybersecurity is a procurement discipline, and four questions separate serious suppliers from hopeful ones. Does the vehicle hold a UN R155 approval, and can the supplier show the CSMS certificate rather than mention it? How do software updates reach the vehicle, who signs them, and what happens to a vehicle that misses updates for a year? Which data leaves the vehicle, to whose cloud, under which contract? And when a vulnerability is published, what is the supplier&#8217;s committed notification and patch process? A supplier who answers in specifics has done the work. A supplier who answers in reassurances has not.<\/p><p>Operators also own part of the defence themselves: workshop access to diagnostic ports, credential discipline on fleet management platforms, and charging infrastructure that is maintained like the IT equipment it is. The strongest vehicle security in the world does not survive a depot where the diagnostics laptop has one shared password taped to the lid.<\/p><h2 id=\"a-maturity-staircase-that-actually-works\">A maturity staircase that actually works<\/h2><p>For organisations starting from zero, the workable sequence has three steps. <strong>Visibility first<\/strong>: inventory the connected interfaces of the fleet or platform and the data flows behind them; most organisations discover interfaces they did not know they operated. <strong>Then the basics<\/strong>: segmentation, authentication, signed software and platform credential hygiene, the measures that defeat the common attack chains. <strong>Then formalisation<\/strong>: the [ISO 21434 process] with its TARA and monitoring, which turns good practice into auditable evidence. Skipping to step three produces paperwork without protection; stopping at step two produces protection that cannot be demonstrated to an authority or a customer. The staircase exists because both halves matter.<\/p><p><strong>Defence programmes take note<\/strong><\/p><p>For military and dual-use platforms the same discipline applies with a harder edge: electromagnetic and cyber resilience are assessed together. Our [MIL-STD-461 capability] and cybersecurity assessment work share one campus for exactly that reason.<\/p><h4>1. What is automotive cybersecurity?<\/h4><p>Protecting vehicles and their connected services against unauthorised access and manipulation, through network design, authentication, secure software processes and monitoring across the vehicle lifecycle.<\/p><h4>2. Are trucks and heavy machines really attack targets?<\/h4><p>Yes. Demonstrated attacks exist for trucks and charging infrastructure, and the operational value of fleets makes them attractive extortion targets. The interfaces are the same as passenger cars; the stakes are higher.<\/p><h4>3. What regulations apply to vehicle cybersecurity?<\/h4><p>UN R155 (cybersecurity management) and UN R156 (software updates) as type approval conditions in UNECE markets, with ISO\/SAE 21434 as the underlying engineering standard.<\/p><h4>4. Is the charging connection a real security risk?<\/h4><p>Yes. High-power charging sessions involve certificate handling, contract data and control communication. A poorly integrated charging stack is both a local and a remote attack path, which is why it belongs in every TARA.<\/p><h4>5. Where should a smaller OEM or converter start?<\/h4><p>With a threat analysis (TARA) of the actual architecture, then network segmentation and signed software as the first defences. Right-sized, this is weeks of engineering, not a corporate programme.<\/p><p><strong>ABOUT THE AUTHOR<\/strong><\/p><p><strong>IntegratR Engineering Team<\/strong><\/p><p><em>EMC &amp; e-mobility engineering, Innovatiecampus Nijmegen<\/em><\/p><p>IntegratR runs a heavy-duty EMC test facility and engineering team at the Innovation Campus in Nijmegen, the Netherlands. The team takes zero-emission vehicles and machines from prototype to certified, working with OEMs, Tier-1 suppliers and scale-ups across Europe. Articles are written from the test floor, not from theory.<\/p>\n        <\/article>\n\n        \n\n        <div class=\"ir-blog-cta-banner\">\n          <h3>Ready to accelerate your zero-emission innovation?<\/h3>\n          <p>IntegratR offers everything on one campus: EMC test facility, certification support and production site in Nijmegen.<\/p>\n          <a href=\"https:\/\/integratr.tech\/#contact\">Get in touch<span class=\"btn-icon\"><svg viewBox=\"0 0 24 24\" fill=\"none\" stroke=\"currentColor\" stroke-width=\"2.5\" stroke-linecap=\"round\" stroke-linejoin=\"round\" width=\"14\" height=\"14\"><line x1=\"5\" y1=\"12\" x2=\"19\" y2=\"12\"\/><polyline points=\"12 5 19 12 12 19\"\/><\/svg><\/span><\/a>\n        <\/div>\n      <\/main>\n\n      <aside class=\"ir-blog-sidebar\">\n        <div class=\"ir-blog-sidebar-sticky\">\n          \n    <div class=\"ir-blog-toc ir-blog-toc-desktop\">\n      <div class=\"ir-blog-toc-header\"><svg width=\"15\" height=\"15\" viewBox=\"0 0 24 24\" fill=\"none\" stroke=\"currentColor\" stroke-width=\"2\"><line x1=\"3\" y1=\"6\" x2=\"21\" y2=\"6\"\/><line x1=\"3\" y1=\"12\" x2=\"15\" y2=\"12\"\/><line x1=\"3\" y1=\"18\" x2=\"18\" y2=\"18\"\/><\/svg> Contents<\/div>\n      <ol class=\"ir-blog-toc-list\">\n          <li><a href=\"#the-attack-surface-of-a-modern-heavy-vehicle\" class=\"ir-toc-link\" data-target=\"the-attack-surface-of-a-modern-heavy-vehicle\">The attack surface of a modern heavy vehicle<\/a><\/li>\n          <li><a href=\"#what-regulators-now-demand\" class=\"ir-toc-link\" data-target=\"what-regulators-now-demand\">What regulators now demand<\/a><\/li>\n          <li><a href=\"#the-five-defences-that-matter-most\" class=\"ir-toc-link\" data-target=\"the-five-defences-that-matter-most\">The five defences that matter most<\/a><\/li>\n          <li><a href=\"#anatomy-of-a-fleet-incident\" class=\"ir-toc-link\" data-target=\"anatomy-of-a-fleet-incident\">Anatomy of a fleet incident<\/a><\/li>\n          <li><a href=\"#the-fleet-operators-angle-questions-to-ask-before-buying\" class=\"ir-toc-link\" data-target=\"the-fleet-operators-angle-questions-to-ask-before-buying\">The fleet operator&#8217;s angle: questions to a\u2026<\/a><\/li>\n          <li><a href=\"#a-maturity-staircase-that-actually-works\" class=\"ir-toc-link\" data-target=\"a-maturity-staircase-that-actually-works\">A maturity staircase that actually works<\/a><\/li>\n        <\/ol>\n    <\/div>\n          <div class=\"ir-blog-sidebar-cta\">\n            <h4>Need advice on your programme?<\/h4>\n            <p>We help manufacturers and integrators go from prototype to market.<\/p>\n            <a href=\"https:\/\/integratr.tech\/#contact\">Get in touch<span class=\"btn-icon\"><svg width=\"13\" height=\"13\" viewBox=\"0 0 24 24\" fill=\"none\" stroke=\"currentColor\" stroke-width=\"2.5\"><polyline points=\"9 18 15 12 9 6\"\/><\/svg><\/span><\/a>\n          <\/div>\n          <div class=\"ir-blog-sidebar-share\">\n            <div class=\"ir-blog-sidebar-share-label\">Share this article<\/div>\n            <div class=\"ir-blog-share-btns\">\n              <a href=\"https:\/\/www.linkedin.com\/company\/integratr-innovation-campus\/\" class=\"ir-share-btn ir-share-li\" target=\"_blank\" rel=\"noopener\" aria-label=\"LinkedIn\">\n                <svg width=\"16\" height=\"16\" viewBox=\"0 0 24 24\" fill=\"currentColor\"><path d=\"M20.447 20.452h-3.554v-5.569c0-1.328-.027-3.037-1.852-3.037-1.853 0-2.136 1.445-2.136 2.939v5.667H9.351V9h3.414v1.561h.046c.477-.9 1.637-1.85 3.37-1.85 3.601 0 4.267 2.37 4.267 5.455v6.286zM5.337 7.433a2.062 2.062 0 01-2.063-2.065 2.064 2.064 0 112.063 2.065zm1.782 13.019H3.555V9h3.564v11.452zM22.225 0H1.771C.792 0 0 .774 0 1.729v20.542C0 23.227.792 24 1.771 24h20.451C23.2 24 24 23.227 24 22.271V1.729C24 .774 23.2 0 22.222 0h.003z\"\/><\/svg>\n              <\/a>\n              <a href=\"mailto:info@integratr.tech\" class=\"ir-share-btn ir-share-em\" aria-label=\"Email\">\n                <svg width=\"16\" height=\"16\" viewBox=\"0 0 24 24\" fill=\"none\" stroke=\"currentColor\" stroke-width=\"2\"><path d=\"M4 4h16c1.1 0 2 .9 2 2v12c0 1.1-.9 2-2 2H4c-1.1 0-2-.9-2-2V6c0-1.1.9-2 2-2z\"\/><polyline points=\"22,6 12,13 2,6\"\/><\/svg>\n              <\/a>\n            <\/div>\n            <div class=\"ir-sidebar-follow\">\n              <div class=\"ir-blog-sidebar-share-label\" style=\"margin-top:14px\">Follow IntegratR<\/div>\n              <a href=\"https:\/\/www.linkedin.com\/company\/integratr-innovation-campus\/\" class=\"ir-sidebar-follow-li\" target=\"_blank\" rel=\"noopener\">\n                <svg width=\"14\" height=\"14\" viewBox=\"0 0 24 24\" fill=\"currentColor\"><path d=\"M20.447 20.452h-3.554v-5.569c0-1.328-.027-3.037-1.852-3.037-1.853 0-2.136 1.445-2.136 2.939v5.667H9.351V9h3.414v1.561h.046c.477-.9 1.637-1.85 3.37-1.85 3.601 0 4.267 2.37 4.267 5.455v6.286zM5.337 7.433a2.062 2.062 0 01-2.063-2.065 2.064 2.064 0 112.063 2.065zm1.782 13.019H3.555V9h3.564v11.452zM22.225 0H1.771C.792 0 0 .774 0 1.729v20.542C0 23.227.792 24 1.771 24h20.451C23.2 24 24 23.227 24 22.271V1.729C24 .774 23.2 0 22.222 0h.003z\"\/><\/svg>\n                IntegratR Innovation Campus\n              <\/a>\n            <\/div>\n          <\/div>\n        <\/div>\n      <\/aside>\n\n    <\/div>\n  <\/div>\n<\/div>\n\n\n\n<section class=\"ir-blog-related\">\n  <div class=\"ir-container\">\n    <div class=\"ir-blog-related-header\">\n      <h2 class=\"ir-blog-related-title\">Related articles<\/h2>\n    <\/div>\n    <div class=\"ir-blog-related-grid ir-blog-related-grid--2\">\n      <a href=\"https:\/\/integratr.tech\/blog\/un-38-3-lithium-battery-testing\/\" class=\"ir-blog-related-card\">\n        <div class=\"ir-blog-related-img\" style=\"background-image:url('https:\/\/integratr.tech\/wp-content\/uploads\/2025\/12\/RoRo-Quay-2-scaled.png');background-size:cover;background-position:center\">\n          <span class=\"ir-blog-related-cat\">Certification<\/span>\n        <\/div>\n        <div class=\"ir-blog-related-body\">\n          <h3>UN 38.3 testing: what it takes to ship a lithium battery legally<\/h3>\n          <div class=\"ir-blog-related-meta\">\n            <span>9 min read<\/span>\n          <\/div>\n        <\/div>\n      <\/a>\n\n      <a href=\"https:\/\/integratr.tech\/blog\/individual-vehicle-approval\/\" class=\"ir-blog-related-card\">\n        <div class=\"ir-blog-related-img\" style=\"background-image:url('https:\/\/integratr.tech\/wp-content\/uploads\/2025\/12\/IntegratR-Binnen-1-scaled.png');background-size:cover;background-position:center\">\n          <span class=\"ir-blog-related-cat\">Certification<\/span>\n        <\/div>\n        <div class=\"ir-blog-related-body\">\n          <h3>Individual Vehicle Approval: the certification route for one-offs and conversions<\/h3>\n          <div class=\"ir-blog-related-meta\">\n            <span>10 min read<\/span>\n          <\/div>\n        <\/div>\n      <\/a><\/div>\n  <\/div>\n<\/section>\n\n<script>\n(function(){\n  \/\/ The Elementor header sits transparently on top of the hero. Measure where it\n  \/\/ ends and push the hero content below it, whatever the viewport or header height.\n  var hd=document.querySelector(\".elementor-location-header\"),hs=document.querySelector(\".ir-blog-hero\");\n  if(!(!hd||!hs)){\n    var fit=function(){\n      if(window.scrollY>5)return;\n      var d=hd.getBoundingClientRect().bottom-hs.getBoundingClientRect().top;\n      if(d>0)hs.style.setProperty(\"padding-top\",Math.round(d+32)+\"px\",\"important\");\n    };\n    fit();window.addEventListener(\"load\",fit);window.addEventListener(\"resize\",fit);\n  }\n})();\n(function(){\n  var nav=null,hero=null,_dark=null;\n  function setNavDark(dark){\n    if(!nav||dark===_dark)return;\n    _dark=dark;\n    if(dark){\n      nav.style.setProperty('background','rgba(0,10,45,0.97)','important');\n      nav.style.setProperty('backdrop-filter','blur(16px)','important');\n      nav.style.setProperty('-webkit-backdrop-filter','blur(16px)','important');\n      nav.style.setProperty('box-shadow','0 1px 16px rgba(0,0,0,0.3)','important');\n    } else {\n      nav.style.setProperty('background','transparent','important');\n      nav.style.removeProperty('backdrop-filter');\n      nav.style.removeProperty('-webkit-backdrop-filter');\n      nav.style.removeProperty('box-shadow');\n    }\n  }\n  function navLoop(){\n    if(!nav) nav=document.querySelector('.ir-nav');\n    if(nav) setNavDark((window.pageYOffset||document.documentElement.scrollTop)>20);\n    requestAnimationFrame(navLoop);\n  }\n  requestAnimationFrame(navLoop);\n})();\n(function(){\n  var links=null,headings=null,_activeId=null;\n  function initToc(){\n    links=Array.from(document.querySelectorAll('.ir-toc-link'));\n    if(!links.length){links=null;return;}\n    headings=links.map(function(l){return document.getElementById(l.dataset.target);}).filter(Boolean);\n    document.querySelectorAll('.ir-blog-faq-question').forEach(function(btn){\n      btn.addEventListener('click',function(){\n        var item=this.closest('.ir-blog-faq-item');\n        var open=item.classList.contains('ir-faq-open');\n        document.querySelectorAll('.ir-blog-faq-item').forEach(function(i){i.classList.remove('ir-faq-open');i.querySelector('.ir-blog-faq-question').setAttribute('aria-expanded','false');});\n        if(!open){item.classList.add('ir-faq-open');this.setAttribute('aria-expanded','true');}\n      });\n    });\n  }\n  function tocLoop(){\n    if(!links) initToc();\n    if(!(!links||!headings||!headings.length)){\n      var y=(window.pageYOffset||document.documentElement.scrollTop)+120;\n      var active=headings.reduce(function(a,h){return h.offsetTop<=y?h:a;},headings[0]);\n      var id=active?active.id:null;\n      if(id!==_activeId){\n        _activeId=id;\n        links.forEach(function(l){\n          var on=l.dataset.target===id;\n          l.classList.toggle('ir-toc-active',on);\n          if(on){var ul=l.closest('.ir-blog-toc-list');if(!(!ul||ul.scrollHeight<=ul.clientHeight+2)){var r=l.getBoundingClientRect(),u=ul.getBoundingClientRect();if(r.top<u.top||r.bottom>u.bottom)ul.scrollTop+=(r.top-u.top)-(u.height\/2-r.height\/2);}}\n          if(on){l.style.setProperty('color','#2CB8B2','important');l.style.setProperty('border-left-color','#4CD9D2','important');l.style.setProperty('background','#EBF9F8','important');}\n          else{l.style.removeProperty('color');l.style.removeProperty('border-left-color');l.style.removeProperty('background');}\n        });\n      }\n    }\n    requestAnimationFrame(tocLoop);\n  }\n  requestAnimationFrame(tocLoop);\n})();\n<\/script>\n","protected":false},"excerpt":{"rendered":"<p>Home\u203a Blog\u203a Knowledge base Knowledge base Automotive cybersecurity: why heavy-duty vehicles are the new frontline Vehicle cybersecurity used to be a passenger-car story. It is not anymore: electric trucks, connected machines and megawatt charging have given heavy-duty vehicles the same attack surfaces and higher stakes. This article maps the threat landscape, the regulations that now [&hellip;]<\/p>\n","protected":false},"author":4,"featured_media":1072,"comment_status":"closed","ping_status":"closed","sticky":false,"template":"elementor_header_footer","format":"standard","meta":{"footnotes":""},"categories":[1],"tags":[],"class_list":["post-2253","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-uncategorized"],"_links":{"self":[{"href":"https:\/\/integratr.tech\/nl\/wp-json\/wp\/v2\/posts\/2253","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/integratr.tech\/nl\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/integratr.tech\/nl\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/integratr.tech\/nl\/wp-json\/wp\/v2\/users\/4"}],"replies":[{"embeddable":true,"href":"https:\/\/integratr.tech\/nl\/wp-json\/wp\/v2\/comments?post=2253"}],"version-history":[{"count":13,"href":"https:\/\/integratr.tech\/nl\/wp-json\/wp\/v2\/posts\/2253\/revisions"}],"predecessor-version":[{"id":2379,"href":"https:\/\/integratr.tech\/nl\/wp-json\/wp\/v2\/posts\/2253\/revisions\/2379"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/integratr.tech\/nl\/wp-json\/wp\/v2\/media\/1072"}],"wp:attachment":[{"href":"https:\/\/integratr.tech\/nl\/wp-json\/wp\/v2\/media?parent=2253"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/integratr.tech\/nl\/wp-json\/wp\/v2\/categories?post=2253"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/integratr.tech\/nl\/wp-json\/wp\/v2\/tags?post=2253"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}