https://www.blockharbor.ioBlock Harbor's latest articles on vehicle cybersecurity, from regulatory compliance to threat protection and security engineering.Tue, 18 Aug 2026 23:50:31 GMT60Webflowhttps://www.blockharbor.io/blog/country-of-origin-is-coming-to-more-than-carshttps://www.blockharbor.io/blog/country-of-origin-is-coming-to-more-than-carsForeign-produced robots and inverters can no longer get FCC equipment authorization. The test is domestic component cost, not where the device was assembled.Wed, 19 Aug 2026 16:06:10 GMThttps://www.blockharbor.io/blog/cra-reporting-starts-september-11-2026https://www.blockharbor.io/blog/cra-reporting-starts-september-11-2026From September 11, 2026 the CRA requires 24-hour reporting of actively exploited vulnerabilities, including in products already sold into the EU. Cars excluded.Tue, 11 Aug 2026 17:40:14 GMThttps://www.blockharbor.io/blog/continuous-monitoring-isnt-24-7https://www.blockharbor.io/blog/continuous-monitoring-isnt-24-7Tue, 28 Jul 2026 14:51:27 GMThttps://www.blockharbor.io/blog/we-built-it-backwards-from-a-services-shop-to-a-product-portfolio-risk-registerhttps://www.blockharbor.io/blog/we-built-it-backwards-from-a-services-shop-to-a-product-portfolio-risk-registerVSEC Core wasn't dreamed up in a slide deck — it's Block Harbor's own risk-tracking practice, codified into software after years of doing the work by hand. See how the asset spine works and how mature it really is.Tue, 28 Jul 2026 14:32:08 GMThttps://www.blockharbor.io/blog/empty-attestation-vs-real-proof-security-verificationhttps://www.blockharbor.io/blog/empty-attestation-vs-real-proof-security-verificationCollecting supplier letters for your Declaration of Conformity clears the paperwork bar — it doesn't prove your vehicle is clean. Learn why uninformed attestations fail and how firmware-level verification changes the equation.Mon, 13 Jul 2026 15:08:54 GMThttps://www.blockharbor.io/blog/know-the-where-of-your-firmwarehttps://www.blockharbor.io/blog/know-the-where-of-your-firmwareBlock Harbor’s new VSEC feature helps OEMs comply with Rule 791D by extracting SBOMs from firmware binaries and identifying country-of-origin—giving cybersecurity and procurement teams actionable insight into supplier risk.Wed, 03 Jun 2026 15:49:56 GMThttps://www.blockharbor.io/blog/collaborative-risk-sharing-in-automotive-cybersecurityhttps://www.blockharbor.io/blog/collaborative-risk-sharing-in-automotive-cybersecurityWed, 10 Dec 2025 21:10:57 GMThttps://www.blockharbor.io/blog/medical-device-cybersecurity-checklisthttps://www.blockharbor.io/blog/medical-device-cybersecurity-checklistDiscover how a Medical Device Cybersecurity Checklist can help healthcare teams ensure FDA and HIPAA compliance, reduce cyber risks, and protect patient safety with a structured TARA approach.Tue, 18 Nov 2025 19:43:04 GMThttps://www.blockharbor.io/blog/the-past-and-next-decade-of-automotive-cybersecurityhttps://www.blockharbor.io/blog/the-past-and-next-decade-of-automotive-cybersecurityFrom research to ISO/SAE 21434 and UN R155, where auto cybersecurity stands today and what will shape the next decade, from cost pressure to new rules.Mon, 27 Oct 2025 17:36:55 GMThttps://www.blockharbor.io/blog/securing-americas-ai-powered-future-why-block-harbor-is-partnering-with-googlehttps://www.blockharbor.io/blog/securing-americas-ai-powered-future-why-block-harbor-is-partnering-with-googleBlock Harbor joins Google’s AI Academy to protect American infrastructure with VSEC, an AI-powered cybersecurity platform for connected vehicles and drones.Wed, 20 Aug 2025 17:41:22 GMThttps://www.blockharbor.io/blog/whitepaper-vsocvspsirthttps://www.blockharbor.io/blog/whitepaper-vsocvspsirtUnderstand the distinct roles of the Vehicle Security Operations Center (VSOC) and the Product Security Incident Response Team (PSIRT) in automotive cybersecurity. Learn how integrating these two teams reduces risk, improves response times, and strengthens OEM-supplier collaboration.Mon, 21 Jul 2025 20:07:06 GMThttps://www.blockharbor.io/blog/securing-the-factory-why-tara-matters-in-industrial-iothttps://www.blockharbor.io/blog/securing-the-factory-why-tara-matters-in-industrial-iotLearn how TARA and IEC 62443 help IoT teams expose risks, set security levels, and apply controls that protect production, data, and worker safety.Mon, 21 Jul 2025 18:58:05 GMThttps://www.blockharbor.io/blog/medical-device-tarashttps://www.blockharbor.io/blog/medical-device-tarasExplore how structured TARA methods from automotive cybersecurity can improve risk management for medical devices in a connected healthcare world.Wed, 02 Jul 2025 13:08:00 GMThttps://www.blockharbor.io/blog/odometer-manipulation-investigationhttps://www.blockharbor.io/blog/odometer-manipulation-investigationDive into the technical aspects of digital odometer fraud in modern vehicles. Learn detection methods, security vulnerabilities, and protection strategies against tampering.Thu, 29 May 2025 14:43:26 GMThttps://www.blockharbor.io/blog/rule-791d-the-ban-on-chinese-russian-tech-in-connected-autonomous-vehicle-systemshttps://www.blockharbor.io/blog/rule-791d-the-ban-on-chinese-russian-tech-in-connected-autonomous-vehicle-systemsThe Department of Commerce rule banning Chinese and Russian software and hardware in connected vehicles is live and in effect. Automakers and their supply chains have until model year 2027 to comply.Mon, 05 May 2025 22:06:05 GMThttps://www.blockharbor.io/blog/automotive-cybersecurity--state-of-the-industry-2024https://www.blockharbor.io/blog/automotive-cybersecurity--state-of-the-industry-2024Explore the current landscape of automotive cybersecurity in 2024. Learn about emerging threats, regulatory developments, and technology trends shaping vehicle security.Mon, 05 May 2025 22:03:18 GMThttps://www.blockharbor.io/blog/digital-twins-in-automotive-cybersecurity-a-smarter-way-for-tarahttps://www.blockharbor.io/blog/digital-twins-in-automotive-cybersecurity-a-smarter-way-for-taraExplore how digital twin technology revolutionizes vehicle security risk assessment. Learn benefits of simulation-based threat modeling for comprehensive protection.Mon, 14 Apr 2025 18:45:37 GMThttps://www.blockharbor.io/blog/integrating-non-cve-vulnerability-related-threats-into-tarahttps://www.blockharbor.io/blog/integrating-non-cve-vulnerability-related-threats-into-taraLearn how to incorporate emerging and non-cataloged vulnerabilities into your Threat Analysis. Discover methods to stay ahead of threats not yet formalized as CVEs.Mon, 14 Apr 2025 18:43:56 GMThttps://www.blockharbor.io/blog/were-the-automotive-cybersecurity-company-of-the-yearhttps://www.blockharbor.io/blog/were-the-automotive-cybersecurity-company-of-the-yearBlock Harbor has been named Automotive Cybersecurity Company of the Year! Learn about our achievement, the recognition process, and what this means for our customers.Mon, 14 Apr 2025 18:42:18 GMThttps://www.blockharbor.io/blog/navigating-the-risk-treatment-decision-in-tarahttps://www.blockharbor.io/blog/navigating-the-risk-treatment-decision-in-taraMaster the process of evaluating and selecting appropriate risk responses in Threat Analysis and Risk Assessment. Learn factors to consider when prioritizing security controls.Mon, 14 Apr 2025 18:41:34 GMThttps://www.blockharbor.io/blog/cybersecurity-in-automotive-software-update-engineeringhttps://www.blockharbor.io/blog/cybersecurity-in-automotive-software-update-engineeringLearn best practices for securing over-the-air and dealer updates for vehicles. Discover strategies to protect update mechanisms against tampering and unauthorized access.Mon, 14 Apr 2025 18:39:35 GMThttps://www.blockharbor.io/blog/cybersecurity-assurance-levels-in-product-development-lifecyclehttps://www.blockharbor.io/blog/cybersecurity-assurance-levels-in-product-development-lifecycleUnderstand how security assurance levels guide protection efforts throughout vehicle development. Learn to determine appropriate security controls based on risk assessment.Mon, 14 Apr 2025 18:38:41 GMThttps://www.blockharbor.io/blog/an-introduction-into-the-automotive-threat-matrixhttps://www.blockharbor.io/blog/an-introduction-into-the-automotive-threat-matrixExplore the framework for categorizing and understanding vehicle cybersecurity threats. Learn to use this matrix to improve threat modeling and protection strategies.Mon, 14 Apr 2025 18:38:05 GMThttps://www.blockharbor.io/blog/supplier-management-and-iso-sae-21434-ensuring-end-to-end-automotive-cybersecurityhttps://www.blockharbor.io/blog/supplier-management-and-iso-sae-21434-ensuring-end-to-end-automotive-cybersecurityLearn how to manage supplier relationships under ISO/SAE 21434 requirements. Discover strategies for verifying security compliance throughout your supply chain.Mon, 14 Apr 2025 18:37:14 GMThttps://www.blockharbor.io/blog/understanding-cybersecurity-relevance-in-the-automotive-industryhttps://www.blockharbor.io/blog/understanding-cybersecurity-relevance-in-the-automotive-industryDiscover why cybersecurity has become essential to vehicle development. Learn about key risk factors, attack surfaces, and protection strategies for modern vehicles.Mon, 14 Apr 2025 18:36:19 GMThttps://www.blockharbor.io/blog/block-harbor-vsoc-demo-app-for-splunkhttps://www.blockharbor.io/blog/block-harbor-vsoc-demo-app-for-splunkExplore our Vehicle Security Operations Center demo app for Splunk. Learn how this tool helps security teams visualize, detect, and respond to vehicle security events.Mon, 14 Apr 2025 18:34:01 GMThttps://www.blockharbor.io/blog/the-importance-of-threat-intelligence-in-vsocs-highlighting-the-role-of-threat-intelligence-to-stay-ahead-of-attackershttps://www.blockharbor.io/blog/the-importance-of-threat-intelligence-in-vsocs-highlighting-the-role-of-threat-intelligence-to-stay-ahead-of-attackersLearn how threat intelligence empowers Vehicle Security Operations Centers to proactively identify and mitigate emerging attacks before they impact vehicle fleets.Mon, 14 Apr 2025 18:33:20 GMThttps://www.blockharbor.io/blog/anyone-else-feel-that----shifts-in-vehicle-cybersecurityhttps://www.blockharbor.io/blog/anyone-else-feel-that----shifts-in-vehicle-cybersecurityExplore the major transformations happening in automotive cybersecurity. Learn how trends in connectivity, automation, and regulations are reshaping vehicle protection.Mon, 14 Apr 2025 18:32:32 GMThttps://www.blockharbor.io/blog/importance-of-integrating-a-robust-cybersecurity-culture-within-the-cybersecurity-management-system-csmshttps://www.blockharbor.io/blog/importance-of-integrating-a-robust-cybersecurity-culture-within-the-cybersecurity-management-system-csmsDiscover why culture is crucial to CSMS success. Learn strategies for building security awareness and responsibility across all organizational levels.Mon, 14 Apr 2025 18:30:39 GMThttps://www.blockharbor.io/blog/from-garage-to-glory-the-rise-of-a-100k-automotive-capture-the-flag-challengehttps://www.blockharbor.io/blog/from-garage-to-glory-the-rise-of-a-100k-automotive-capture-the-flag-challengeFollow the journey of Block Harbor's automotive CTF challenge from concept to a $100K competition. Learn about the challenges, solutions, and impact on the industry.Mon, 14 Apr 2025 18:29:55 GMThttps://www.blockharbor.io/blog/secure-product-development-activities-in-automotivehttps://www.blockharbor.io/blog/secure-product-development-activities-in-automotiveLearn essential security practices to integrate throughout the vehicle development lifecycle. Discover how to build security from the ground up in automotive products.Mon, 14 Apr 2025 18:28:24 GMThttps://www.blockharbor.io/blog/dear-vulnerable-how-may-i-contact-youhttps://www.blockharbor.io/blog/dear-vulnerable-how-may-i-contact-youExplore responsible vulnerability disclosure in the automotive industry. Learn best practices for reporting security issues and establishing effective communication channels.Mon, 14 Apr 2025 18:27:17 GMThttps://www.blockharbor.io/blog/developing-a-proactive-security-mindsethttps://www.blockharbor.io/blog/developing-a-proactive-security-mindsetDiscover how to cultivate a forward-thinking approach to vehicle cybersecurity. Learn practices that help anticipate threats before they impact your systems.Mon, 14 Apr 2025 18:24:56 GMThttps://www.blockharbor.io/blog/fuzz-testing-vs-penetration-testing-in-automotive-cybersecurityhttps://www.blockharbor.io/blog/fuzz-testing-vs-penetration-testing-in-automotive-cybersecurityUnderstand the differences between fuzz testing and penetration testing for vehicles. Learn when to use each approach and how they complement your security strategy.Mon, 14 Apr 2025 18:23:30 GMThttps://www.blockharbor.io/blog/how-to-prepare-for-a-csmshttps://www.blockharbor.io/blog/how-to-prepare-for-a-csmsGet practical guidance on preparing your organization for Cybersecurity Management System implementation. Learn key steps, resource planning, and success factors.Mon, 14 Apr 2025 18:23:01 GMThttps://www.blockharbor.io/blog/internship-experience-at-block-harborhttps://www.blockharbor.io/blog/internship-experience-at-block-harborFollow one intern's journey at Block Harbor, exploring vehicle cybersecurity projects and team culture. Get insights into what makes our internship program unique.Mon, 14 Apr 2025 18:21:45 GMThttps://www.blockharbor.io/blog/involving-engineers-early-in-the-tara-processhttps://www.blockharbor.io/blog/involving-engineers-early-in-the-tara-processLearn why engineer participation is crucial in early Threat Analysis and Risk Assessment. Discover how early involvement improves security outcomes and reduces development costs.Mon, 14 Apr 2025 18:21:09 GMThttps://www.blockharbor.io/blog/assessing-automotive-cybersecurity-management-system-csms-compliancehttps://www.blockharbor.io/blog/assessing-automotive-cybersecurity-management-system-csms-complianceDiscover strategies to protect automotive supply chains from cybersecurity threats. Learn how to identify vulnerabilities and implement effective security measures across the vehicle ecosystem.Mon, 14 Apr 2025 18:19:46 GMThttps://www.blockharbor.io/blog/securing-the-automotive-supply-chainhttps://www.blockharbor.io/blog/securing-the-automotive-supply-chainDiscover strategies to protect automotive supply chains from cybersecurity threats. Learn how to identify vulnerabilities and implement effective security measures across the vehicle ecosystem.Mon, 14 Apr 2025 18:16:28 GMThttps://www.blockharbor.io/blog/car-hackers-adventures-in-wonderland-cansecwest-2024-journeyhttps://www.blockharbor.io/blog/car-hackers-adventures-in-wonderland-cansecwest-2024-journeyJoin our team's journey at Cansecwest 2024, where vehicle security experts gather. Experience highlights, challenges, and insights from this premier automotive cybersecurity conference.Mon, 14 Apr 2025 18:16:04 GMThttps://www.blockharbor.io/blog/hack-the-box-2024-business-ctf-writeuphttps://www.blockharbor.io/blog/hack-the-box-2024-business-ctf-writeupFollow Block Harbor's team as they tackle the Hack The Box 2024 Business CTF. Discover their strategies, solutions, and lessons learned from this competitive hacking event.Mon, 14 Apr 2025 18:15:35 GMThttps://www.blockharbor.io/blog/exploring-continual-automotive-cybersecurity-activitieshttps://www.blockharbor.io/blog/exploring-continual-automotive-cybersecurity-activitiesLearn about ongoing cybersecurity activities essential for vehicle security throughout its lifecycle. Discover key practices for maintaining protection against evolving threats.Mon, 14 Apr 2025 18:12:36 GMT