smartnuts … the world on the cabaret-style dissecting table

AuthorMichael Bunzel

Michael Bunzel (aka maschasan) is a lawyer and engineer currently based in Germany. For over 25 years he has worked at the intersection of cybersecurity and the laws and regulations that govern it. For more than fifteen of those years, Mike has held various roles in Information Security, Cybersecurity and SCADA/shopfloor security at a German car manufacturer - today in its R&D division, with a focus on E/E systems and automotive cybersecurity regulation across different markets (UN, EU, China, Korea, India, the US and others). He has worked with global organizations across dozens of countries, cultures and languages, and is well-travelled across EMEIA, APAC and the Americas. The articles on this blog do not reflect the views of his employer; they are his personal opinions alone.

Glitching Angriffe Auf Fahrzeuge

G

Die digitale Welt da draußen ist gefährlich. Nicht nur für elektronische Bankgeschäfte, (bewußt) schlecht implementierte Krypto Wallets oder wertvolle Unternehmensdaten, die in den Clouds dieser Welt vor sich hin vegetieren und nur darauf warten, dass jemand die Gammelinfrastruktur des Cloud-Hosters aufmacht. Nein – auch das Bewegen eines Fahrzeugs mit jeder Menge Elektronik an Bord kann zu...

Glitch as you can as soon as you can

G

The digital world’s a bit of a wild west, mate. And we’re not just talkin’ dodgy online banking, half-baked crypto wallets, or sensitive corporate data sitting in cloud servers just waitin’ for some muppet to poke holes in a provider’s rusty infrastructure. Nah – even just takin’ a modern car for a spin can turn into one hell of a ride if someone else decides to take the wheel – digitally, that...

NIS2-Regulierung wird Produktübergriffig

N

Mitte Januar 2025 hat das Bureau of Industry and Security („BIS“) des US-Handelsministeriums die finale Fassung der im September 2024 als Bekanntmachung eines Regulierungsvorhabens (NPRM) gestarteten Rule mit dem Titel „Securing the Information and Communications Technology and Services Supply Chain: Connected Vehicles“ (nachfolgend kurz als “Rule on Connected Vehicles” bezeichnet)...

CRA im OEM-Umfeld

C

Der Cyber Resilience Act (Regulation EU 2024/2847), der am 10. Dezember 2024 in Kraft getreten ist, findet seinen Ankerpunkt in der EU Security Union Strategy und der EU Cybersecurity Strategy von 2020 und ergänzt insoweit die NIS2 Direktive. Der CRA reguliert Produkte oder Services (d.h. Hardware und Software) mit digitalen Elementen. CRA-relevante Produkte oder Service demonstrieren ihre...

Tales from the Loony Bin

T

Today at the illustrious Madhouse, where the inmates have taken a leadership role, there will be another episode of the popular series ‘How American society continues to go down the drain’. Today’s topic: ‘The American way to fight measles’ Step 1: RFK Jr., a completely brain-dead Secretary of Health and an avowed anti-vaxxer in the United States, recommends taking vitamin A to fight...

smartnuts … the world on the cabaret-style dissecting table

Tags

Meist gesehene Beiträge