Posts

Showing posts with the label #CyberDudeBivash #EVCybersecurity #EVHacking #OCPP #OCPP201 #PlugAndCharge #ISO15118 #ISO21434 #UNECE #R155 #R156 #CPMS #EVSE #OTA #V2G #ZDI #Pwn2Own #Brokenwire #PKI #mTLS

EV Hacking in 2025: Real-World Risks, Regulations, and How to Secure Cars & Chargers By CyberDudeBivash • September 21, 2025 (IST)

Image
  Executive snapshot Attack reality: EVs are cyber-physical systems. Demonstrations at Pwn2Own Automotive 2025 alone yielded 49 zero-days across in-car systems and chargers—proof that the threat isn’t hypothetical. BleepingComputer What’s changed: Charging networks are rapidly adopting OCPP 2.0.1 with Advanced Security (mTLS, cert lifecycle, signed firmware). Even Tesla V4 Supercharger hardware now carries an official OCPP 2.0.1 certification. Open Charge Alliance +2 Open Charge Alliance +2 Compliance you can’t ignore: For type approval and market access, align engineering to ISO/SAE 21434 and regulatory frameworks UNECE R155 (CSMS) and R156 (software updates/OTA). NHTSA guidance remains the north star in the U.S. UNECE +2 UNECE +2 Plug-&-Charge (PnC) goes mainstream: A universal Plug-and-Charge framework built on ISO 15118 and a Certified Trust List (CTL) is rolling out, making certificate management and revocation central to security. The Verge T...