May 2025
researchers showed they could reach a 2020 Nissan Leaf remotely and move its steering wheel while the car was driving.
The Drive, May 2025Trucks, vessels, trains, drones, and the systems that dispatch them all act on commands, positions, and paperwork they cannot prove. DOR proves each one is authentic before anything moves.
This is already happening.
Moving people and freight now runs on software. In 2025 and 2026, researchers and criminals showed they can reach the steering wheel, the load board, and the position on the screen.
Since Jun 2025
Proofpoint has tracked crime groups breaking into trucking carriers and freight brokers through fake load postings, then bidding on legitimate loads to steal the cargo.
Help Net Security, November 2025Mar 17, 2026
the deadline after which software in connected vehicles sold in the U.S. can no longer be maintained or updated by companies tied to foreign adversaries, under the Commerce Department's connected vehicle rule.
Venable, February 2026Jul 16, 2027
the deadline for U.S.-flagged vessels and regulated port facilities to submit approved cybersecurity plans under the Coast Guard's maritime cyber rule, in effect since July 2025.
U.S. Coast GuardDec 22, 2025
the day the FCC added new foreign-made drones and their key parts to its Covered List, citing risks that include remote disablement through software updates.
CyberInsider, December 2025Mar 2026
the FAA updated its guidance on GPS jamming and spoofing as interference becomes a growing problem in U.S. airspace.
NBAA, March 2026Every command and position proven before anything moves.
Vehicles, vessels, aircraft, trains, and the people who dispatch them all act on what they are told. DOR proves it first, and the person at the controls always keeps them.
Vehicles and FleetsTrucks, cars, buses, and the telematics that connect them.Vessels and PortsShips, workboats, terminals, and the systems that steer and load them.Drones and AviationDrones, aircraft operations, and the navigation they rely on.Rail and TransitSignals, train control, and the systems riders see.Freight and DispatchLoads, bookings, documents, and the people who move them.
Vehicles and Fleets
Trucks, cars, buses, and the telematics that connect them.
V-01
Remote takeover
Researchers have moved a car's steering wheel remotely while it was driving. DOR proves every command reaching steering, braking, and engine controls came from an authorized source before the vehicle acts on it.
V-02
Over-the-air updates
Vehicles and telematics units take software updates over the air, and an altered update reaches the whole fleet at once. DOR verifies each update before any vehicle installs it.
V-03
Telematics and logs
Location, hours, and engine data feed dispatch, billing, and compliance, and all of it can be faked. DOR proves each reading came from the vehicle that claims it, unaltered.
Vessels and Ports
Ships, workboats, terminals, and the systems that steer and load them.
S-01
Steering and autopilot
Autopilots and joystick systems steer on commands they cannot verify. DOR proves every steering and engine command came from the helm or an authorized system, and the person at the helm always keeps control.
S-02
Position and AIS
GPS positions can be faked, and AIS reports can place a ship somewhere it is not. DOR checks position data where it enters the bridge and keeps verified reports apart from unverified broadcasts.
S-03
Terminal and cargo systems
Port and terminal systems decide what gets loaded, released, and where it goes. DOR proves each instruction came from an authorized source before cargo moves.
Drones and Aviation
Drones, aircraft operations, and the navigation they rely on.
D-01
Drone command links
A drone obeys the commands that reach it. DOR verifies the source of every command before the drone acts, whatever link carried it.
D-02
Navigation under interference
GPS jamming and spoofing are a growing problem in U.S. airspace. DOR checks navigation data where it enters and keeps backup sources honest when GPS is lost.
D-03
Flight and maintenance records
Flight and maintenance records decide whether an aircraft is fit to fly. DOR keeps every entry provable, so a record changed after it was signed stands out.
Rail and Transit
Signals, train control, and the systems riders see.
R-01
Signals and train control
Train control and signaling act on commands that must come from the right place at the right time. DOR proves each command is authentic and current before it reaches the equipment, and safety systems are never held.
R-02
Schedules and rider information
Departure boards, schedules, and announcements can be altered to cause confusion. DOR proves each update came from the operator before riders see it.
Freight and Dispatch
Loads, bookings, documents, and the people who move them.
F-01
Load boards and bookings
Crime groups post fake loads, break into carriers, and bid on legitimate freight to steal it. DOR proves who is behind each booking and message before a load is tendered or released.
F-02
Documents and handoffs
Bills of lading, rate confirmations, and delivery receipts can be forged or changed. DOR keeps each document provable from the moment it is created.
F-03
The rules you answer to
The Coast Guard's maritime cyber rule, the Commerce Department's connected vehicle rule, and the FCC's drone decision all ask operators to know what their systems run. DOR produces that record.
How DOR works with you.
Nothing to rip out. No dependence on a link that can drop. Every deployment starts with your operation as it runs today.
Walk the operation
DOR maps what your vehicles, vessels, aircraft, and dispatch systems receive and act on, from the first command to the final record.
Build to it
Every deployment is built to your equipment, your carriers and vendors, and the rules you answer to.
Deploy on what you run
DOR runs as software on the systems you already operate, fully offline where it needs to be. Where a vehicle or vessel has nothing suitable aboard, DOR provides a compact host built for it.
Hand over the evidence
You get a record of what was checked, what was held, and why. It cannot be edited.
Inside every deployment
- Verification where it arrives
- Commands, positions, updates, and documents are proven authentic before your vehicles, vessels, or people act on them.
- A hold, not just an alarm
- Anything that fails is held or flagged by rules you set, and released only by an authorized person with a recorded reason. Drivers, captains, and pilots always keep control.
- A record that stands
- What was checked, held, and released, kept in a record no one can edit.
Questions operators ask.
Straight answers to what fleet, vessel, port, and freight leaders ask first.
Does DOR drive, steer, or dispatch anything?
No. DOR checks whether commands, positions, and records are authentic and unchanged. Driving, steering, and dispatch decisions stay with your people and your systems.
Can a driver, captain, or pilot always take control?
Always. DOR never stands between a person at the controls, or any safety function, and the vehicle, vessel, or aircraft they operate.
Do we have to replace our vehicles, telematics, or navigation equipment?
Usually not. DOR runs as software on the systems you already operate, and provides a compact host when a vehicle or vessel has nothing suitable aboard.
Does DOR need a connection to work?
No. DOR runs fully offline, at sea, in the air, or anywhere a link drops, and depends on no outside service to verify anything.
Will DOR slow down our vehicle or vessel systems?
DOR verifies at the pace of the systems it protects. Every deployment is built and tested against your equipment before it goes live.
Does DOR replace our fleet or telematics security tools?
No. Those tools protect connections and watch for known threats. DOR proves each command and reading came from where it claims, which gives them firmer ground to work from.
How does DOR help with Coast Guard, vehicle, and drone rules?
The Coast Guard's maritime cyber rule took effect July 16, 2025, and requires U.S.-flagged vessels and regulated facilities to submit approved cybersecurity plans by July 16, 2027. The Commerce Department's connected vehicle rule limits software tied to foreign adversaries in vehicles sold in the U.S., and the FCC added new foreign-made drones to its Covered List in December 2025. Each asks operators to know what their systems run. DOR produces a verifiable record of what your systems received, checked, and acted on that cannot be edited.
Is DOR only for large fleets?
No. Every deployment is built to the operation in front of it, from a single vessel or a small carrier to a national fleet.
What does an engagement with DOR look like?
DOR walks your operation, builds to your equipment and rules, deploys on what you already run, and hands you the evidence. It starts with a briefing.
Reference
The Transportation and Logistics Reference.
The full list behind this page: how vehicles, vessels, drones, trains, and freight systems get fooled, in plain language, with what DOR does about each one.
Transportation and Logistics
Start with a briefing.
Bring your fleet list and the systems that dispatch it, or just the question your operations team keeps asking. DOR will show you exactly where it fits.