The following cybersecurity column by Mark Zachos, president and founder of DG Technologies, recently appeared in the Winter 2026 issue of Fleet Maintenance & Technology, the quarterly magazine published by the American Trucking Associations (ATA) Technology & Maintenance Council (TMC). Zachos also chairs the TMC Cyber Security Task Force. 

The Role of AI in Cybersecurity in 2026

By Mark Zachos

Looking at cybersecurity predictions for the upcoming year, you’d be hard-pressed to find a list that does not predominantly involve artificial intelligence (AI).

AI is engrained into much of what we do online – allowing access to even more immediate information and compressing once-complex and time-intensive tasks into those that can be accomplished with just a few lines of instruction and the simple push of a button. In trucking, AI together with telematics can help fleets run more smoothly, more safely and more cost-effectively.

Fleet management technology has evolved dramatically, becoming smarter and more practical for day-to-day operations. Telematics systems monitor everything from a truck’s exact position to how hard the brakes are being pushed, how much fuel is being burned on each trip and even when a driver is idling too long. The constant stream of real-time information gives managers a clear picture of performance, highlighting where efficiency can be improved.

An efficient and effective productivity tool, AI builds on all of that data by transforming it into useful guidance, like recognizing trends in driver behavior, flagging early signs of mechanical issues before they cause breakdowns and forecasting when a vehicle will need maintenance. AI can also recommend optimized delivery routes by taking into account construction zones, road closures and weather.

Almost daily, we’re learning new ways for AI to enhance and streamline industry. However, at the same time, AI is also productive for cyber criminals because it allows them to more easily create exploits, or attacks, that then go out and phish for information. Further, it can create ways to attack equipment by helping guess passwords or by helping attackers better understand the actual bits and bytes of CAN JBUS messages to decode them.

But while attackers have an advantage with AI as a tool, on the other side, we “good guys” also have an advantage in using it to help bolster our defenses against cyberattacks.

Steven Piper, a certified information systems security professional (CISSP), believes that, at least for now, AI will still continue to give IT security teams the advantage.

“I don’t know if threat actors are ever going to have the upper hand with AI,” Piper said in November as part of a webinar on his “Top 5 Security Predictions for 2026” for the International Information System Security Certification Consortium (ISC2).

Head of marketing and research firm CyberEdge Group in Fort Lauderdale, Fla., and cybersecurity online news source Security Buzz, Piper included in his predictions an uptick in high-profile attacks involving deepfake photos, audio and video, and agentic AI becoming “a game-changer for information security teams over the next three years.”

Unlike AI, which simply makes recommendations or analyzes data, agentic AI uses machine learning models to take action on its own to achieve a goal – deciding what steps to take, carrying them out, then adjusting behavior as conditions change.

In trucking, this might look like AI autonomously adjusting delivery routes without human assistance to avoid storms or road closures, or re-planning delivery schedules and automatically contacting customers when a driver is delayed. It also could look like automatically scheduling repairs, ordering parts and booking repair shop appointments when AI detects early signs of engine trouble.

Like AI in recent years, agentic AI also opens the door to more cyberattacks and raises the stakes for trucking and other industries due to its capacity to make cyberattacks more automated, more adaptive and more persistent.

In place of a human initiating an attack, agentic AI acts on its own, mining for weaknesses, adjusting tactics as needed and carrying out other parts of attacks without supervision, making human threat actors even faster, stealthier and more efficient. For sectors as interconnected as trucking, that means cybersecurity should be viewed as just as essential as maintenance or route planning.

With new capabilities like agentic AI transforming the security landscape, both defenders and adversaries now have unprecedented power. But one constant remains – people continue to be the greatest vulnerability, and the greatest asset, in any security program.

Most cyber incidents don’t start with a sophisticated hack, but with human error. Someone clicks a convincing link, reuses a weak password or rushes through a process that should have been double-checked.

Some simple, impactful security measures organizations can take include requiring employees use long passwords and multi-factor authentication, using phishing simulation software to train staff to pause before clicking on questionable links and to encrypt files containing sensitive information and data.

Organizations also can implement role-based security, authorizing employees at different levels to perform different operations, for instance, having controls around who is authorized to change passwords, or which employees have access to certain data and decryption keys for encrypted data. Human risk management reduces everyday vulnerabilities by building habits, awareness and systems that help people in an organization make safer choices.

Technology is only going to keep advancing and, with that, threats will keep intensifying. The individual organizations that succeed in 2026 will be the ones that align their strategies, their tools and, most importantly, their people.

For further information:

Dearborn Group, Inc.
33604 West Eight Mile Road
Farmington Hills, MI 48335
1 (248) 888-2000
sales@dgtech.com

General Contact:

John McNelis
Sales and Marketing Manager
jmcnelis@dgtech.com

Visit our website: www.dgtech.com
Our Services Portal:  https://www.truck-connect.com/

Follow us!
X: x.com/DGTechnologies
Facebook: facebook.com/vehiclenetworksolutions
Instagram: Instagram.com/dg_technologies/
YouTube: www.youtube.com/@DGTechnologies

This article (Seven Stages of the Cyber Kill Chain) was originally published in the Winter 2025 issue of Fleet Maintenance & Technology magazine.

The Seven Stages of the Cyber Kill Chain

Knowing the steps of a cyberattack can help mitigate damage to an organization

By Mark Zachos

Given the critical role that trucking plays in the supply chain, it’s not surprising that the industry is an attractive target for cyber criminals — which makes understanding the Cyber Kill Chain essential.

Having a grasp of what a Cyber Kill Chain is and being able to identify its seven stages can give fleets an advantage when it comes to heading off cyberattacks.

The term “Cyber Kill Chain” was coined in 2011 by Lockheed Martin, the American defense, information security and technology company, and it refers to the set of cyberattack stages leading up to a successful cyberattack. In the trucking industry, it could involve things like phishing emails or vulnerabilities in outdated software allowing an attacker to target logistics data, fleet management software or even vehicle control systems. And the results could be detrimental: disruption of deliveries, data breaches, financial losses or even potential accidents on the road.

With the emergence and accelerated growth of artificial intelligence (AI), it is important to recognize and prepare for the fact that what once would take hackers weeks to successfully pull off, may now take only days, or even hours, and makes knowledge of the Cyber Kill Chain even more vital today.

Lockheed Martin developed its Cyber Kill Chain as a framework made up of seven sequential stages with the idea that if an organization knows how to identify a potential threat at any phase in the process, it has a better chance of breaking the chain of attack and stopping an attacker from successfully infiltrating and compromising its security.

Understanding the Cyber Kill Chain Framework

The Cyber Kill Chain provides valuable insight into the phases of a cyberattack. Knowledge of these cyberattack stages enables fleets and other organizations to proactively identify and block attacks at each stage as well as aid in determining what areas need protecting.

Stage 1: Reconnaissance This phase involves compiling information about the target company or system. The attacker collects data about potential vulnerabilities, company personnel, technologies and network infrastructure.

Stage 2: Weaponization The attacker then creates malicious software, such as viruses or Trojans, and pairs them with an exploit – a program or piece of code designed to use a weakness in the system – to take advantage of a security flaw or vulnerability identified in Stage 1 to gain unauthorized access or perform harmful actions.

Stage 3: Delivery In this stage, the attacker delivers the weaponized malware to the target. Common methods of delivery include phishing emails, malicious attachments or software vulnerability abuses.

Stage 4: Exploitation This step occurs when the malware is activated to compromise or cause harm to the victim’s system.

Stage 5: Installation In this phase, the attacker installs a backdoor or other mechanism to work around a system’s security measures, giving the attacker continued access to the compromised system.

Stage 6: Command and Control The attacker establishes a communication channel with the compromised system to send commands and receive data. This phase enables remote control over the target system.

Stage 7: Actions on Objectives The mission of the cyberattack is accomplished when attackers succeed in stealing data, destroying systems or otherwise accomplishing what they set out to do. It is at this stage when users may realize something is wrong.

There are a variety of ways for fleets to mitigate cyber risks including: educating employees about phishing scams and best practices for cybersecurity hygiene, isolating critical systems from the public internet to limit potential access to cyber criminals, promptly addressing vulnerabilities in software and systems, implementing security tools to monitor network activity and identify suspicious behavior and coming up with a response plan to cyber incidents that includes data backup and recovery procedures.

By recognizing how each phase of the Cyber Kill Chain unfolds, fleets can spot vulnerabilities earlier and strengthen overall cybersecurity defenses.

Learning how to identify the steps and understanding ways to strengthen defenses, monitor systems and mitigate risks at each stage, an organization can significantly reduce the risk of being victimized by a successful cyberattack.

For further information:

Dearborn Group, Inc.
33604 West Eight Mile Road
Farmington Hills, MI 48335
1 (248) 888-2000
sales@dgtech.com

General Contact:

John McNelis
Sales and Marketing Manager
jmcnelis@dgtech.com

Visit our website: www.dgtech.com
Our Services Portal:  https://www.truck-connect.com/

Follow us!
X: x.com/DGTechnologies
Facebook: facebook.com/vehiclenetworksolutions
Instagram: Instagram.com/dg_technologies/
YouTube: www.youtube.com/@DGTechnologies

Published in TMC Fleet Maintenance & Technology magazine Spring 2025

Why Multi-Factor Authentication Matters for Trucking Companies

By Mark Zachos

When it comes to cybersecurity in trucking, it is important to remember the extent of just how much the industry encompasses. There are computerized tools for everything from diagnostics and fuel management to payroll and driver hours to route planning and other logistics. These tools play a big part in keeping wheels on the road, and without proper security, can open a trucking company up to a cyberattack.

Multi-factor authentication (MFA) is a valuable tool that can be implemented on computer systems and accounts to help individuals and organizations ward off cyberattacks by protecting critical information and data.

“MFA is a layered approach to securing physical and logical access where a system requires a user to present a combination of two or more different authenticators to verify a user’s identity for login,” according to the U.S. Cybersecurity & Infrastructure Security Agency (CISA). “MFA increases security because even if one authenticator becomes compromised, unauthorized users will be unable to meet the second authentication requirement and will not be able to access the targeted physical space or computer system.”

The way it works is that in addition to simply entering a password or personal identification number (PIN) to gain access to an account protected with MFA, users are also required to present at least one extra piece of evidence to prove they are legitimate. This evidence typically falls into three categories:

1. Something you know – like your password or a PIN
2. Something you have – like a smartphone, a USB key or a security token
3. Something you are – like your fingerprint or facial recognition

“Typically, the second factor we use is ‘something we have,’ such as our smart phone with access to email or an authenticator app, a smart card … or a token that generates a unique code based on a complex algorithm,” explained Ryan A. Higgins, Chief Information Security Officer for the U.S. Department of Commerce, in a 2022 Cybersecurity Awareness Month post. “More companies and organizations are offering MFA as an option by emailing you a code or using an authenticator app.”

Why Should the Trucking Industry Care About MFA?

Since trucking companies handle things like client contracts, delivery schedules payroll information and other sensitive information, it causes the industry to be an appealing target for cybercriminals. MFA makes it much more difficult for hackers to break into an account, even if a hacker somehow gets hold of a password or another single layer of authentication.

Take, for example, phishing attacks. The most careful employee can still accidentally click a bad link. But with MFA enabled, even if an account password gets compromised in a phishing attack, there is a high chance that hackers will not be able to come up with a second authenticator needed to log in. Thus, access to that account will be denied.

A single cyber breach can shut down operations, costing a company time, money and its reputation. MFA can help fleets protect GPS tracking, telematics and electronic logging devices (ELDs), all of which are vulnerable to attacks. A cybercriminal gaining access to any of these systems could disrupt routes, delay deliveries or even endanger driver safety.

And for businesses that handle government contracts or sensitive goods, MFA is often seen as a best practice to protect fleet information and to meet compliance standards.

How MFA Works in the Real World

Say a dispatcher needed to log in to a company’s logistics portal. With MFA, the dispatcher likely first would enter a password (something they know). Next, the dispatcher would receive a cellphone notification (something they have) or, if it is a newer system, they might also scan a fingerprint (something they are).

Only after verifying at least two of these factors would the dispatcher gain access. So even if someone stole a password, that cyberthief would hit a dead end without access to at least one other factor.

Here are some ways fleets can apply MFA:

1. Start with Critical Systems – Identify which systems are most crucial to your operations. Implement MFA there first.

1. Educate Your Team – Beyond installing new tech, it’s about getting buy-in from your drivers, dispatchers and office staff. Explain how MFA protects not just the company but also employees’ personal data.
2. Choose the Right Tools – There is no shortage of MFA solutions out there. Some integrate directly with the software you are already using. Pick a solution that is user-friendly for your team.
3. Make It Trucking-Friendly – The trucking industry has unique challenges – drivers are on the move, often working irregular hours. Make sure your MFA system is accessible on mobile devices and does not require perfect cell service to work.
4. Plan for Exceptions – What happens if someone loses their phone or their fingerprint scanner doesn’t work? Have a backup plan in place, like security questions or a temporary code system, so operations do not grind to a halt.

In the trucking industry, where every minute counts and margins can be razor-thin, the last thing an organization wants is to deal with the chaos of a cyberattack. MFA is a smart, cost-effective way to protect business, drivers and customers.

“Most people accessing services online have relied exclusively on passwords to protect their accounts, yet passwords have proven to be a weak link on their own due to the sheer number we are asked to memorize and how effective computer programs are at cracking passwords,” said Higgins. “This is where MFA helps overcome these inherent weaknesses and better protect us all. Adoption of a second authentication factor increases confidence that the right individual is accessing the right system or service.”

About the Author

 Mark Zachos

Mark Zachos is a vehicle communications and cybersecurity expert for the Society of Automotive Engineers (SAE) International and the American Trucking Associations (ATA) Technology & Maintenance Council (TMC). He is the owner and president of DG Technologies in Farmington Hills, Michigan, the director of the Vehicle Cyber Engineering Lab at the University of Detroit Mercy, where he also teaches, and he runs the Cybersecurity Skills Station at TMC SuperTech each year.

For further information:

Dearborn Group, Inc.
33604 West Eight Mile Road
Farmington Hills, MI 48335
1 (248) 888-2000
sales@dgtech.com

General Contact:

John McNelis
Sales and Marketing Manager
jmcnelis@dgtech.com

Visit our website: www.dgtech.com
Our Services Portal:  https://www.truck-connect.com/

Follow us!
X: x.com/DGTechnologies
Facebook: facebook.com/vehiclenetworksolutions
Instagram: Instagram.com/dg_technologies/
YouTube: www.youtube.com/@DGTechnologies

Staying Cybersafe: Essential cybersecurity tips for trucking fleets

Simple mistakes, such as reusing passwords or clicking unknown links, can expose fleets to costly cyberattacks.

Mark Zachos     Oct. 28, 2025

Key takeaways

• Simple errors, such as reusing passwords or clicking unknown links, can expose fleets to cyberattacks.
• Phishing and AI-driven scams increasingly target fleet employees to access sensitive systems.
• Regular updates, strong passwords, multifactor authentication, and data backups reduce cyber risks.

While it is common today to see cyberattacks and online breaches in the news, for those who have not felt their effects firsthand, it may feel far-removed. To keep it that way, it is more important than ever now to understand that without consistent monitoring and proper precautions, a cyberattack can happen to anyone, and many attacks are actually caused by simple mistakes that could be made by any person at any level in any organization.

Common mistakes that put fleets at risk

Things as simple as clicking on an attachment or a link in an incoming email or using the same password for multiple online accounts can trigger an attack, creating problems not only for the individual but potentially leading to a fleet’s infiltration or even shutdown.

This summer, researchers for Cybernews reported discovering lists of billions of exposed usernames and passwords from major platforms, including Google, Apple, and Facebook. According to the June article, it was not known who compiled the data or where it came from, but cybercriminals were at least partly responsible for it. Its disclosure potentially puts millions of users at risk for identity theft, account takeovers, and targeted phishing

Since the breach, Google has been advising Gmail users to update their passwords. In a Google Cloud blog post titled “The Cost of a Call: Voice Phishing to Data Extortion,” the Google Threat Intelligence Group (GTIG) spelled out a recently reported tactic involving hackers pretending to be customer support representatives from companies like Google or Apple.

Through deceptive emails and phone calls, known as phishing and vishing (voice phishing), attackers attempt to manipulate users’ trust and talk them into handing over passwords, multifactor authentication codes, and other sensitive information. Once divulged, these details can give hackers access to individual victims’ accounts, which can even ultimately mean access to entire companies’ computer systems.

GTIG specifically mentioned Salesforce, a cloud-based software company that works in partnership with Google, and stated it has been tracking “a financially motivated threat cluster that specializes in voice phishing campaigns specifically designed to compromise organizations’ Salesforce instances for large-scale data theft and subsequent extortion.”

According to the post, attackers were able to repeatedly breach networks because their operators were so convincing at impersonating IT support personnel. The report made it clear that, as a result, neither Google nor Salesforce had been breached at the company level. “In all observed cases, attackers relied on manipulating end users, not exploiting any vulnerability inherent to Salesforce.”

Perhaps not surprisingly, cybercrime is increasingly involving artificial intelligence (AI). The Federal Bureau of Investigation (FBI) San Francisco Field Office issued a release last year warning about perpetrators who use AI in their cyber scams:

“In addition to traditional phishing tactics, malicious actors increasingly employ AI-powered voice and video cloning techniques to impersonate trusted individuals, such as family members, co-workers, or business partners. By manipulating and creating audio and visual content with unprecedented realism, these adversaries seek to deceive unsuspecting victims into divulging sensitive information or authorizing fraudulent transactions.”

Former special agent in charge of the FBI’s San Francisco Field Office, Robert Tripp, was quoted in the release, “As technology continues to evolve, so do cybercriminals’ tactics. Attackers are leveraging AI to craft highly convincing voice or video messages and emails to enable fraud schemes against individuals and businesses alike.” He added, “These sophisticated tactics can result in devastating financial losses, reputational damage, and compromise of sensitive data.”

Unfortunately, cybercrime is not going away, and any individual or organization using devices that connect to the internet, Bluetooth, Wi-Fi, or cellular networks are vulnerable to an attack. Obviously, it is important to follow the basics, such as creating strong passwords, avoiding using the same login credentials for multiple accounts, using two-factor authentication, and not clicking on links or attachments unless you know and trust who sent them.

Practical steps to protect fleet data and operations

Following are some additional, equally important steps from the April 7, 2024, International Security Journal article, “12 Ways to Prevent Cyber Crime,” by Simon Burge:

• Keep software and devices updated to patch vulnerabilities that hackers could exploit.
• Install reputable antivirus and anti-malware software and keep it updated.
• Use a virtual private network (VPN) when accessing the internet from unsecured networks, including public Wi-Fi networks.
• Don’t save passwords on your browser. Instead, use a secure password manager or memorize them.
• Limit the personal information you share on social media and adjust your privacy settings.
• Back up important data regularly onto external devices or to the cloud.
• Disconnect the compromised system/device from the internet, change your passwords, run an anti-virus scan, inform the relevant authorities, and notify your bank or other affected institutions if you suspect a breach.

About the Author

 Mark Zachos

Mark Zachos is a vehicle communications and cybersecurity expert for the Society of Automotive Engineers (SAE) International and the American Trucking Associations (ATA) Technology & Maintenance Council (TMC). He is the owner and president of DG Technologies in Farmington Hills, Michigan, the director of the Vehicle Cyber Engineering Lab at the University of Detroit Mercy, where he also teaches, and he runs the Cybersecurity Skills Station at TMC SuperTech each year.

For further information:

Dearborn Group, Inc.
33604 West Eight Mile Road
Farmington Hills, MI 48335
1 (248) 888-2000
sales@dgtech.com

General Contact:

Mr. John McNelis
Sales and Marketing Manager
jmcnelis@dgtech.com

Visit our website: www.dgtech.com
Our Services Portal:  https://www.truck-connect.com/

Follow us!
X: x.com/DGTechnologies
Facebook: facebook.com/vehiclenetworksolutions
Instagram: Instagram.com/dg_technologies/
YouTube: www.youtube.com/@DGTechnologies