Intruders attempt to psychologically manipulate employees and contractors to obtain confidential information.
Public transportation offices are witnessing a surge in social engineering cyberattacks, where intruders attempt to psychologically manipulate employees and contractors to gain confidential information. During a roundtable at the annual Transportation Research Board meeting on January 8, experts shared examples of these sophisticated attacks.
The Port Authority of New York and New Jersey has been particularly susceptible, with cybercriminals exploiting the “human fallibilities and vulnerabilities” of its employees, according to Josh DeFlorio, Chief of Resilience and Sustainability at the Port Authority.
In social engineering cyberattacks, digital criminals leverage their social skills to engage with specific organizational staff, aiming to obtain confidential information or access their computer systems. Jennifer DeBruhl from the Department of Rail and Public Transportation in Virginia recounted a successful attack that led to a statewide system outage lasting six months.
Cordell Schachter, Chief Information Officer of the United States Department of Transportation (USDOT), emphasized the importance of preventive measures, such as multi-factor authentication and system segmentation. He recommended a cybersecurity self-assessment and contacting the FBI or the Cybersecurity and Infrastructure Security Agency (CISA) in case of an attack. “Everyone should undergo a cybersecurity self-assessment to help us understand our current risks and report our plans to remedy them,” stated Schachter.

The US DOT combats these threats through monthly phishing tests for employees, reducing the click-through rate from 20% to 4%. Schachter underscored the immediate replacement of default passwords and basic cyber hygiene practices.
Effective strategies include flagging internal emails with red banners and integrating cybersecurity into the DOT’s strategic plan. Furthermore, the DOT collaborates with the Department of Homeland Security on risk management for the transportation systems sector to safeguard the national transportation network from cyberattacks. CISA provides online resources to counteract these threats.

Waymo under investigation for potential safety risk in school zones
A recent wave of videos has shown that some Waymo vehicles are not complying with safety regulations in school zones. The autonomous vehicle company Waymo,

Don’t Blame the Snow: The Real Causes Behind Winter Truck Accidents
Don’t Blame the Snow: Why Most Winter Truck Accidents Are Preventable

Mexico aligns with U.S. as new tariffs target Asian imports
Mexican lawmakers gave their final approval to the new tariffs on Asian imports, largely aligning themselves with the United States’ efforts to tighten trade barriers

Seven charged in New York CDL fraud case involving DMV employees
A group of DMV employees in New York allegedly manipulated the process of obtaining commercial driver’s licenses by allowing applicants who never showed up to

Transportation Seeks Proposals to Rebuild the American Legion Memorial Bridge
Transportation seeks proposals to rebuild the American Legion Memorial Bridge, repeating the call for proposals to address the most critical freight chokepoint on the East Coast. The initiative aims to attract ideas, financing models, and private-sector innovation to modernize a corridor that today imposes millions in delays on the trucking industry.
New action plan targets fraud, safety, and regulatory gaps in U.S. trucking
A roadmap to reform: how TAEC plans to eliminate fraud in American trucking A broad group of state trucking associations has published an action plan