(SeaPRwire) –   Findings from Upstream’s report show that the rapid rollout of Physical AI, with autonomous vehicles ranking among the first production-ready systems deployed in real-world settings, is broadening attack surfaces and boosting the capabilities of malicious actors, creating large-scale cyber risks with far-reaching potential impact.

SHIBUYA, Japan, May 25, 2026 — Upstream, the leading AI-powered extended detection and response (XDR) cybersecurity platform built specifically for connected vehicles, physical AI, and smart mobility, today published its 2026 Global Automotive and Smart Mobility Cybersecurity Report. Now in its eighth year of release, the report reveals a substantial rise in cybersecurity risks across the automotive and smart mobility space. This trend is driven by the fast expansion of APIs and AI-powered architectures, paired with the growing sophistication of organized threat actors. Combined, these factors are widening the gap between attacker capabilities and the industry’s current cybersecurity defenses, with ransomware remaining one of the fastest-growing and most disruptive attack types recorded in 2025.

After analyzing 494 publicly disclosed cybersecurity incidents from 2025 across the global automotive and smart mobility ecosystem, the report identifies two overlapping trends that are reshaping automotive cybersecurity.

AI as a Double-Edged Sword

AI architectures have significantly expanded the attack surface, introducing new access points and systemic vulnerabilities across the entire ecosystem.
“The automotive industry was an early adopter of Physical AI, and as AI capabilities rapidly expand across global markets, it now acts as the reference framework for safety-critical, highly connected systems,” said Yoav Levy, Co-Founder and CEO of Upstream. “However, AI is also allowing attackers to operate faster, at larger scale, and with higher levels of automation, while the industry still relies on security models built for a far more static operating environment. Our 2026 report shows that AI greatly widens the cybersecurity attack surface, as traditional perimeter defenses are no longer sufficient when AI systems adapt dynamically and have a direct impact on real-world physical outcomes.”

Ransomware Drives Cyber Threat Escalation

Financially motivated, well-funded and coordinated attack groups are targeting the sector with increasing frequency, leading to a major spike in ransomware attacks that can add up to billions of dollars in operational and economic losses.
The report also found that 2025 saw a sharp increase in large-scale, coordinated attacks launched by organized threat actors against the automotive and smart mobility ecosystem, leading to increasingly severe operational disruption, financial damage, and reputational harm. The report notes that ransomware attacks grew dramatically as part of this broader rise in malicious cyber activity, with 44% of all recorded attacks linked to ransomware, more than double the volume reported in 2024.

What is more, ransomware attacks are now expanding beyond IT and enterprise systems to target vehicles directly, as demonstrated in a mid-2025 incident where attackers gained access to remote vehicle command and control systems via the accompanying mobile app, locked owners out of their vehicles, took remote control of functions including ignition and door locks, and demanded ransom payment to restore user access.

Additional Key Findings and Insights

• 71% of recorded incidents were traced to black hat actors, up from the 65% share reported in 2024.
• 92% of automotive cyber attacks were carried out remotely, of which 86% required no physical proximity to the targeted vehicles and systems.
• 67% of incidents used telematics and cloud systems as attack vectors; meanwhile, APIs continue to act as the core connecting framework of the automotive and smart mobility ecosystem, and are the point of origin for a large share of recorded incidents.
• 68% of incidents involved data and privacy breaches, while 34% of incidents were intended to cause business and operational disruption.
• 61% of incidents had the potential to impact thousands to millions of mobility assets, with 20% qualifying as massive-scale events.

The report also includes a full analysis of deep and dark web activity related to automotive-specific cyber threats, a review of relevant regulatory changes, and an assessment of how AI is being integrated into cybersecurity resilience strategies.

About Upstream

Upstream provides a cloud-based, AI-powered data management platform built exclusively for connected vehicles, smart mobility, physical AI, and the IoT ecosystem. By leveraging mobility data, Upstream equips customers with advanced, AI-driven cybersecurity solutions, including extended detection and response (XDR), API Security, cyber threat intelligence, SOC services, resilience services, and other related offerings.
Upstream is backed by investors including Alliance Ventures (Renault, Nissan, Mitsubishi), MSI Insurance, Volvo Group, BMW, Hyundai, Nationwide Insurance, Salesforce Ventures, Cisco Investments, CRV, Glilot Capital Partners, and Maniv Mobility.

Find out more at www.upstream.auto

Media Contact
Kate Schoenstadt
kate@headline.media
IL:+972 54 777 6684