August 6, 2026 -
Cybersecurity is one of the most challenging issues in the automotive industry, despite sustained efforts to develop and deploy comprehensive solutions. New categories of cyberattacks will emerge alongside new vulnerabilities as software-defined vehicles (SDVs) add new software platforms. Artificial intelligence expands cyberattack methods and capabilities while enabling increasingly sophisticated attackers to develop new threats and strategies.
Continuous improvements in cybersecurity technology, products, and services are required. AI-based cyber defense has become increasingly important in the automotive industry, while regulations and standards need to be updated regularly. Effective cybersecurity also requires real-time tracking of new and emerging cyberthreats.
The annual reports published by Upstream Security remain a key reference for tracking developments in automotive cybersecurity. The 2026 Upstream Global Automotive Cybersecurity Report is the eighth annual edition, with 144 pages of data and references. Upstream has a large and growing database of cybersecurity information. It monitors over 40 million mobility assets and tracks more than 50 billion API messages per month. It has also tracked vehicles over 120 billion miles. Upstream said it monitored 1,871 active cyberthreat actors in 2025, up from 1,133 in 2024.
Since 2010, Upstream has analyzed 2,651 automotive-related cyber incidents. In 2025 alone, Upstream analyzed 494 publicly available cybersecurity incidents, up from 409 in 2024 and 295 in 2023.
Common Vulnerabilities and Exposures (CVEs) identify, define, and catalog publicly disclosed vulnerabilities that can be exploited in cyberattacks. The Common Vulnerability Scoring System (CVSS) is an open, standardized method for rating the severity of CVEs. The CVSS helps organizations prioritize and coordinate joint responses based on the vulnerability’s severity, time of introduction, and environmental factors. Vulnerabilities are graded as Critical, High, Medium to Low, or None, based on their CVSS score.
The next figure shows how auto-related CVEs increased in the last seven years, from 24 new CVEs in 2019 to 450 new CVEs in 2025. Cumulative CVEs jumped from 24 in 2019 to 1,597 in 2025. New CVEs added in 2025 accounted for 28% of the total.