Upstream’s Global Automotive Cybersecurity Report
Upstream Security Ltd recently published their “2022 Global Automotive Cybersecurity Report” where approximately 900 automotive cyber incidents from the years of 2010 to 2021 have been analyzed, revealing the most prominent risks and their impact on smart mobility....
RISE Road vehicles – Cybersecurity engineering course
A half-day course is organized by RISE explaining the international standard ISO/SAE 21434 which specifies requirements for cybersecurity risk management regarding road vehicle electrical and electronic (E/E) systems. Last day to register: 15 February, 2022 Course...
A new year and a new vulnerability
A teenager reported having found a flaw in a limited number of Tesla vehicles [1,2] allowing him the ability to remotely control some vehicle functions, such as unlocking doors and windows, starting Keyless Driving and deactivating their security system. It started...
What have we learned in automotive cybersecurity from 2021?
Well, the number of ransomware attacks clearly increased in 2021 and it certainly seems like no sector is safe from it, not even the automotive sector. Sometimes multiple sectors get affected, as for example with the Colonial Pipeline attack against oil infrastructure...
CVE-2021-44228 – Log4Shell, a vulnerability shaking the web
Log4j is a popular and widely spread java logging tool incorporated in many services across the web making potentially everyone using Log4j a possible victim, including Apple, Twitter, Steam, Tesla and probably many other car manufacturers and suppliers. The...
Volvo Cars Corporation disclose they have been targeted to a cybersecurity breach on November 30, 2021
In the beginning of December there was some scant information on the Internet saying that Volvo Car Corporation (VCC) had been hit by a ransomware attack. On 1st of December, a tweet on Twitter from a security researcher with the Twitter alias SecuNinja (@secuninja)...