The Upstream Blog

Explore Blog Posts:
Blog

When API Security Fails, Mobility Breaks: Lessons from 2025’s Cyber Incidents

With just over three months left in 2025, one thing is already clear. One of the weakest links in connected mobility is APIs. Oversights that looked minor on…

LARA DOEL

Strategic Product Marketing
  • Cybersecurity
  • Threat Intelligence
  • VSOC

BadAlloc Might Pose Risk to More Than One Hundred Million Vehicles

We are constantly monitoring cyber incidents in the mobility landscape as part of our commitment to make mobility more safe and secure for everyone. With…
SHACHAR AZRIEL

AutoThreat Product Manager & Team Lead
August 25, 2021
  • Compliance
  • Cybersecurity
  • VSOC

Understanding the UNECE WP.29 Cybersecurity Regulation (CSMS)

On June 25, 2020, after roughly two years of preparations and revisions, the United Nations formally adopted two new regulations on automotive cybersecurity 1. Automotive regulations…
FAY GOLDSTEIN

Communications Manager
July 8, 2021
  • Compliance
  • Cybersecurity

Complying with NHTSA’s new order for crash reporting

In the last few years, progress has been made in autonomous driving technology for consumer and commercial vehicles. The Society of Automotive Engineers (SAE) classifies…
GUY MOLHO

VP of Products
July 1, 2021
  • Threat Intelligence

From a Single TCU to Full Control

Security researchers from Pen Test Partners1 compromised an entire automotive corporation through the TCU (telematics control unit). They manipulated the TCU of a vehicle and…
TEAM UPSTREAM
June 8, 2021
  • Cybersecurity
  • Threat Intelligence
  • VSOC

Warning: This car may contain vulnerable Software or Hardware

In many industries, there is growing demand for transparency in product processes and content. Companies are increasingly asked to detail the composition of their products…
SHACHAR AZRIEL

AutoThreat Product Manager & Team Lead
March 18, 2021
  • Compliance
  • Cybersecurity
  • VSOC

What Does a Magical God of Death Have to Do With Automotive Cybersecurity?

In a humorous play-on-words, CVE-2021-3156, nicknamed “Baron Samedit” by the researchers who discovered the vulnerability, paid homage to the folklore death god “Baron Samedi” and…
SHACHAR AZRIEL

AutoThreat Product Manager & Team Lead
February 2, 2021
  • Compliance
  • Cybersecurity
  • VSOC

ISO/SAE 21434: Setting the Standard for Automotive Cybersecurity

Understanding the ISO/SAE 21434 draft standard and Upstream Security’s solutions for effective compliance in the realm of automotive cybersecurity. Why was this automotive SAE cybersecurity standard needed?…
FAY GOLDSTEIN

Communications Manager
May 3, 2020
  • Aftersales & Management
  • Threat Intelligence
  • VSOC

Upstream – $30M Series B for Shifting into High Gear

We launched Upstream in early 2017 with a mission to make connected vehicles safe and secure at a time when the automotive industry is seeing…
YOAV LEVY

CEO and Co-founder
October 21, 2019
  • Cybersecurity
  • Threat Intelligence
  • VSOC

How to Protect Against Telematics Server Attacks

Misconfigured reporting server gave hackers direct access to sensitive data In May 2018, a bug led to a major security threat affecting CalAmp, a telematics…
TEAM UPSTREAM
August 14, 2019