AI Is Both the Biggest Threat and the Best Defence in Automotive Cybersecurity

Upstream Security's 2026 Global Automotive and Smart Mobility Cybersecurity Report identifies artificial intelligence as the defining force reshaping the threat landscape on both sides of the attack.

On the attacker side, AI tools are enabling threat actors to map automotive targets faster, identify vulnerabilities with less manual effort, and launch more convincing phishing campaigns at scale. The result is that attacks which previously required significant expertise and time are now accessible to a much wider range of adversaries. Upstream found that cybersecurity incidents more than doubled in 2025, with AI-driven backend platforms and APIs identified as primary entry points.

On the defender side, AI is enabling faster anomaly detection, more effective incident response triage, and the ability to process the enormous volumes of data generated by connected vehicle fleets and backend systems. Organisations that learn to combine AI capability with experienced human judgement will have a measurable advantage as the threat landscape continues to evolve.

For engineers and security architects, this creates a clear priority; vehicle security operations centres need AI-assisted monitoring capability, and TARA processes need to account for AI-driven attack paths that adapt dynamically rather than following static threat models.

Source: Upstream Security 2026 Global Automotive and Smart Mobility Cybersecurity Report