Car Cybersecurity Lessons From a Russian Porsche Shutdown and Škoda’s Upstream Deal

by

Estimated reading time: 3 minutes

A recent cyber incident that shut down 100s of Porsche vehicles across Russia pointed out the vulnerability of connected vehicle security. Concern over events like this has influenced the automotive industry’s cybersecurity approach. Today, Škoda announced it is strengthening its defenses by partnering with Upstream. For automakers and drivers alike, modern car fleets are complex cyber-physical systems, more than mere vehicles.

Centralizing Risk as Attack Surfaces Expand
Škoda connected vehicle parked on a forest road, representing modern car cybersecurity and secure automotive technology.

Škoda plans to use Upstream’s platform to bring together cyber threat intelligence, collecting and analyzing data on possible security risks and attacks across vehicles, apps, cloud systems, and suppliers. This approach will help Škoda spot risks sooner and make compliance easier. “Our partnership with Upstream supports our activities required under R155,” said Miroslav Sivous, a threat intelligence expert at Škoda. He also said the partnership gives them “visibility and confidence” to act early.

This decision is in line with the findings in Upstream’s 2025 Automotive & Smart Mobility Global Cybersecurity Report. The report says large-scale incidents now make up 19 percent of attacks, which is more than three times higher than last year. More than 92 percent of attacks happened remotely, and 65 percent involved black-hat hackers. These numbers show how quickly cybersecurity problems can spread across fleets, platforms, and markets.

From Compliance to Resilience

Regulators now expect companies to monitor cybersecurity closely under UNECE WP.29 R155 and ISO/SAE 21434. However, experts warn that just following the rules is not enough. “Cyber risks outpace regulation-driven measures,” the executive summary says, showing a growing gap between risk and resilience. The report encourages organizations to go beyond checklists and audits.

See also  RSA’s 2025 ID IQ Report "Shocked"-Highlights High Costs of Identity Breaches and Shift Toward AI and Passwordless Security

Upstream’s platform lets teams review, document, and make decisions together more quickly. Škoda’s engineers and security staff can track risks, context, and evidence all in one place. Yoav Levy, Upstream’s CEO, said Škoda sets “a strong example for the industry.” He sees cybersecurity maturity as an ongoing part of operations, not just a single project.

Get The Cyber Insurance Upload Delivered
Subscribe to our newsletter!

Insurance and Geopolitics Raise the Stakes

The reports also highlight growing geopolitical risks and more ransomware attacks on supply chains, EV charging systems, and backend systems. State-backed groups are now aiming for large-scale disruption instead of just single thefts. For cyber insurers, the message is clear: car cybersecurity failures now look more like widespread risk events than isolated claims.

Martin Hinton

Martin Hinton is the Executive Editor and Publisher of Cyber Insurance News and Information. With over three decades of journalism experience across six continents, his work encompasses investigative reporting, documentaries, and coverage of cultural, political, and business news. To learn more about his career, click on his name to visit his LinkedIn page.

×