Karamba Security provides industry-leading, award-winning, end-to-end cybersecurity solutions for vehicles and connected systems. Their software is designed to safeguard resource-constrained systems without interfering with R&D or supply-chain processes. They offer security solutions that discover, mitigate, and manage vulnerabilities throughout the vehicle and IoT device lifecycle, enabling OEM suppliers and device manufacturers to meet cybersecurity regulations.

Karamba Security

Karamba Security is a global software company that focuses on securing connected devices and embedded software with full solution for Product Security.
Karamba Security is led by a team comprised of security experts, serial entrepreneurs and business savvy executives with a track record of multiple IPOs and M&As.
For more details contact us at contact@karambasecurity.com

YL Ventures

GlenRock Israel

Fontinalis Partners

Liberty Mutual Strategic Ventures

Paladin Capital Group

Presidio Ventures

Asgent

Samsung Venture Investment

Vinfast

From 80 ECUs to 3 main ECUs.

The SDV architecture poses significant cybersecurity challenges, from supply-chain hierarchy changes to lifecycle cybersecurity demands. With increased agility, a radical transformation of the architecture’s network results in a zonal consolidation of ECUs. From a decentralized network of 80 to 100 ECUs, the SDV architecture can consolidate the network into 3 main hypervisor ECUs that run multiple virtual operating systems.
 
The three main hypervisor ECUs include:
 ✅ 	One that runs all connectivity and related applications 
 ✅	A second, running only safety applications 
 ✅	The third for user experience applications 
 
The SDV era forces teams to develop intelligent ways to overcome the future vulnerabilities and threats it may hold.

#SDV #cybersecurity #vehiclearchitecture #ecu #hypervisor

Karamba Security's research team has identified a concerning issue: cases where OEM software engineers leave exposed and un-hardened JTAG pins, presenting unnecessary cyber exposure and introducing the following risks:

1. Remote Control of Vehicle Functions: Threat actors could potentially gain access to these JTAG pins, and then remotely manipulate vehicle functions.

2️. Data Theft: Unprotected JTAG pins could be an open invitation for data theft, including your personal information, GPS data, and more. 

For more insights, download our Vulnerabilities Report: https://bit.ly/3ZuuMob

#AutomotiveSecurity #Cybersecurity #RiskAssessment #SDV #EV #ConnectedVehicles

To avoid SOP delays, Karamba Security is helping manufacturers accelerate innovation and maintain a continuous product security lifecycle. Starting processes such as TARA, PT and supply chain security as soon as possible ensures a cybersecurity posture that complies with various standards and regulations, and provides fast product-to-market results without unexpected cyber-related delays.

Our End-to-End Product Security offers a portfolio of products and services that address your needs as an OEMA or a supplier.

Click to learn more> https://bit.ly/48qwOti

#shiftleft #SOP #productsecurity #cybersecurity #pentesting #TARA #supplychainsecurity

Join us as we host a webinar addressing SDV architectural cybersecurity needs and supply-chain implications. In this webinar, David Barzilai will discuss how to secure in-vehicle applications, VMs, and containers without delaying software release schedules.

Key topics and takeaways:
 •	SDV business motivation
 •	ECU virtualization
 •	Supply chain hierarchy
 •	Cybersecurity regulatory compliance
 •	Enabling SDV cyber compliance

Follow the link to secure your spot (Mobex subscribers only) - https://lnkd.in/eguvaQK4

Meet Adar Eyal, Karamba Security's EMEA Director. With 25 years of experience and perspective on the automotive industry, he will address some of its core issues.

1. How has ISO/SAE 21434 impacted the automotive industry and accelerated certification processes due to UNECE regulations?

ISO/SAE 21434 has become essential for automotive SW supply chain members, including OEMs, and tier-1 companies, as it ensures compliance with UNECE cybersecurity regulations. The need to achieve certification by mid-2024 has significantly sped up the ISO/SAE 21434 certification process.

2. What's exciting about automotive cybersecurity?

The rapid evolution of vehicles toward electrification, connectivity, and autonomy has transformed the automotive industry. While these advancements improve cars, they also create new cybersecurity challenges. The thrill in problem solving for automotive cybersecurity lies in finding efficient ways to eliminate risks in this ever-expanding digital landscape.

3. And now, so that we'll know you better, what are your hobbies?

Aside from quality time with my family, I am passionate about music, playing the guitar, and tinkering with technology. I enjoy building, fixing, and sometimes even breaking various tech gadgets, from cars to computers. Additionally, I love embarking on self-guided travel adventures almost every year.

#meettheteam #engineeringlife #automotivecybersecurity #industryinsights

Establishing a solid CSMS is a journey in four stages. 

The first stage of complying with the ISO/SAE 21434 standard and the UN R155 regulation starts with GAP ANALYSIS: Knowing the organization, its cybersecurity maturity, and how security is implemented from development to decommissioning. Essential questions about the organization’s cybersecurity posture are addressed, and recommendations are elaborated on, towards a complete CSMS audit.
 
A brief sample from the assessment questions:
 ✅	Does your organization have an Information Security Policy that includes details of resources, processes, and responsibilities?
 ✅	When your organization initiates a new project, does it take cybersecurity activities into account?
 ✅	Does your organization have a Cybersecurity Incident Response Plan?
 ✅	Does your organization perform Threat Analysis and Risk Assessments, both generally and from the viewpoint of the road users?
 
Click here to download our comprehensive CSMS whitepaper -> https://bit.ly/3s9ZtST

#automotive #cybersecurity #CSMS #Process #gapanalysis

We decided to celebrate this year's Jewish New Year (Rosh Hashanah) with an intriguing cocktail workshop and colorful glass in hand. Not forgetting the traditional honey-dipped apples to symbolize a sweet upcoming year on our horizon. 🍎🍯 

We wish you and all a happy year, prosperity, and inspiration in your own journey.

#automotive #cybersecurity #teamcelebration #holiday #roshhashanah

Thanks to all who joined our recent webinar on productive penetration testing in line with ISO/SAE 21434 & UN R155! 

We delved into:
* Pen testing motivation & SOP
* Efficient testing life cycles
* A case study from EV OEMs
* Our unique testing methodology & findings
* Key deliverables as per ISO/SAE 21434

High engagement and thought-provoking questions made it a great success!

You can watch the webinar recording here:
https://bit.ly/3riLj1A

#cybersecurity #penetrationtesting #ISO21434 #UNR155 #KarambaSecurity

COM:KARAMBASECURITY

Karamba Security