Looking Beyond the Mythos Era: If AI Can Read Firmware, What Does Protection Mean Now?
Part 2 of 2: AI-driven binary analysis is forcing a rethink of automotive firmware protection. Part 1 covered how AI shortens PoC-to-exploit timelines.
Blog
20 Phoenix Contact CHARX Vulnerabilities Patched: How They Could Have Enabled Deeper EV Charger Control
Phoenix Contact patched 20 CHARX SEC-3xxx EV charger vulnerabilities in firmware 1.9.1. VicOne examines their wider implications and practical steps for operators.
CVE-2026-86793: SGLang Bypass Could Let Attackers Run Code on AI Servers
VicOne details CVE-2026-86793, a SafeUnpickler bypass in SGLang that could enable unauthenticated remote code execution, and recommended mitigations.
How Physical AI Challenges Traditional Security Assumptions for Autonomous Systems
Physical AI changes OT security assumptions, making behavioral verification essential when an air gap is not practical and response time is limited.
How BADBOX-Linked Malware Turned Automotive Head Units into Proxy Nodes
VicOne shows how BADBOX-linked malware used DoFun Android head units, weak MQTT security, and trusted OTA updates to push silent, persistent installs.
From Pwn2Own Automotive 2026: Seven Kenwood DNR1007XR Vulnerabilities Now Patched
Kenwood patched seven DNR1007XR vulnerabilities discovered at Pwn2Own Automotive 2026, addressing direct and multistep paths to root access.
FCC, CRA, and IEC 62443: Three Gates to Robotics Market Readiness
Robot manufacturers face distinct FCC Covered List, the EU Cyber Resilience Act (CRA), and IEC 62443 requirements. Learn how shared security workflows can support readiness across all three.
How Mythos Is Reshaping Vulnerability Management: What CISOs Need to Know About VulnOps
Learn how Mythos-ready security and always-on VulnOps help CISOs respond faster to AI-accelerated vulnerabilities, exploit chains, and cyber risk at scale.
From Perception to Action: What GB/T 45502-2025 Signals for Service Robot Security
China's GB/T 45502-2025 establishes information security requirements for service robots and their supporting systems. Learn what it means for cybersecurity across the robot lifecycle.
What Lies Beyond Mythos: What Automakers and Suppliers Need to Prepare for Now
AI-chained attack vectors are changing vulnerability triage. Learn why automakers and suppliers must move from CVSS scores to attack-path prioritization before July 2026.
VicOne Situational Awareness Report: 477 Cybersecurity Incidents, 160 Ransomware Cases, and Other Automotive Threat Highlights in Q2 2026
VicOne's Situational Awareness Report in Q2 2026 breaks down cybersecurity threats across the automotive, transportation, and logistics sectors by region, domain, ransomware activity, vulnerability type, and AI-related risk.
Shifts in the Supply Chain: How Ransomware Targets Global Logistics Fleets
VicOne CyberThreat Research Lab identifies key vulnerability classes in fleet-related applications, underscoring the need for stronger security across connected fleet platforms.
When Cyber Risk Becomes Physical: What the EU Cyber Resilience Act Means for Connected Machines and Physical AI
The EU Cyber Resilience Act sets mandatory cybersecurity requirements for connected and AI-enabled products. Here’s what manufacturers need to know about SBOMs, vulnerability management, and CRA readiness.