When GPS Tracking Lies: How Spoofing Can Conceal Cargo Theft
In this joint blog, VicOne and Mobile Defender Inc. explain how GPS spoofing enables cargo theft and how fleets can detect, correlate, and respond to location manipulation.
Automotive Cybersecurity
AI-Defined Vehicles: Practical Gains and Implications for Automotive Cybersecurity
First of two parts. What the industry is building as vehicles move from software-defined to AI-defined, and why cybersecurity must account for how AI decisions become actions.
VicOne Situational Awareness Report: 400 Cyber Incidents, with In-Vehicle Systems Most Affected in Q3 2026
VicOne's Q3 2026 Situational Awareness Report tracks where automotive cyber risk shifted: in-vehicle systems overtook enterprise IT as the most affected domain, Asia recorded a 36.8% rise in observed incidents, and ransomware activity spanned the full automotive value chain across 97 incidents.
Sony Patches Seven XAV-9500ES Flaws That Could Have Enabled Device Compromise
Sony patched seven XAV-9500ES vulnerabilities affecting Wi-Fi, Bluetooth, and USB. VicOne examines the attack paths, potential impact, and next steps.
Looking Beyond the Mythos Era: If AI Can Read Firmware, What Does Protection Mean Now?
Part 2 of 2: AI-driven binary analysis is forcing a rethink of automotive firmware protection. Part 1 covered how AI shortens PoC-to-exploit timelines.
20 Phoenix Contact CHARX Vulnerabilities Patched: How They Could Have Enabled Deeper EV Charger Control
Phoenix Contact patched 20 CHARX SEC-3xxx EV charger vulnerabilities in firmware 1.9.1. VicOne examines their wider implications and practical steps for operators.
CVE-2026-86793: SGLang Bypass Could Let Attackers Run Code on AI Servers
VicOne details CVE-2026-86793, a SafeUnpickler bypass in SGLang that could enable unauthenticated remote code execution, and recommended mitigations.
How BADBOX-Linked Malware Turned Automotive Head Units into Proxy Nodes
VicOne shows how BADBOX-linked malware used DoFun Android head units, weak MQTT security, and trusted OTA updates to push silent, persistent installs.
From Pwn2Own Automotive 2026: Seven Kenwood DNR1007XR Vulnerabilities Now Patched
Kenwood patched seven DNR1007XR vulnerabilities discovered at Pwn2Own Automotive 2026, addressing direct and multistep paths to root access.
How Mythos Is Reshaping Vulnerability Management: What CISOs Need to Know About VulnOps
Learn how Mythos-ready security and always-on VulnOps help CISOs respond faster to AI-accelerated vulnerabilities, exploit chains, and cyber risk at scale.
What Lies Beyond Mythos: What Automakers and Suppliers Need to Prepare for Now
AI-chained attack vectors are changing vulnerability triage. Learn why automakers and suppliers must move from CVSS scores to attack-path prioritization before July 2026.
VicOne Situational Awareness Report: 477 Cybersecurity Incidents, 160 Ransomware Cases, and Other Automotive Threat Highlights in Q2 2026
VicOne's Situational Awareness Report in Q2 2026 breaks down cybersecurity threats across the automotive, transportation, and logistics sectors by region, domain, ransomware activity, vulnerability type, and AI-related risk.
Shifts in the Supply Chain: How Ransomware Targets Global Logistics Fleets
VicOne CyberThreat Research Lab identifies key vulnerability classes in fleet-related applications, underscoring the need for stronger security across connected fleet platforms.
