Looking Beyond the Mythos Era: If AI Can Read Firmware, What Does Protection Mean Now?
Part 2 of 2: AI-driven binary analysis is forcing a rethink of automotive firmware protection. Part 1 covered how AI shortens PoC-to-exploit timelines.
Automotive Cybersecurity
20 Phoenix Contact CHARX Vulnerabilities Patched: How They Could Have Enabled Deeper EV Charger Control
Phoenix Contact patched 20 CHARX SEC-3xxx EV charger vulnerabilities in firmware 1.9.1. VicOne examines their wider implications and practical steps for operators.
CVE-2026-86793: SGLang Bypass Could Let Attackers Run Code on AI Servers
VicOne details CVE-2026-86793, a SafeUnpickler bypass in SGLang that could enable unauthenticated remote code execution, and recommended mitigations.
How BADBOX-Linked Malware Turned Automotive Head Units into Proxy Nodes
VicOne shows how BADBOX-linked malware used DoFun Android head units, weak MQTT security, and trusted OTA updates to push silent, persistent installs.
From Pwn2Own Automotive 2026: Seven Kenwood DNR1007XR Vulnerabilities Now Patched
Kenwood patched seven DNR1007XR vulnerabilities discovered at Pwn2Own Automotive 2026, addressing direct and multistep paths to root access.
How Mythos Is Reshaping Vulnerability Management: What CISOs Need to Know About VulnOps
Learn how Mythos-ready security and always-on VulnOps help CISOs respond faster to AI-accelerated vulnerabilities, exploit chains, and cyber risk at scale.
What Lies Beyond Mythos: What Automakers and Suppliers Need to Prepare for Now
AI-chained attack vectors are changing vulnerability triage. Learn why automakers and suppliers must move from CVSS scores to attack-path prioritization before July 2026.
VicOne Situational Awareness Report: 477 Cybersecurity Incidents, 160 Ransomware Cases, and Other Automotive Threat Highlights in Q2 2026
VicOne's Situational Awareness Report in Q2 2026 breaks down cybersecurity threats across the automotive, transportation, and logistics sectors by region, domain, ransomware activity, vulnerability type, and AI-related risk.
Shifts in the Supply Chain: How Ransomware Targets Global Logistics Fleets
VicOne CyberThreat Research Lab identifies key vulnerability classes in fleet-related applications, underscoring the need for stronger security across connected fleet platforms.
What Commercial Fleet Operators Should Know About ELD Data Integrity
VicOne's CyberThreat Research Lab review of common Android ELD apps shows why commercial fleets should look beyond the dashboard and treat ELD data integrity as a security priority.
Attack Surfaces from Pwn2Own Automotive 2026: Key Findings for Security Teams
This blog highlights three attack surfaces from Pwn2Own Automotive 2026 and what they reveal about emerging risks in EV chargers, IVI systems, and connected vehicle security.
Copy Fail and DirtyFrag: When Linux Kernel Flaws Become Automotive Cybersecurity Risks
Copy Fail (CVE-2026-31431) exposes how a Linux kernel flaw can impact automotive systems. See the risk, MITRE mapping, and xCarbon response.
VicOne Situational Awareness Report: Cybersecurity in the Automotive, Transportation, and Logistics Sectors in Q1 2026
VicOne recorded 405 automotive cybersecurity incidents in Q1 2026. Ransomware persisted, EV charging incidents tripled, and AI emerged as a new attack surface. This report breaks down the threats by region, domain, and vulnerability type.