Milenko Starcik

Revisiting Yamcs: Three Security Advisories and Lessons for Mission-Control Security

UncategorizedOctober 2, 202625ViewsShareTwitter FacebookEmailLink

Research by: Ricardo Fradique, Andrzej Olchawa, Tanner Smith, Milenko Starcik (Publication) Three findings from our continued security research into Yamcs are now documented in public security advisories. Two have assigned CVE identifiers: CVE-2026-62329, covering automatically created administrator credentials, and CVE-2026-55566, covering DOM-based cross-site scripting. The third concerns a bypass of authentication-endpoint rate limiting. The default-administrator…

Stack Buffer Overflow in ESA’s asn1scc

Advisories, Cybersecurity, SpaceOctober 2, 202636ViewsShareTwitter FacebookEmailLink

Written by: Ricardo Fradique (research) and Milenko Starcik (publication) ESA's ASN1SCC is an open-source ASN.1 compiler for embedded systems. It generates data types, encoders, and decoders from ASN.1 specifications, with support for encoding formats including XML Encoding Rules (XER). These generated components provide the interface between structured data definitions and the applications that process incoming…

Challenging the “Newer is Always Better” Narrative

AI, TechnologySeptember 15, 202655ViewsShareTwitter FacebookEmailLink

The landscape of Large Language Models (LLMs) is shifting rapidly and in 2026 we have seen ever more powerful models released by different companies in a race for supremacy, but is newer always better? We took a step back and looked at the OpenAI models spanning 2024 and 2025 and asked ourselves if each newer…

Joining the PESSOAS 2030 Professional Internships Initiative

Brand, Corporate, SocialJuly 6, 2026197ViewsShareTwitter FacebookEmailLink

At VisionSpace, we believe that sustainable growth goes hand in hand with investing in people. As our Portuguese entity continues to expand, we are proud to participate in the Professional Internships Programme, an initiative promoted by the Instituto do Emprego e Formação Profissional (IEFP) under the PESSOAS 2030 and PORTUGAL 2030 frameworks. The program supports…

OpenC3 COSMOS v7.0.0: Security Issues Across Core Components

Advisories, Cybersecurity, SpaceApril 20, 2026373ViewsShareTwitter FacebookEmailLink

https://visionspace.com/wp-content/uploads/2026/03/COSMOS-Full-Demo-blogpost.mp4 Written by: Tanner Smith, Marceli Śliwiak, Ricardo Fradique, André Cirne, Andrzej Olchawa, Milenko Starcik Modern mission control and operational platforms increasingly rely on complex web-based interfaces, plugin ecosystems, and real-time data pipelines. While this flexibility enables rapid development and integration, it also introduces a broad attack surface, particularly when trust boundaries between components are not…

ArduPilot v4.6.3: From Mission Plan to Mission Abort

Advisories, Cybersecurity, Defense, TechnologyMarch 26, 2026450ViewsShareTwitter FacebookEmailLink

https://visionspace.com/wp-content/uploads/2026/02/Ardupilot-Demo.mp4 Written by: Marceli Śliwiak, Ricardo Fradique, Tanner Smith, Andrzej Olchawa, Milenko Starcik ArduPilot is one of the most widely adopted open-source autopilot platforms, powering autonomous operation across multi-rotor drones, fixed-wing aircraft, rovers, boats, and submarines. Its flexibility, rich feature set, and strong community adoption make it a cornerstone of both commercial and research unmanned systems.…