Skip to content Skip to footer

Security Testing Is a Continuous Process, Not a One-Time Event

Software products evolve constantly. New features are added, dependencies change, interfaces expand, and deployment environments become more complex. Each change can create new security assumptions - and new opportunities for those assumptions to fail. That is why vulnerability assessment should not be treated as a one-time activity performed shortly before a product ships. Effective security…

Read More

OpenC3 COSMOS v7.0.0: Security Issues Across Core Components

https://visionspace.com/wp-content/uploads/2026/03/COSMOS-Full-Demo-blogpost.mp4 Written by: Tanner Smith, Marceli Śliwiak, Ricardo Fradique, André Cirne, Andrzej Olchawa, Milenko Starcik Modern mission control and operational platforms increasingly rely on complex web-based interfaces, plugin ecosystems, and real-time data pipelines. While this flexibility enables rapid development and integration, it also introduces a broad attack surface, particularly when trust boundaries between components are not…

Read More

ArduPilot v4.6.3: From Mission Plan to Mission Abort

https://visionspace.com/wp-content/uploads/2026/02/Ardupilot-Demo.mp4 Written by: Marceli Śliwiak, Ricardo Fradique, Tanner Smith, Andrzej Olchawa, Milenko Starcik ArduPilot is one of the most widely adopted open-source autopilot platforms, powering autonomous operation across multi-rotor drones, fixed-wing aircraft, rovers, boats, and submarines. Its flexibility, rich feature set, and strong community adoption make it a cornerstone of both commercial and research unmanned systems.…

Read More

gr-satellites v5.8.0: Memory Corruption via Malformed Telemetry

gr-satellites is an open-source GNU Radio out-of-tree module designed for decoding telemetry from a wide range of satellite protocols. It is widely used by researchers, hobbyists, and professionals to process live RF signals and convert raw satellite transmissions into structured telemetry data. A recent security assessment of `gr-satellites v5.9.0` identified a security issue in the…

Read More

GNU Radio v3.10.12.0: When Your Radio Runs More Than Just Signals

https://visionspace.com/wp-content/uploads/2026/01/gnuradio-demo-v7.mp4 Written by: Tanner Smith, Andrzej Olchawa, Ricardo Fradique, Milenko Starcik GNU Radio is a widely adopted open-source framework for building Software-Defined Radio (SDR) systems. Used across research, industry, and critical communications domains, it provides flexible signal-processing blocks and a graphical interface, GNU Radio Companion (GRC), that allows users to rapidly design and execute flowgraphs. A…

Read More

OpenC3 Cosmos 6.0.0: A Security Assessment of an Open-Source Mission Framework

Written by: Andrzej Olchawa, Ricardo Fradique, Milenko Starcik OpenC3 Cosmos is an open-source command and control software suite designed to support space mission operations. Despite its modularity and widespread adoption across the industry, a recent security assessment of version 6.0.0 uncovered several critical vulnerabilities that could compromise mission-critical systems' confidentiality, integrity, and availability. …

Read More