🕵️ RESEARCH & DEEP DIVES
-
TaintRadar enhances static vulnerability detection using semantic-aware code property graphs — arXiv cs.CR
Researchers developed TaintRadar to improve static taint-style vulnerability detection with semantic graph augmentation.- Applies to static vulnerability analysis in software security, especially PHP applications
- Addresses limitations in sanitization modeling, database taint tracking, and object-oriented analysis
- Augments Code Property Graphs with semantic layers for sanitization, persistence, and object aliasing
- Evaluated on SARD benchmark and 19 real-world PHP apps, finding 29 zero-day vulnerabilities including SQLi and stored XSS
- Reduces false positives and improves accuracy and coverage of vulnerability detection
-
Fuzz'EMup uses EM side-channel signals to guide black-box embedded firmware fuzzing — arXiv cs.CR
Researchers developed a method using electromagnetic side-channel emanations to improve black-box fuzzing of embedded firmware.- Applies to IoT and embedded device firmware where coverage info is unavailable
- Targets black-box fuzzing scenarios without firmware extraction or instrumentation
- Uses electromagnetic (EM) emanations as feedback to guide fuzzing exploration
- Employs frequency band selection and dynamic time warping to handle noisy EM traces and timing jitter
- Demonstrated on four real firmware targets, achieving higher code coverage than unguided fuzzing
🔓 CVEs & KEV
- CVE-2026-59776 — CVSS 6.8 — Missing Cryptographic Step (CWE-325) vulnerability exists in certain FeliCa I...
- CVE-2026-16336 — CVSS 4.3 — trinodb trino OAuth2/OIDC ExternalUriInfo.java redirectA vulnerability was fo...