Cybersecurity Vulnerabilities Exposed: A Comprehensive Study Reveals Risks Across 50 Software Types
San Francisco, California, USA, November 12th, 2026, CyberNewswire – In a significant development for the cybersecurity sector, nDiligence, Inc. has recently made public the findings of its extensive four-year study, titled Attack the Glass (ATG). This research meticulously assesses vulnerabilities within various software and devices, concluding that all 50 tested types are compromised, with 46 classified as either Critical or High risk.
The ATG study sheds light on a pressing cybersecurity weakness related to how applications utilize individual devices to present information on screens, manage data, and execute code during active sessions. This process, known as runtime client-side rendering, is critical for many applications, including web browsers, mobile apps, vehicle displays, medical devices, and industrial control systems. It involves assembling user interfaces from numerous data sources — including the organization’s own systems and third-party vendors — generating significant security concerns as any attacker who gains influence over a single supplier can infiltrate the running application.
Remarkably, once code is loaded onto a user’s device, it is considered trustworthy, rendering traditional security measures such as encryption, firewalls, and detailed code reviews insufficient beyond the loading phase. This situation creates a precarious environment where an attacker may alter what users perceive on their screens, potentially capturing sensitive input and manipulating actions under the guise of legitimacy. Notably, this vulnerability was starkly illustrated when a domain linked to Polyfill.io, used by over 100,000 websites, was mismanaged—ultimately leading to undetected malicious code operating on users’ devices for several months before researchers intervened.
The repercussions of such vulnerabilities are vast. The ATG research elucidates how they could facilitate the dissemination of disinformation on legitimate news and electoral platforms, present misleading information to military and infrastructure operators, or obscure crucial safety warnings for select individuals. Given the gravity of these security threats, nDiligence’s team prioritized confidentiality, engaging in over two years of private briefings with government officials before unveiling their findings to the wider public.
Robert Beckett, the Founder and CEO of nDiligence, emphasized the alarming nature of this vulnerability. "People inherently trust what they observe with their own eyes. In our digital age, screens dominate our interactions, and we have developed an implicit trust in applications and devices," he stated. "The ATG research underscores how an adversary can manipulate this trust unnoticed. A commander, infrastructure operator, voter, or journalist might view a seemingly secure screen, while the information it conveys could be deceitful. Whoever controls that screen wields considerable influence over perceptions, decisions, and actions, employing sophisticated targeting strategies."
The research delineates five potential consequences an attacker can exploit: deceiving, disrupting, degrading, denying, and destroying trust and functionality. All insights and materials generated through the ATG research, including a detailed sixteen-chapter whitepaper, online demonstrations, and remediation playbooks, are accessible for free under the Traffic Light Protocol (TLP) CLEAR, reinforcing nDiligence’s commitment to disseminating vital information in the cybersecurity field.
Beckett elaborated on the origins of the ATG vulnerabilities, sharing that the discovery occurred amidst broader research into threats to the digital supply chain. With over 15 years in threat intelligence and counter-influence operations, the team recognized the risks associated with the ATG vulnerabilities. Since 2024, efforts have focused on collaborating with researchers, vendors, and government entities to devise effective strategies for mitigating this threat. “Anyone involved in the creation, operation, or defense of systems that impact critical decision-making needs to be acutely aware of the ATG vulnerabilities and take proactive steps to address them,” Beckett noted.
About nDiligence
nDiligence, Inc. is a leading supply-chain intelligence firm that specializes in establishing trusted provider networks while continuously monitoring the underlying supply chains. The founders of nDiligence bring years of expertise in internet supply chains, national security, and intelligence endeavors. The ATG study was conducted as a self-funded initiative, highlighting the organization’s dedication to enhancing the cybersecurity landscape. For more information about nDiligence and their services, visit nDiligence, Inc..
As security threats become increasingly sophisticated, it is imperative for stakeholders across various sectors to remain vigilant and informed about vulnerabilities like those identified in the ATG research, ensuring the integrity of software systems that underpin critical infrastructure and services.