What is so fascinating about security is that the same problems keep popping up again once in a while - I remember the Turkish i issues being a big problem in early mid 2000s during all the security pushes that went through software engineering world. Then we kinda forgot about them, and now it keeps coming up again.

The best a researcher can do is go back 20+ years and look for security issue that occurred back then. Most likely you'll find very similar things now again.