There is no shortcut to CRA compliance.

The Cyber Resilience Act requires manufacturers to make risk-based decisions during product design and development.
But before cybersecurity risks can be assessed, they first need to be identified.

An experienced security professional will typically ide...

Your data at rest is not secure.

From earlier reports by Microsoft engineers, we know that the FBI is putting pressure on them to add a backdoor.
Microsoft developer and cryptographer Niels Ferguson denied any backdoors in BitLocker and said "over my dead body".
But now it seems to become a conf...

Financial Times reported on Monday that Israel's Unit 8200 spent years hacking nearly all traffic cameras in Tehran to track and kill Iran’s supreme leader Khamenei in an airstrike.

"We knew Tehran like we know Jerusalem" an Israeli intelligence official told the Financial Times.

Israeli data an...

Xbox is a well-known video game console designed by Microsoft. It has been equipped with more and more security features after design flaws and weaknesses became public. The main motivation for attackers is to play illegally copied games or run Linux. At the same time, Microsoft is trying to prevent...

Your UEFI secure boot mechanism may be completely useless if its trust anchor is not rooted in hardware.

Multiple Boot Stages and Chain Loading
A modern computerized system is usually booted up stage by stage, where one stage loads and executes another stage. It is a well-known approach which is...

The Cyber Resilience Act lays down mandatory cybersecurity requirements for digital products on the EU market. It clearly requires that security updates - where technically feasible - are provided separately from functionality updates and are also marked accordingly.

However, such atomic security...