On June 3rd and 10th with my colleagues from the Eclipse Foundation we will be running a free security training on vulnerability management and related subject.

More details and registration links on blogs.eclipse.org/post/marta-r...

VulnCon is a quite unique conference focus on software (and not only) vulnerability management. It is happening at the beginning of April and I will be speaking twice.

We're organizing a BoF on the CRA (Cyber Resilience Act) conformance by embedded vendors on Sunday 2nd February 2025 at FOSDEM! Join us at 14h in H.3244.

It is for:
- embedded developers (Linux or any RTOS)
- people working for "manufacturers"

The schedule: fosdem.org/2025/schedul...

Monday morning: Last week's code is working on the first run and passing tests.

Me: There's a serious problem here, so let's plan for a week of debugging.

The second week of our embedded security challenge has started.

How do attackers get into a router or an industrial device? Not by the primary function but by the web application you can use to monitor and administer the device.

Check the challenge at ygreky.com/challenge/

Embedded Security Challenge week 1 (until Jan 9, 2025): What are your product's services (applications, daemons) communicating, or potentially communicating with the Internet? Check all network interfaces. Also, check for both applications sending data and those listening.

ygreky.com/challenge/

Hello world!