Marta Rybczynska

Announcing Security Training on Vulnerability Management, SBOM and related subjects Do you want to know more about

On June 3rd and 10th with my colleagues from the Eclipse Foundation we will be running a free security training on vulnerability management and related subject.

More details and registration links on blogs.eclipse.org/post/marta-r...

VulnCon is a quite unique conference focus on software (and not only) vulnerability management. It is happening at the beginning of April and I will be speaking twice.

We're organizing a BoF on the CRA (Cyber Resilience Act) conformance by embedded vendors on Sunday 2nd February 2025 at FOSDEM! Join us at 14h in H.3244.

It is for:
- embedded developers (Linux or any RTOS)
- people working for "manufacturers"

The schedule: fosdem.org/2025/schedul...

Monday morning: Last week's code is working on the first run and passing tests.

Me: There's a serious problem here, so let's plan for a week of debugging.

The second week of our embedded security challenge has started.

How do attackers get into a router or an industrial device? Not by the primary function but by the web application you can use to monitor and administer the device.

Check the challenge at ygreky.com/challenge/

Embedded Security Challenge week 1 (until Jan 9, 2025): What are your product's services (applications, daemons) communicating, or potentially communicating with the Internet? Check all network interfaces. Also, check for both applications sending data and those listening.

ygreky.com/challenge/

Hello world!