Cybersecurity

The Eclipse Foundation announced updates to the Open VSX Registry, its vendor-neutral extension registry for tools built on the VS Code extension API. The registry is used in AI-enabled and cloud-based developer platforms, including Amazon’s Kiro, Google’s Antigravity, Cursor, IBM’s Bob, VSCodium, Windsurf and Ona (formerly Gitpod). A new pre-publication verification network will identify security risks. The framework enables the ...

A Quantum-safe test bed has opened in Quebec, Canada, at the Université Laval’s Centre for Optics, Photonics and Lasers and the National Optics Institute. The Kirq test bed simulates a real-world environment to test quantum-secure technologies, identify vulnerabilities in existing networks and assess solutions before they are deployed at scale. Quebec-based non-profit organisation for large-scale digital innovation Numana invested $2m ...

Jim Wallace looks at how a secure infrastructure can be built using CHERI architecture to redefine how processors handle memory and authority. When Jaguar Land Rover (JLR) suffered a major cyber attack in August, global manufacturing and retail systems went down for weeks. Suppliers faced financial strain, production halted and recovery took more than a month. It was a stark ...

Products dealing with children’s data should safeguard their data, urges Max Simmonds When my daughter was born, I was struck by a dilemma: I could either buy a basic ‘dumb’ baby monitor that kept our data private but did little more than relay sound and video, or I could buy a ‘smart’ monitor full of AI features that demanded I ...

The Cyber Resilience Act, due to be in force in December 2027, is an opportunity not an obstacle, but preparation is key, says David Pashley. If you are involved in designing and developing electronic products and embedded systems, no doubt you’ll have heard plenty of discussion in the industry recently around the EU Cyber Resilience Act (CRA). The CRA became ...

CEA-Leti and Soitec are to use the natural attributes of fully-depleted silicon-on-insulator (FD-SOI) to enhance the cybersecurity of integrated circuits. “With FD-SOI’s advantages against laser fault injection attacks due to its thin-film architecture and channel isolation, the technology presents a compelling foundation for next-generation secure IC design,” according to French semiconductor research lab Leti. The two organisations aim to gain ...

Software company Vector has gained ISO/SAE 21434 certification for its vehicle hardware security modules firmware. ISO/SAE 21434 sets cybersecurity risk limits for road vehicles throughout their life cycle. The firmware is called Microsar HSM, and it was certified using Infineon Aurix TC3xx MCUs, which have Infineon’s proprietary TriCore cores. “The ISO/SAE 21434 certification of Microsar HSM confirms the use of ...

Arm has pre-integrated intellectual property for designers of AI-defined vehicle ICs. “Capabilities like real-time driver monitoring, predictive maintenance and adaptive in-vehicle infotainment, that were once limited to premium models, are becoming the standard across all tiers of new vehicles,” according to the company. “At the same time, automotive development complexity continues to grow, with evolving safety requirements and increasing demands ...

Undocumented communication devices, including cellular radios, have been found in solar power inverters and energy storage batteries, according to Reuters. There is little additional information at this time: the news organisation has not been able to discover the identity of the manufacturers affected, and is not naming its human sources. While these undocumented links could simply be alternative routes for ...

UK start-up SCI Semiconductor has raised £2.5m towards developing its security-enhanced microcontroller based on CHERI, a memory securing framework developed by the University of Cambridge and supported by the UK and US governments. The investment was from NPIF II – Mercia Equity Finance, which is managed by Mercia as part of the Northern Powerhouse Investment Fund II (NPIF II), and ...