Blog

Notes on embedded security, kernel hardening and regulatory compliance.

September 8, 2026 · 11 min read

CRA Reporting from 11 September 2026: What to Report, to Whom, and How Fast

From 11 September 2026, manufacturers must report actively exploited vulnerabilities and severe incidents within 24 hours through ENISA's Single Reporting Platform. Scope, deadlines, recipients and operational readiness.

September 4, 2025 · 12 min read

Secure Remote Access with Yocto

Why exposing root over SSH for field debugging is a bad idea, and how to replace it with SSH certificates, a restricted account and sudo on Yocto.

August 4, 2025 · 10 min read

Efficient Management of CVEs with Yocto

Generating an SBoM and CVE summary with Yocto's cve-check, filtering out irrelevant Linux kernel CVEs, and annotating what's left with Vulnscout.

January 5, 2025 · 15 min read

Linux Kernel Hardening

How to properly configure the Linux kernel: five configuration mechanisms, the kernel-hardening-checker tool, command-line hardening and a full sysctl hardening reference for embedded systems.