Excellent insight driving more secure device software and hardware.

Riscure announces the latest release of True Code, a software tool, which helps software developers to identify and mitigate security vulnerabilities in embedded code. One of the major updates in the 2022.2 version is the expanded ability to simulate Fault Injection attacks. Simulation within True Code enables development teams to create test scenarios that can run automatically during the daily build process without the need for the physical hardware the software is developed for.

The US standards institute recently completed the third round of the Post Quantum Crypto (PQC) standardization process. This milestone was long-awaited, and even though we are one step closer to a PQC standard, the race is not over yet.

Anna Kolesnichenko joined Riscure 2 years ago as an Operations Manager for the Certification team. In her interview, Anna explains the new trend within the certification industry of emerging IoT-specific security certifications and talks about who should choose to certify their products. She also breaks down how an average certification project can look like when working with Riscure.

Riscure announces that it has won a grant from the Netherlands Enterprise Agency (Rijksdienst voor Ondernemend Nederland) to further develop fuzzing techniques to discover security vulnerabilities in embedded devices.

Cryptographic side channels are well-known and understood in the industry. There are also many countermeasures against side channels to reduce the leakage risk. However, many implementations in the field are leaky because of the combination of security experts and the absence of a good pre-silicon side channel analysis tool.

The attack known as Rolling-PWN (CVE-2021-46145) [1] is the latest of a recent series of security issues affecting the car’s immobilizers and RKEs (Remote Keyless Entry, also known as the keyfob or remote control). Over the past years, we have seen how security researchers identified attacks that could open and even start cars from vendors like Tesla [2], Hyundai-Kia [3], VAG (Volkswagen, Audi, Seat, Porsche, Skoda) [4], and others. This time, the targets of Rolling-PWN are Honda vehicles from 2012 to 2022.