%term

The latest News and Information on CyberSecurity for Applications, Services and Infrastructure, and related technologies.

The missing piece: bringing up to 15 years of support to Zephyr for microcontroller-based ECUs

Nov 6, 2026 By Jaume Rafols In Canonical

We recently announced the launch of Zephyr 26.04 LTS, bringing up to 15 years of security maintenance per LTS and enterprise lifecycle management to microcontroller-grade devices. While central high-performance computer ECUs capture most of the industry spotlight in software-defined vehicle (SDV) architectures, the operational reality of modern vehicles is far more distributed.

Read Post

Canonical

Read more about The missing piece: bringing up to 15 years of support to Zephyr for microcontroller-based ECUs

Cradlepoint R1900: Deployment Configuration Guide for Enterprise IT Administrators

Nov 6, 2026 By OpsMatters In OpsMatters

When an enterprise IT team faces the challenge of deploying secure, high-performance wireless connectivity at remote or mobile sites, the Cradlepoint R1900 router often stands out for its rugged build and advanced networking capabilities. Imagine outfitting a fleet of emergency response vehicles or setting up edge connectivity at a construction site-both scenarios demand reliable network performance under harsh conditions. IT administrators must not only install and configure these devices but also ensure they integrate seamlessly with existing infrastructure and adhere to strict security standards.

Read Post

OpsMatters

Read more about Cradlepoint R1900: Deployment Configuration Guide for Enterprise IT Administrators

Occupational Safety Tech: How Modern IoT and Sensors Are Preventing Future Worksite Toxins

Nov 6, 2026 By OpsMatters In OpsMatters

Chemicals lurk in industrial air unnoticed until someone gets sick. According to estimates from the International Labour Organization, over one billion workers face hazardous substance exposure globally every year.

Read Post

OpsMatters

Read more about Occupational Safety Tech: How Modern IoT and Sensors Are Preventing Future Worksite Toxins

What Is DNSSEC? How DNS Security Extensions Stop Spoofing

Nov 5, 2026 By Raj Dodiya In Motadata

Why would a domain with correct records, healthy name servers and a valid certificate stop resolving for part of the internet? Often it's DNSSEC. Your records are fine; the signatures behind them are not, and any resolver that checks signatures now refuses to answer. DNSSEC was designed to stop spoofing and cache poisoning, and it works. The catch is operational.

Read Post

Motadata

Read more about What Is DNSSEC? How DNS Security Extensions Stop Spoofing

Symfony 8.1.10 Patches a Mime Header Injection CVE

Nov 5, 2026 By Mitchell Hartweg In Scout

Symfony 8.1.10 is a maintenance release, but it carries a security fix in the Mime component, and Mime reaches further than the Symfony apps you’d expect. If you generate email anywhere in a PHP stack, this one is worth a look.

Read Post

Scout

Read more about Symfony 8.1.10 Patches a Mime Header Injection CVE

It was the best of times, it was the worst of times, for software security

Nov 4, 2026 By Todd H. Gardner In CertKit

Microsoft fixed more than 1,400 vulnerabilities in its October Patch Tuesday. That’s one month, and it’s more than in all of 2025. Two weeks later, Anthropic said an unreleased Claude model had found and exploited serious vulnerabilities in Chrome, Safari, Android, Windows, and Linux. AI is finding bugs faster than anyone can fix them. Inside CertKit, we’ve been quoting Dickens, “It the worst of times.” AI makes our small team fast.

Read Post

CertKit

Read more about It was the best of times, it was the worst of times, for software security

Nokogiri 1.19.5 Closes Three Security Advisories and a Wave of Compaction Crashes

Nov 4, 2026 By Mitchell Hartweg In Scout

Nokogiri sits under so much Ruby code that its patch releases are worth reading even when the version number looks routine. 1.19.5 is a patch release carrying three security advisories and a long list of crash and memory fixes, so it’s worth pulling in on your next dependency pass.

Read Post

Scout

Read more about Nokogiri 1.19.5 Closes Three Security Advisories and a Wave of Compaction Crashes

MongoDB's Node Driver 7.8.0 Patches Two Real Security Issues

Nov 3, 2026 By Mitchell Hartweg In Scout

If your Node app talks to MongoDB through the official mongodb driver, 7.8.0 is worth upgrading to before your next routine dependency pass. It’s a minor version by the number, but it carries two security fixes, and one of them changes how a feature you may already be using behaves.

Read Post

Scout

Read more about MongoDB's Node Driver 7.8.0 Patches Two Real Security Issues

The SOC 2 compliance checklist: Every step from scope to audit

Nov 3, 2026 By Mike Vanbuskirk In Cortex

Many engineering organizations first encounter SOC 2 when a customer or prospect requests proof of compliance before proceeding with a relationship. Access controls, change management processes, logging configurations, vulnerability scanning, and incident response procedures all need to be in place, documented, and producing evidence before an auditor evaluates them. A 2026 benchmark of 75 SOC 2 examinations found that these engineering-owned areas were the most common sources of exceptions.

Read Post

Cortex

Read more about The SOC 2 compliance checklist: Every step from scope to audit

How long does it take to replace every certificate after a CA distrust?

Nov 2, 2026 By Todd H. Gardner In CertKit

Last week we moved every certificate in one of our products to a new CA in 10 minutes. It was six certificates and 18 deployments. I said issuance was the part that slows down, because most CAs limit how fast you can order, and then I waved it off. A reader did the math for me. Some organizations run 30,000 certificates, they claimed, and that’s common at MSPs, telcos, and government agencies. Google Trust Services takes 100 orders an hour by default.

Read Post