From SBOM to Answer: Cutting Vulnerability Triage Time in Embedded Devices
The European Union's Cyber Resilience Act (CRA) began requiring manufacturers of connected...
RunSafe Security Sep 22, 2026
RunSafe Security Blog
All
Cyber CTO Warns AI Gives Nation-State Attackers a Scale and Budget Advantage
Artificial intelligence is changing more than the speed of vulnerability discovery. It is changing...
Why Critical Infrastructure Needs Operational Software Assurance
The world has changed, and software security has to change with it. Artificial intelligence is...
Following Water System Cyberattacks, What Should “Secure” Actually Mean?
In late July, a coordinated cyberattack hit the operational technology (OT) at more than 30...
Preparing for the CRA: SBOM Adoption for Embedded Software Teams
On July 27, 2026, the European Commission published its most substantial guidance yet on applying...
Mapping CISA’s 2026 SBOM Minimum Elements to CycloneDX and SPDX: An Implementation Guide
On July 29, 2026, CISA and a coalition of international cybersecurity agencies published the 2026...
CRA Readiness: 6 Steps Embedded Product Teams Should Take Now
The first major Cyber Resilience Act (CRA) deadline is nearly here. Beginning September 11, 2026,...
What Is Vulnerability Mitigation? Why Patching Alone Is Not Enough
Vulnerability mitigation is the process of reducing the likelihood that a security weakness will...
Securing 700,000 Endpoints: Former Air Force CIO on Scale, Cyber Resilience, and AI
Key takeaways Compliance is only a starting point. At scale, training and audits can't outpace the...