Preparing for the CRA: SBOM Adoption for Embedded Software Teams
On July 27, 2026, the European Commission published its most substantial guidance yet on applying...
RunSafe Security Aug 4, 2026
RunSafe Security Blog
All
Mapping CISA’s 2026 SBOM Minimum Elements to CycloneDX and SPDX: An Implementation Guide
On July 29, 2026, CISA and a coalition of international cybersecurity agencies published the 2026...
CRA Readiness: 6 Steps Embedded Product Teams Should Take Now
The first major Cyber Resilience Act (CRA) deadline is nearly here. Beginning September 11, 2026,...
What Is Vulnerability Mitigation? Why Patching Alone Is Not Enough
Vulnerability mitigation is the process of reducing the likelihood that a security weakness will...
Securing 700,000 Endpoints: Former Air Force CIO on Scale, Cyber Resilience, and AI
Key takeaways Compliance is only a starting point. At scale, training and audits can't outpace the...
The Responsibility Never Sits with the Machine: AI in the Automotive Industry
Key takeaways AI in the automotive industry now sits in three distinct places: inside the product,...
Closing the IT/OT Gap: An OT Security Expert’s Field View
Key takeaways Attackers can halt industrial production without ever reaching the plant floor,...
Compliance Is a Culture, Not a Snapshot: What It Takes to Make Vehicle Software Road-Ready
Key takeaways Automotive compliance is usually captured as a snapshot at release or audit time,...
Why Continuous SBOM Governance Is the EU CRA’s Real Ask: Q&A with Shane Fry
The EU Cyber Resilience Act is currently top of mind for manufacturers, importers, and...