Nordic Semiconductor announced that firmware vulnerability scanning is coming to nRF Cloud, further bolstering its capabilities for empowering device makers to prepare for the EU Cyber Resilience Act (CRA).
With firmware vulnerability scanning in nRF Cloud, developers will be able to upload their software bill of materials (SBOM) to nRF Cloud and automatically identify common vulnerabilities and exposures (CVEs) present in the SBOM and analyse their exposure across their nRF Cloud-connected production fleet.
nRF Cloud’s new capability is designed to help device manufacturers meet the CRAs vulnerability monitoring requirement, without taking on the burden of building and maintaining their own CVE identification systems. This new capability works in tandem with nRF Cloud’s firmware over-the-air (FOTA) service, which allows updates to be deployed at scale to devices in the field.
Shortening CRA compliance to-do lists
The CRA requires the security of connected devices to be maintained across the full device lifespan, which can extend many years into the future, meaning compliance work does not stop once devices are deployed.
With nRF Cloud’s features including vulnerability detection and FOTA, developers can more effectively manage their compliance burden and stay focused on building innovative products. This means a faster path to market, and once products ship, meeting ongoing compliance obligation with less strain on stretched resources.
Continuous vulnerability detection with real-world exposure analysis
With nRF Cloud’s new firmware vulnerability scanning, developers upload their SBOMs for each software version, and nRF Cloud will automatically and continuously scan that SBOM.
The service also highlights exactly how many deployed devices are exposed to each identified vulnerability. This exposure data enables more confident prioritisation decisions, and allows real-time monitoring of remediation via security patches, as those updates roll out.
Detection and remediation in one system
Alongside nRF Cloud’s existing FOTA update capability, firmware vulnerability scanning lets device makers move from an identified security issue, to a deployed patch, to a confirmed fix, all in one system backed by a complete audit trail.
Remediation can be monitored in real time as security patches roll out across the fleet. With the help of nRF Cloud, developers will be able to check several important requirements around vulnerability monitoring and security update delivery off their CRA to-do list.
Integrated X-band radar front-end module RF Design
Telecoms, Datacoms, Wireless, IoT
Qorvo has introduced an X-band radar front-end solution that enables defence system designers to achieve higher performance without increasing size, weight or prime power.
Read more...From idea to intelligent product TRX Electronics
Computer/Embedded Technology
Mouser Electronics has announced a new eBook in collaboration with Arduino – From Blink to Think: How Arduino UNO Q Helps Designers Go from Idea to Intelligent Product.
Read more...Think Diamond Long-life COM-based SBCs Electronic Products Design
Computer/Embedded Technology
A COM-based SBC combines the flexibility of a standard computer-on-module (COM) with a baseboard offering additional I/O, expansion sockets, power supplies, and I/O connectors. The result is a highly flexible, highly expandable, feature-dense product that can be adapted to the widest range of applications, offering maximum product lifetime.
Read more...Next-Gen Min-ITX motherboard Vepac Electronics
Computer/Embedded Technology
Adding to AAEON’s extensive industrial motherboard portfolio, the Next-Gen MIX-Q870A1 is the company’s most advanced Mini-ITX board to date.
Read more...Rev 2.0 PolarFire FPGA ethernet sensor bridge Altron Arrow
Computer/Embedded Technology
Smaller, multi-camera platform enables scalable Ethernet architectures for NVIDIA Edge AI systems, while lowering power, cost and integration complexity.
Read more...Surface mount power amplifier for high-power applications RF Design
Power Electronics / Power Management
The GNA-63-5W+, from Mini-Circuits, is a GaN MMIC Power Amplifier (PA) designed for demanding RF applications requiring high efficiency, excellent linearity, and a compact footprint.
Read more...Intelligent video processing Rugged Interconnect Technologies
Computer/Embedded Technology
The CHARM150AGX is based on a NVIDIA AGX Orin embedded processor, which incorporates a multicore ARM processor and powerful AI/ML accelerator.
Read more...Practical design strategies for 5G RF Design
Telecoms, Datacoms, Wireless, IoT
The Cavli CQM211 aims to provide a platform that combines strong 5G connectivity with onboard compute capability, as well as interface flexibility that suits both new designs and rapid migrations from earlier products.
While every effort has been made to ensure the accuracy of the information contained herein, the publisher and its agents cannot be held responsible for any errors contained, or any loss incurred as a result. Articles published do not necessarily reflect the views of the publishers. The editor reserves the right to alter or cut copy. Articles submitted are deemed to have been cleared for publication. Advertisements and company contact details are published as provided by the advertiser. Technews Publishing (Pty) Ltd cannot be held responsible for the accuracy or veracity of supplied material.
printer friendly version