Product security is experiencing growing pains. As products started to become connected to various communication sources, most prominently the internet, product cybersecurity teams would protect their assets using proven solutions from the IT world. Professionals quickly recognized that IT-driven cybersecurity tactics did not take into account various product needs and domain expertise, such as integration […]
Below is an interview between David Leichner, CMO at Cybellum, and Ron Stupi of Bureau Veritas– originally published by Authority Magazine. With the shortage of labor, companies are now looking at how robots can replace some of the lost labor force. The truth is that this is not really a novel idea, as companies like Amazon […]
SBOMs and nationally organized VEX initiatives are powerful tools in fighting cybersecurity– if only they would be used. Tom Alrich, a private Supply Chain Cybersecurity consultant, earned his wings at Honeywell and Deloitte while also co-leading the US Department of Commerce’s National Technology & Information Administration (NTIA) Energy Sector SBOM Proof of Concept. His unique […]
Agreement will enable Jingwei HiRain to ensure cybersecurity across the automotive supply chain Tel Aviv, Israel, November 16, 2022 – Cybellum, provider of the Product Security Platform for connected product and device manufacturers and Jingwei HiRain, advanced supplier of automotive electronic systems, announced today a new partnership to meet the challenges of cybersecurity across the […]
Devices are fraught with cybersecurity challenges, pushing teams to analyze the security status of every component twice. Once as a stand-alone system and again as a part in the greater system that makes up a product. Yet, increasingly software-defined products harbor exponentially growing code, making reviewing a single product, its systems, and the systems that […]
Manufacturers and asset owners are now able to automatically generate VEX reports to determine which vulnerabilities are high risk and exploitable and how to remediate them Tel Aviv, Israel, November 9, 2022 – Cybellum, provider of the Product Security Platform for connected device manufacturers, announced today the availability of its automated Vulnerability Exploitability Exchange […]
This is Part 2 of our blog series about building a Product Security Incident Response Team from the ground up. Continuing from where we left off in Part 1, in this post we will cover the enabling processes and technologies of a PSIRT.
This is Part 1 of our blog series about building a Product Security Incident Response Team from the ground up. The Colonial Pipeline cyber security breach in 2021 marked a watershed moment in IT security. Though this attack shut down the largest oil pipeline in the U.S. and resulted in a $4.4 million ransom payment, […]
Cybellum’s Left to Their Own Devices podcast spoke with Northern Tech Co-founder & CEO, Eystein Stenberg who has a unique vantage point in preparing, deploying, and managing over the air (OTA) updates for IoT devices. Developing IoT devices is a growing challenge as markets become increasingly saturated and devices are expected to repeatedly conduct specific […]