About this episode
Nick Kartsioukas discusses security in embedded systems, focusing on vulnerabilities and resources for improvement.
Nick Kartsioukas joined us to talk about security in embedded systems. Common Vulnerabilities and Exposures ( CVE ) is the primary database to check your software libraries, tools, and OSs: cve.org . Open Worldwide Application Security Project ( OWASP , owasp.org ) has information on how to improve security in all kinds of applications, including embedded application security . There are also cheatsheets, Nick particularly recommends Software Supply Chain Security - OWASP Cheat Sheet . Wait, what is supply chain security ? Nick suggested a nice article on github.com : it is about your code and tools including firmware update, a common weak point in embedded device security. Want to try out some security work? There are capture the flag (CTF) challenges including the Microcorruption CTF ( microcorruption.com ) which is embedded security related. We also talked about the SANS Holiday Hack Challenge (also see Prior SANS Holiday Hack Challenges ). This episode is brought to you by RunSafe Security . Working with C or C++ in your embedded projects? RunSafe Security helps you build safer, more resilient devices with build-time SBOM generation, vulnerability identification, and patented…
People in this episode
Guest: Nick Kartsioukas
Topics covered
- embedded systems
- security
- vulnerabilities
- software supply chain
- capture the flag
- firmware update
Keywords
- embedded security
- CVE
- OWASP
- supply chain security
- CTF challenges
- firmware update
- vulnerability identification
Sponsors
RunSafe Security
Mentioned in this episode
Organizations: Open Worldwide Application Security Project, Common Vulnerabilities and Exposures, GitHub, SANS, Microcorruption CTF, OWASP Cheat Sheet
Books & works: This World Of Ours
More episodes of Embedded
- 527: At The Jellyfish Conference · June 12, 2026 · 1h 9m
- 526: Take A Taste Of Engineers · May 28, 2026 · 1h 1m
- 525: Some Sort of Metal · May 14, 2026 · 1h 3m
- 524: This Isn't a Movie · April 16, 2026 · 1h 14m
- 523: Bad Experience With Donuts · April 2, 2026 · 1h 11m
- 522: The Information Is In Poop · March 6, 2026 · 55 min
Explore listener stats, chart rankings, contacts and more on the Embedded podcast page.