Onekey resources

Access the latest Whitepaper, Datasheets, research, and security advisories on cybersecurity and compliance—all in one place.

Featured resources

ONEKEY Webinar: CRA Phase I: Incident Reporting & Operational Readiness

Events

Jul 21, 2026

min read

ONEKEY Webinar: CRA Phase I: Incident Reporting & Operational Readiness

Learn how to prepare CRA reporting, escalation, and PIRT processes for operational compliance readiness. Register Now!

Why Version Matching Is Not Enough - Part II: Android Patch Levels, Vendors, and Real Vulnerability Exposure

See how Android patch levels, vendor-specific CVEs, and application context improve vulnerability matching and reveal real firmware exposure.

Quentin Kaiser

Lead Security Researcher

Why Version Matching Is Not Enough - Part I: Linux Kernel Backports and Real Vulnerability Exposure

Research

Jul 22, 2026

min read

Why Version Matching Is Not Enough - Part I: Linux Kernel Backports and Real Vulnerability Exposure

Learn how Linux kernel backports refine CVE matching, reduce false positives, and reveal the vulnerabilities that truly affect embedded firmware.

Quentin Kaiser

Lead Security Researcher

ONEKEY Webinar: The Secure Development Lifecycle: Unlocking IEC 62443 Part 4-1 for Industrial Automation and Control Systems

Events

Jul 7, 2026

min read

ONEKEY Webinar: The Secure Development Lifecycle: Unlocking IEC 62443 Part 4-1 for Industrial Automation and Control Systems

Learn how to implement IEC 62443 Part 4-1, establish a Secure Development Lifecycle, and build secure, compliant industrial products. Register Now.

Vulnerability Management Framework: How to Meet CRA & NIS2 Requirements Efficiently

All 6 NIST vulnerability management components explained – and how a vulnerability management tool accelerates implementation. Read the guide now!

Software Composition Analysis (SCA): Definition, Function, and Tips

Software Composition Analysis protects your software supply chain. Learn how SCA, SBOM, and CRA are related – and what ONEKEY can do. Read the guide.

Vulnerability Management Life Cycle: Steps And Workflows

Vulnerability management life cycle: A guide to core phases, best practices, and challenges for ensuring compliance.

NIS-2 Compliance With SBOMs: A Secure Supply Chain Strategy

Learn how SBOM practices support NIS-2 compliance by improving software supply chain visibility, vulnerability response, and audit-ready evidence.

ONEKEY Webinar: RTOS Binary Analysis: Uncovering Hidden Vulnerabilities in Embedded Systems

RTOS Binary Analysis for firmware security: identify components, uncover vulnerabilities, and reduce CVE noise. Register Now!

Firmware Security Reports: Essential Components And Strategic Value

Beyond the SBOM: how firmware security reports identify vulnerabilities and provide audit-ready evidence for PSIRT and product compliance teams.

SBOM Report: Essential Components And Why It Matters

An SBOM report provides visibility into software components and risks. This guide covers essential requirements for security and regulatory compliance.

Zyxel Strengthens Cybersecurity and Compliance with ONEKEY’s Automated Vulnerability Management

Find out how Zyxel has automated vulnerability management and met CRA compliance requirements. Read the Success Story now!

How Richard Wolf Strengthened Medical Device Cybersecurity Using ONEKEY

Discover how Richard Wolf strengthens medical device cybersecurity with ONEKEY. Read the Success Story Now!

ONEKEY Webinar: CRA Phase I: Incident Reporting & Operational Readiness

Learn how to prepare CRA reporting, escalation, and PIRT processes for operational compliance readiness. Register Now!

SBOM and VEX Workflows for Scalable Vulnerability Management

SBOMs provide transparency, while VEX enables risk-based prioritisation. Learn how to integrate both into compliance workflows.

RTOS Cyber Security and Compliance in Embedded Systems

RTOS-based products introduce long-term security and compliance risks. This guide outlines governance, vulnerability management, and regulatory strategies.

Beyond the Hype: LLMs, Mythos, and the Future of Firmware Analysis

Discover how LLMs like Claude Mythos are reshaping firmware security, accelerating vulnerability discovery, and why deterministic platforms like ONEKEY remain essential for scalable, reliable firmware analysis.

ONEKEY Webinar: From Raw Firmware to Vulnerabilities: Demystifying AUTOSAR SBOM & Risk Mapping

Learn how to analyze AUTOSAR systems directly from raw firmware. Discover how to extract components, generate SBOMs, and map vulnerabilities using PURLs.

ONEKEY Webinar: CRA Harmonized Standards - - Role, Structure and Practical Application for EU Market Access

Get clarity on CRA harmonized standards & learn how to prepare your organization for their practical application – Register now!

Software Supply Chain Security Best Practices: A Strategic Guide for Product Leaders

The CRA is coming. Learn best practices for securing the software supply chain, from SBOMs to binary analysis. Read now!

Threat Modeling in the SDLC: A Strategic Guide for Product Security

Integrate threat modeling efficiently into all phases of the SDLC. Avoid costly design errors and meet CRA requirements. Learn more!

Latest Developments in Unblob: New Formats, Smarter Extraction, and a More Hardened Release Pipeline

Discover what changed in unblob since release 25.11.25, including new firmware and filesystem format support, smarter extraction workflows, robustness fixes, performance improvements, and stronger release security.

Quentin Kaiser

Lead Security Researcher

ONEKEY Webinar: Post-Quantum Cryptography - Assessing Your PQC Readiness with ONEKEY

Events

Mar 24, 2026

min read

ONEKEY Webinar: Post-Quantum Cryptography - Assessing Your PQC Readiness with ONEKEY

Get a practical introduction to post-quantum cryptography & learn how organizations can assess their PQC readiness using the ONEKEY platform.

ONEKEY Webinar: CRA Harmonized Standards - Role, Structure and Practical Application for EU Market Access

Get clarity on CRA harmonized standards & learn how to prepare your organization for their practical application – Register now!

How OPEX Achieved CRA Readiness Through ONEKEY’s Structured Expert Assessment

Discover how OPEX secured CRA readiness with ONEKEY’s expert assessment. Gain clarity and compliance confidence!

ONEKEY Webinar: What Makes a Good SBOM? Ensuring High-Quality, Actionable Software Bill of Materials

Events

Mar 2, 2026

min read

ONEKEY Webinar: What Makes a Good SBOM? Ensuring High-Quality, Actionable Software Bill of Materials

Learn how to ensure High-Quality, Actionable Software Bill of Materials - Register now!

SBOM For Firmware and Embedded Software in DevSecOps

Learn about the challenges firmware SBOMs pose in DevSecOps and how teams are pragmatically solving them.

What Is a Software Bill of Materials (SBOM)? Meaning, Example & Use Cases

Discover the meaning of a Software Bill of Materials (SBOM), see real examples, and learn how SBOMs strengthen software security and compliance today.

What Is a Security Vulnerability? Definition & Examples

Find out what a security vulnerability is, see common examples of vulnerabilities in security, and learn how to manage risks effectively. Read more!

Meet ONEKEY at embedded world 2026 – Nuremberg

Discover the next level of product cybersecurity & compliance for embedded systems on site in Nuremberg. Book you meeting now!

Meet ONEKEY at the IoT Tech Expo 2026 - London

Meet ONEKEY at IoT Tech Expo 2026 in London to experience automated product cybersecurity and compliance for IoT, OT, and IIoT devices. Secure your systems – at scale.

ONEKEY Webinar Integrating CRA Risk Management into Automated SecDevOps Workflows

Join the ONEKEY webinar to learn how to integrate CRA risk management into automated SecDevOps workflows. Discover best practices for compliance, automation, threat modeling, and continuous security. Register now!

How We Taught Our Platform to Understand RTOS Firmware

Discover how ONEKEY’s platform breaks open real-time operating system (RTOS) firmware. Learn how automated architecture detection, load address recovery, and component identification bring transparency and security to embedded devices in automotive, medical, and industrial sectors.

Quentin Kaiser

Lead Security Researcher

ONEKEY Webinar From Detection to Decision

Events

Sep 17, 2025

min read

ONEKEY Webinar From Detection to Decision

From Detection to Decision | Improve vulnerability management with ONEKEY. Gain insights, enforce policies & prove compliance. Register for the webinar here.

Events

Sep 15, 2025

min read

ONEKEY Webinar From CRA to RED

From RED to CRA | Master new EU cybersecurity requirements with ONEKEY. Understand CRA, ensure compliance & leverage SBOMs. Register for the webinar now.

Reports

Sep 3, 2025

min read

IoT & OT Cybersecurity Report 2025

Discover key insights from ONEKEY’s 2025 IoT & OT Cybersecurity Report: CRA compliance gaps, SBOM challenges, and urgent steps for secure digital products.

No market approval without cybersecurity: How companies can successfully implement the CRA

Blog

Aug 20, 2025

min read

No market approval without cybersecurity: How companies can successfully implement the CRA

The EU Cyber Resilience Act (CRA) makes cybersecurity a must for CE marking. Learn how companies can achieve compliance, ensure security, and secure market access.

Static Source Code Analysis vs. Binary Scanning

Compare static source code analysis and binary scanning. Learn how ONEKEY gives you full visibility, detects real risks, and generates SBOMs – even without source code.

Sebastian Schneider

Customer Success Engineer

ONEKEY Webinar Secure Private Keys in Public Firmware

Events

Aug 20, 2025

min read

ONEKEY Webinar Secure Private Keys in Public Firmware

Secure your connected products. Join our expert-led webinar to learn how to detect, manage, and prevent private key leaks in firmware. Ideal for PSIRTs and product security teams.

Events

Jun 5, 2025

min read

ONEKEY @ All About Automation 2025

Meet ONEKEY at All About Automation Düsseldorf 2025 (Sept 17–18 at Areal Böhler) to explore smart, secure, and compliant industrial automation. Discover how ONEKEY helps secure IoT & OT devices with automated SBOMs, firmware analysis, and IEC 81001-5-1 compliance.

ONEKEY Online Seminar Complying with the EU Cyber Resilience Act

Events

Jun 4, 2025

min read

ONEKEY Online Seminar Complying with the EU Cyber Resilience Act

Get ready for the EU Cyber Resilience Act (CRA). Join our expert-led seminar to understand CRA compliance, SBOMs, secure software supply chains, and automated self-assessments. Ideal for product security professionals.

Events

Jun 4, 2025

min read

ONEKEY Online Seminar RTOS Analysis

Join the exclusive ONEKEY online seminar to discover powerful RTOS firmware analysis techniques for securing embedded systems, automating compliance, and minimizing vulnerabilities. Register now!

Blog

May 23, 2025

min read

ONEKEY Platform Update May 2025

Explore ONEKEY’s latest platform enhancements, including advanced RTOS firmware analysis, ELF dependency visualization and many more

Security Advisory: Remote Code Execution on Diviotec IP Camera (CVE-2025-5113)

Explore ONEKEY Research Lab's security advisory detailing a critical vulnerability in Diviotec IP Cameras. Learn about the risks and recommended actions.

Quentin Kaiser

Lead Security Researcher

Security Advisory: Remote Command Execution on Netcomm NTC 6200 and NWL 222

Research

Jun 2, 2025

min read

Security Advisory: Remote Command Execution on Netcomm NTC 6200 and NWL 222

Explore ONEKEY Research Lab's security advisory detailing a critical vulnerability in Netcomm devices. Learn about the risks and recommended actions.

Quentin Kaiser

Lead Security Researcher

Security Advisory: Remote Command Execution on Smartbedded MeteoBridge (CVE-2025-4008)

Research

May 26, 2025

min read

Security Advisory: Remote Command Execution on Smartbedded MeteoBridge (CVE-2025-4008)

Explore ONEKEY Research Lab's security advisory detailing a critical vulnerability in Smartbedded MeteoBridge. Learn about the risks and recommended actions.

Quentin Kaiser

Lead Security Researcher

Shell CGI Static Code Analysis - Automatic Discovery of RCEs

Research

May 23, 2025

min read

Shell CGI Static Code Analysis - Automatic Discovery of RCEs

Uncover ONEKEY's new shell CGI Static Code Analysis feature, designed to identify critical Remote Code Execution vulnerabilities. Click now to find out more.

Quentin Kaiser

Lead Security Researcher

ONEKEY @ 8th Annual European Medical Device and Diagnostic Cybersecurity Conference 2025 – Meet Us in Berlin!

Events

May 12, 2025

min read

ONEKEY @ 8th Annual European Medical Device and Diagnostic Cybersecurity Conference 2025 – Meet Us in Berlin!

Visit ONEKEY at Booth 4 during the Medical Device and Diagnostic Cybersecurity Conference 2025, May 13–15 at Mercure Hotel MOA Berlin. Explore our solutions for firmware security, SBOM, and IEC 81001-5-1 compliance.

ONEKEY Online Seminar Automate Vulnerability Management and Impact Assessment in the SDLC

Events

May 8, 2025

min read

ONEKEY Online Seminar Automate Vulnerability Management and Impact Assessment in the SDLC

Join our free 45-minute online seminar on May 15 to learn how to automate vulnerability management and impact assessment in the SDLC using ONEKEY. Live demo included.

ONEKEY @ STARTUP AUTOBAHN 2025 – Meet Us in Stuttgart!

Events

May 7, 2025

min read

ONEKEY @ STARTUP AUTOBAHN 2025 – Meet Us in Stuttgart!

Meet ONEKEY & ETAS at EXPO2025 Stuttgart. Discover how we automate product cybersecurity & compliance across the lifecycle—smart, scalable, risk-based.

Events

Apr 11, 2025

min read

ONEKEY Online Seminar SBOM Management

Join the exclusive ONEKEY online seminar to learn effective SBOM strategies for securing your software supply chain, simplifying regulatory compliance, and reducing security risks. Register now!

ONEKEY @ Embedded World 2025 – Meet Us in Nuremberg!

Events

Feb 4, 2025

min read

ONEKEY @ Embedded World 2025 – Meet Us in Nuremberg!

ONEKEY will be exhibiting at embedded world 2025 in Nuremberg with Booth 5-376, Hall 5. Attending as well? Let’s meet!

Reports

Jan 17, 2025

min read

IoT & OT Cybersecurity Report 2024

ONEKEY's Cybersecurity Report 2024 shows: OT & IoT cyber attacks are rising dramatically – the industry is under pressure to act.

Critical Vulnerabilities in EV Charging Stations: Analysis of eCharge Controllers

Research

Nov 26, 2024

min read

Critical Vulnerabilities in EV Charging Stations: Analysis of eCharge Controllers

Discover how severe security flaws, including unauthenticated remote command execution (CVE-2024-11665 & CVE-2024-11666), affect eCharge EV charging controllers. Learn about insecure firmware practices, cloud infrastructure issues, and actionable steps to mitigate risks in EV charging systems.

Quentin Kaiser

Lead Security Researcher

ESCAR Europe 2024: THE WORLD'S LEADING AUTOMOTIVE CYBER SECURITY CONFERENCE!

Events

Nov 1, 2024

min read

ESCAR Europe 2024: THE WORLD'S LEADING AUTOMOTIVE CYBER SECURITY CONFERENCE!

ONEKEY at escar - The World's Leading Automotive Cyber Security Conference 2024 – Elevate Your Automotive Cybersecurity!

HOW SWISSCOM SAVES USD400,000 PER AVOIDED IOT SECURITY INCIDENT THROUGH AUTOMATED FIRMWARE ANALYSIS

Success Stories

Nov 6, 2024

min read

HOW SWISSCOM SAVES USD400,000 PER AVOIDED IOT SECURITY INCIDENT THROUGH AUTOMATED FIRMWARE ANALYSIS

Pioneering IoT Firmware Security as Key to Quality of Service, Vendor Relations, and Brand Reputation!

Security Advisory: Unauthenticated Command Injection in Mitel IP Phones

Research

Nov 17, 2024

min read

Security Advisory: Unauthenticated Command Injection in Mitel IP Phones

Discover critical vulnerabilities in Mitel SIP phones that allow unauthenticated command injection. Learn how outdated input parsing can expose your devices and why it's essential to scan firmware for security risks. Protect your network with our in-depth analysis and expert takeaways.

What is a SBOM and why is it important for cybersecurity?

Learn about the benefits of a SBOM for cybersecurity and how it can improve the security and quality of your products. Read the Latest Blog Post Now!"

Reducing Common Vulnerabilities and Exposures (CVEs) in Software Development

Stay informed & stay protected with our blog on the EU Cyber Resilience Act. Learn what the new regulation means for your business & how to stay compliant.

Sara Fortmann

Senior Marketing Manager

Security Advisory: Arbitrary Command Execution on TP-Link Archer C5400X

Research

May 26, 2024

min read

Security Advisory: Arbitrary Command Execution on TP-Link Archer C5400X

Explore ONEKEY Research Lab's security advisory detailing a critical vulnerability in the TP-Link Archer C5400X router. Learn about the risks and recommended actions.

Security Advisory: Remote Code Execution in Ligowave Devices

Research

May 13, 2024

min read

Security Advisory: Remote Code Execution in Ligowave Devices

Explore the security advisory detailing remote code execution vulnerabilities in Ligowave devices. Learn about the risks & recommended protections.

Security Advisory: Remote Code Execution on Viasat Modems (CVE-2024-6199)

Research

Apr 25, 2025

min read

Security Advisory: Remote Code Execution on Viasat Modems (CVE-2024-6199)

Explore ONEKEY Research Lab's security advisory detailing a critical vulnerability in Viasat modems. Learn about the risks and recommended actions.

Quentin Kaiser

Lead Security Researcher

Security Advisory: Remote Code Execution on Viasat Modems (CVE-2024-6198)

Research

Apr 25, 2025

min read

Security Advisory: Remote Code Execution on Viasat Modems (CVE-2024-6198)

Explore ONEKEY Research Lab's security advisory detailing a critical vulnerability in Viasat modems. Learn about the risks and recommended actions.

Quentin Kaiser

Lead Security Researcher

Research

Jul 8, 2024

min read

The X in XFTP Stands For eXecute

Find out how our platform enhances firmware security by identifying vulnerabilities & bugs in ICT products, ensuring compliance with DORA & NIS2 directive.

ONEKEY 360° Comprehensive Product Cybersecurity & Compliance

Whitepapers

Sep 1, 2024

min read

ONEKEY 360° Comprehensive Product Cybersecurity & Compliance

This whitepaper targets, Head of Product Cybersecurity, Product Owner, Compliance Professionals and Head of Devel- opment of manufacturers of connected devices.

TACKLING SOFTWARE SUPPLY CHAIN RISKS WITH IEC 62443 AND SBOM

Whitepapers

Nov 1, 2023

min read

TACKLING SOFTWARE SUPPLY CHAIN RISKS WITH IEC 62443 AND SBOM

This whitepaper targets security teams of industrial automation and control systems (IACS) asset owners and product suppliers.

Advisory: FESTO: CECC-X-M1 - Command Injection Vulnerabilities

Research

Jul 6, 2022

min read

Advisory: FESTO: CECC-X-M1 - Command Injection Vulnerabilities

To evaluate and strengthen the automated vulnerability detection capabilities of ONEKEY, we frequently download and analyze firmware images from a variety of vendors. This is how we stumbled upon the CECC-X-M1 product line, an industrial controller manufactured by FESTO.

Blog

Mar 15, 2022

min read

Whitepaper: Sourcing Secure IoT Devices

Find out what to consider when purchasing new IoT products to avoid compromising the security of your IT infrastructure.

Advisory: Western Digital My Cloud Pro Series PR4100 RCE

Research

Feb 14, 2022

min read

Advisory: Western Digital My Cloud Pro Series PR4100 RCE

The IoT Inspector Research Lab uncovered a command injection vulnerability on Western Digital My Cloud Pro Series PR4100.

Blog

Feb 7, 2022

min read

Top 6 IoT security myths – busted

You think that IoT security is too expensive? Or that your company is not at risk? We debunk the most common misconceptions about IoT security!

How-To: Extracting Decryption Keys for D-Link

Research

Nov 24, 2021

min read

How-To: Extracting Decryption Keys for D-Link

Find out how the IoT Inspector Research Lab extracted an encryption key for a subset of D-Link routers - in particular the D-Link DIR-X1560.

Pwn2Own: IoT Inspector Research Lab uncovers vulnerabilities in Cisco router

Blog

Nov 10, 2021

min read

Pwn2Own: IoT Inspector Research Lab uncovers vulnerabilities in Cisco router

The IoT Inspector Research Lab successfully identified three previously unknown vulnerabilities in the Cisco RV340 router at Pwn2Own 2021.

Blog

Oct 12, 2021

min read

IoT Inspector Industry News Q3 2021

IoT News Q3: Discover our latest advisory, our new pricing, and dig deeper into the topic of supply chain security.

Advisory: Cisco ATA19X Privilege Escalation and RCE

Research

Oct 6, 2021

min read

Advisory: Cisco ATA19X Privilege Escalation and RCE

We found lacking user privilege separation enforcement and post-authentication command injection remote code execution within Cisco ATA19X firmware.

Swimming Upstream: Uncovering Broadcom SDK vulnerabilities from bug reports

Research

Oct 4, 2021

min read

Swimming Upstream: Uncovering Broadcom SDK vulnerabilities from bug reports

IoT Inspector identified security vulnerabilities affecting the UPnP implementation of Broadcom’s SDK that affect vendors such as Cisco or Linksys.

Oops!

No result found

Please try a different category.

Make cybersecurity and compliance efficient and effective with ONEKEY.

See it in Action

Onekey resources

Featured resources

ONEKEY Webinar: CRA Phase I: Incident Reporting & Operational Readiness

Why Version Matching Is Not Enough - Part II: Android Patch Levels, Vendors, and Real Vulnerability Exposure

Why Version Matching Is Not Enough - Part I: Linux Kernel Backports and Real Vulnerability Exposure

ONEKEY Webinar: The Secure Development Lifecycle: Unlocking IEC 62443 Part 4-1 for Industrial Automation and Control Systems

Vulnerability Management Framework: How to Meet CRA & NIS2 Requirements Efficiently

Software Composition Analysis (SCA): Definition, Function, and Tips

Vulnerability Management Life Cycle: Steps And Workflows

NIS-2 Compliance With SBOMs: A Secure Supply Chain Strategy

ONEKEY Webinar: RTOS Binary Analysis: Uncovering Hidden Vulnerabilities in Embedded Systems

Firmware Security Reports: Essential Components And Strategic Value

SBOM Report: Essential Components And Why It Matters

Zyxel Strengthens Cybersecurity and Compliance with ONEKEY’s Automated Vulnerability Management

How Richard Wolf Strengthened Medical Device Cybersecurity Using ONEKEY

ONEKEY Webinar: CRA Phase I: Incident Reporting & Operational Readiness

SBOM and VEX Workflows for Scalable Vulnerability Management

RTOS Cyber Security and Compliance in Embedded Systems

Beyond the Hype: LLMs, Mythos, and the Future of Firmware Analysis

ONEKEY Webinar: From Raw Firmware to Vulnerabilities: Demystifying AUTOSAR SBOM & Risk Mapping

ONEKEY Webinar: CRA Harmonized Standards - - Role, Structure and Practical Application for EU Market Access

Software Supply Chain Security Best Practices: A Strategic Guide for Product Leaders

Threat Modeling in the SDLC: A Strategic Guide for Product Security

Latest Developments in Unblob: New Formats, Smarter Extraction, and a More Hardened Release Pipeline

ONEKEY Webinar: Post-Quantum Cryptography - Assessing Your PQC Readiness with ONEKEY

ONEKEY Webinar: CRA Harmonized Standards - Role, Structure and Practical Application for EU Market Access

How OPEX Achieved CRA Readiness Through ONEKEY’s Structured Expert Assessment

ONEKEY Webinar: What Makes a Good SBOM? Ensuring High-Quality, Actionable Software Bill of Materials

SBOM For Firmware and Embedded Software in DevSecOps

What Is a Software Bill of Materials (SBOM)? Meaning, Example & Use Cases

What Is a Security Vulnerability? Definition & Examples

Meet ONEKEY at embedded world 2026 – Nuremberg

Meet ONEKEY at the IoT Tech Expo 2026 - London

ONEKEY Webinar Integrating CRA Risk Management into Automated SecDevOps Workflows

How We Taught Our Platform to Understand RTOS Firmware

ONEKEY Webinar From Detection to Decision

ONEKEY Webinar From CRA to RED

IoT & OT Cybersecurity Report 2025

No market approval without cybersecurity: How companies can successfully implement the CRA

Static Source Code Analysis vs. Binary Scanning

ONEKEY Webinar Secure Private Keys in Public Firmware

ONEKEY @ All About Automation 2025

ONEKEY Online Seminar Complying with the EU Cyber Resilience Act

ONEKEY Online Seminar RTOS Analysis

ONEKEY Platform Update May 2025

Security Advisory: Remote Code Execution on Diviotec IP Camera (CVE-2025-5113)

Security Advisory: Remote Command Execution on Netcomm NTC 6200 and NWL 222

Security Advisory: Remote Command Execution on Smartbedded MeteoBridge (CVE-2025-4008)

Shell CGI Static Code Analysis - Automatic Discovery of RCEs

ONEKEY @ 8th Annual European Medical Device and Diagnostic Cybersecurity Conference 2025 – Meet Us in Berlin!

ONEKEY Online Seminar Automate Vulnerability Management and Impact Assessment in the SDLC

ONEKEY @ STARTUP AUTOBAHN 2025 – Meet Us in Stuttgart!

ONEKEY Online Seminar SBOM Management

ONEKEY @ Embedded World 2025 – Meet Us in Nuremberg!

IoT & OT Cybersecurity Report 2024

Critical Vulnerabilities in EV Charging Stations: Analysis of eCharge Controllers

ESCAR Europe 2024: THE WORLD'S LEADING AUTOMOTIVE CYBER SECURITY CONFERENCE!

HOW SWISSCOM SAVES USD400,000 PER AVOIDED IOT SECURITY INCIDENT THROUGH AUTOMATED FIRMWARE ANALYSIS

Security Advisory: Unauthenticated Command Injection in Mitel IP Phones

What is a SBOM and why is it important for cybersecurity?

Reducing Common Vulnerabilities and Exposures (CVEs) in Software Development

Security Advisory: Arbitrary Command Execution on TP-Link Archer C5400X

Security Advisory: Remote Code Execution in Ligowave Devices

Security Advisory: Remote Code Execution on Viasat Modems (CVE-2024-6199)

Security Advisory: Remote Code Execution on Viasat Modems (CVE-2024-6198)

The X in XFTP Stands For eXecute

ONEKEY 360° Comprehensive Product Cybersecurity & Compliance

TACKLING SOFTWARE SUPPLY CHAIN RISKS WITH IEC 62443 AND SBOM

All resources

Advisory: FESTO: CECC-X-M1 - Command Injection Vulnerabilities

Whitepaper: Sourcing Secure IoT Devices

Advisory: Western Digital My Cloud Pro Series PR4100 RCE

Top 6 IoT security myths – busted

How-To: Extracting Decryption Keys for D-Link

Pwn2Own: IoT Inspector Research Lab uncovers vulnerabilities in Cisco router

IoT Inspector Industry News Q3 2021

Advisory: Cisco ATA19X Privilege Escalation and RCE

Swimming Upstream: Uncovering Broadcom SDK vulnerabilities from bug reports

Ready to automate your Product Cybersecurity & Compliance?