Immutability: The Cornerstone of Embedded Defense

Immutability means that something cannot be altered once it has been created or deployed. In cybersecurity, this property is highly desirable: if an attacker can’t modify a system, they can’t compromise it, at least not persistently. But immutability isn’t binary. There are degrees of it, ranging from absolute (hardware-enforced) to soft, policy-based protections. Each level […]
My Project Has 1,000 CVEs — What Now?

Running a security scan and seeing 1,000 CVEs in your project can feel like a nightmare. The number alone is enough to induce panic—but here’s the truth: In reality, this is a common situation and there are practical, structured ways to make sense of it and bring it under control. In today’s fast-paced development environment, […]
Zephyr Lands on Variscite SoMs

Variscite, a trusted and long-standing System-on-Module supplier, has announced official support for the Zephyr RTOS on its System-on-Modules based on the NXP i.MX8 and i.MX9. This development marks more than just another software feature—it signals a shift in the way embedded systems are architected and deployed on heterogeneous SoCs. With Zephyr now available on the […]
Embedded Platform Strategy: Benefit or Burden? Part 2

In Part 1, we looked at what a platform is, where it makes sense, and where it doesn’t. Now let’s focus on how to make it work in the real world — with the right organizational structure, disciplined engineering practices, and governance. We’ll also look at the benefits when it’s done right — and the […]
You’re Not Special: The Fallacy of Not Being a Cybertarget

Every few months, I sit across from a customer explaining why their connected product doesn’t need real cybersecurity. “It’s not a target,” they say with confidence, often followed by a knowing shrug, like they’ve just closed the case with common sense. It’s a beautiful moment, really. A perfect blend of wishful thinking, budget fatigue, and […]
Embedded Platform Strategy: Benefit or Burden? Part 1

In embedded systems, most projects are still built as one-offs.Other industries, like automotive, have long moved on: different cars, same platform underneath. A mutualized hardware and software platform can bring huge gains — but only if it’s used at the right time, and organized the right way. Platform-based development is a broad topic with many […]
13 Clues Your Embedded Project Is in Trouble

After decades of helping embedded teams recover and refocus, I’ve learned to spot the signs early. Here are 13 clues your project might be heading for serious trouble—organized by category: process, team, foundations, technology, and timeline. Embedded systems don’t usually fail suddenly. They drift into trouble—slowly, quietly, and sometimes invisibly—through small compromises, unclear decisions, and […]
Are You Riding a Dead Horse?

A well-known adage attributed to the Native American wisdom advises: “When you find yourself riding a dead horse, the best course of action is to dismount.” While the origins of the saying are uncertain, it frequently appears in business and humorous contexts to illustrate the futility of persisting with failed endeavors. In the world of […]
OTA Update Tools: Find The Perfect Fit For Your Application

Updating the firmware of modern devices is an essential part of their lifecycle. This post explores the desirable features of an OTA updater and compares three popular options to help you choose the best tool. Maintaining firmware in embedded systems is an ongoing challenge. Over-the-air (OTA) flash image programmers simplify this by enabling remote updates, […]
A Deeper Dive into Software Buses: D-Bus, MQTT, and Kafka

In a previous post, we introduced the concept of a software bus, a powerful tool for inter-process communication. Today, we’re diving deeper into three popular software buses—D-Bus, MQTT, and Kafka—each of which has unique strengths and is tailored to specific use cases. D-Bus: The Local Communicator D-Bus is a versatile message bus system that was […]