InfoSecBulletin Cybersecurity for mankind
Red Balloon Security, Narf Industries, and MITRE worked together to develop the EMB3D Threat Model. This model helps us understand the risks that embedded devices face and the security measures they require. The EMB3D model is a framework that focuses on embedded devices.
“It considers the specific risks presented by embedded systems, including their varied operating environments and potential vulnerabilities to proofs-of-concept and theoretical research.”ms, including their diverse field environments and the ways in which they can be exploited through proofs-of-concept and theoretical research.
In short, the EMB3D model is a powerful tool to identify and address security risks in embedded devices in various contexts.
Cisco released security updates for two critical security flaws
OpenBAS: Cutting-edge breach and attack simulation platform
Critical Security Flaws Patched in Zyxel Networking Devices
CVE-2024-38811: CEV In VMware Fusion Unveiled
CERT-IN Warns Vulnerabilities in Palo Alto Networks applications
How Malaysia’s Data Centre Industry Poised for Growth
RansomHub exfiltrated data over 210 victims: US alert
Godzilla Fileless Backdoor Exploits Atlassian Confluence flaw
New Cicada ransomware targets VMware ESXi servers
Monday hits two UK bank apps causes outages
EMB3D Threat Model For Embedded Devices
EMB3D framework aims to provide a complete solution for everyone involved in the security ecosystem, such as asset owners, manufacturers, device vendors, security researchers, and testing companies.
The framework helps make security assessments of devices, systems, and networks easier and more effective. It ensures that everyone involved can access the information and tools needed for thorough assessments.
The document provides technical specifications, testing methods, and guidelines for reporting and fixing vulnerabilities. Its purpose is to improve security and trust in the constantly changing world of connected devices and systems.
ICS device manufacturers can leverage the EMB3D model to gain early insights into the evolving threat landscape and available mitigation strategies, thereby facilitating the development of more robust and secure devices.
“The EMB3D framework stands as a perfect example of MITRE’s role as both an innovator and a connector, working hand-in-hand with industry leaders to develop cutting-edge tools,” said Beth Meinert, senior vice president and general manager.
EMB3D is expected to launch in early 2024. It will be an open community platform for the security community to contribute to updates and modifications.
