Latest news & events

The UK government is evaluating legislation to enhance cybersecurity for enterprise IoT devices, as it did for consumer devices via its Product Security and Telecommunications Infrastructure (PSTI) Act. This move follows concerns over the vulnerability of industrial and business-critical IoT systems, which are increasingly targeted in cyberattacks. The UK government  announced…

The European Vulnerability Database (EUVD) launched by ENISA on 13. May 2025 is a major step toward a more coordinated vulnerability management ecosystem in the EU. The DOSS Device Security Passport (DSP) is ready to take part. Built with support for external threat intelligence, the DSP can naturally incorporate EUVD…

ECSO organized a webinar with NIST, on how OSCAL can be applied to an information system for documenting and assessing its security controls and transition from a text-based and manual approach (using word processors or spreadsheets) to a set of standardised, machine-readable formats. Our colleagues Prof. Antonio Skarmeta and Sara…

Forescout has analyzed the current risk levels across IT, IoT, OT IoMT domains, identifying the most vulnerable devices. Its main conclusion is that risk and exposure management must assess and mitigate risk across all these categories, rather than treating them in silos. Regarding IoT devices, the riskiest devices are, as…