Cybersecurity risks of embedded devices
Embedded systems are omnipresent today: over 25 billion devices control critical processes in energy supply, industry and healthcare. However, as technology advances, so do the risks. Cyberattacks on embedded devices are on the rise, can paralyse entire networks and have enormous economic consequences:
- Non-updated systems with open vulnerabilities
- Physical access to devices
- Attacks via the supply chain, e.g. infected hardware components
The European Union is responding to this with the Cyber Resilience Act (CRA): From December 2027, mandatory cybersecurity requirements will apply to all products with digital elements. Manufacturers must develop their products according to the "secure by design" principle, provide regular security updates and demonstrate comprehensive documentation and testing. Violations can lead to severe penalties and a ban from the market.