Mender blog

A customer recently notified us of a security issue in Mender. On some versions, mender-auth generates private key files with non-strict file permissions.

Discover how manufacturers can achieve Cyber Resilience Act (CRA) compliance by tackling secure updates, SBOM management, and vulnerability tracking with robust OTA solutions.

Learn how the EU Cyber Resilience Act (CRA) enforces stringent cybersecurity requirements for PDEs. Explore compliance essentials in part 1 of a 4-part series.

Explore the scope of the EU Cyber Resilience Act (CRA). Learn about the CRA's scope, and why secure OTA updates are essential for compliance.

Discover proactive strategies to navigate EU Cyber Resilience Act (CRA) compliance. Learn how to ensure long-term success.

Explore Mender's shift to independent component releases and versioning, designed to enhance update speed and user clarity.

ISO/SAE 21434 and UNECE R155/R156 standards reshape cybersecurity in software-defined vehicles. Compliance with these frameworks is essential for protecting consumers, ensuring vehicle safety, and driving innovation in the automotive industry.

Recently discovered security vulnerabilities in Mender Server have been fixed.

A customer recently notified us of a security issue in Mender. For users of RBAC and device groups, one specific API did not filter devices correctly.