Blog
Swiss cybersecurity law: what the 25 September 2026 decision changes for a manufacturer
The Federal Council has tasked the DDPS with a federal cybersecurity act modelled on the CRA, due June 2027. What awaits Swiss manufacturers, and where to start in your build chain…
Updating firmware over LoRaWAN without trusting the network
CRA & Dev #6: FUOTA for a LoRaWAN sensor, with an image signed and verified by MCUboot, automatic rollback, and a test bench on ESP32 boards.
Does the CRA apply to Swiss SMEs?
What the EU Cyber Resilience Act means if you are based in Switzerland: it applies as soon as you sell in the EU. Your obligations by case, the deadlines, the Swiss bill.
CRA & Dev: our freely accessible technical wiki to secure your software
The CRA & Dev series: short episodes, one development technique each time (SBOM, VEX, signing, secrets, updates), to move your code toward the Cyber Resilience Act requirements.
The Cyber Resilience Act is won in your delivery chain, not in a binder
Opinion: the CRA is first an engineering story, one of good practices. What it changes for the business, where the budget should go, and what audits bring to the table.
Integrating CVE Auditing and SBOM Generation into CI/CD for Baremetal Embedded Systems (C++ / Rust)
A practical pipeline for generating CycloneDX SBOMs and auditing CVEs in CI/CD for mixed C++ / Rust baremetal firmware, in the context of the Cyber Resilience Act (CRA)
When AI Becomes a Reliable Ally in Firmware Development
ADNT experience report: TDD/BDD on Raspberry Pi Pico, Rust bootloader development, and integrating a coding agent into an agile workflow