Zarhus retweeted
🎫 Conference tickets on sale now (Days 4–5)
🎫 Early Bird available until mid-June. Limited number of tickets available.
💼 Training tickets for Days 1–3 will be released later per session/topic.
Secure your spot today and meet us in Gdańsk!
3mdeb.com/events/#_boot-secu…
Zarhus retweeted
🎉 We’re excited to announce the Boot Security Mastery Conference 2026 by 3mdeb this autumn in Gdańsk, Poland 🇵🇱
📅 5-day event:
Days 1–3: training sessions only
Days 4–5: conference days - technical talks, case studies & networking 🤝
Replying to @macpijan
@macpijan presents a deep dive into #Android's hardware-backed security mechanisms, focusing on the Trusted Execution Environment (#TEE) and its critical role in securing sensitive operations like biometric authentication and key management.
cfp.3mdeb.com/zarhus-develop…
He explains how Android Verified Boot (AVB) and hardware roots of trust ensure system integrity and security during startup.
Furthermore, it highlights Android's compliance requirements across various device manufacturers, ensuring consistent security standards and protection.
Kamil Aronowski introduces a game-changing approach to firmware security in light of the EU NIS2. With a focus on supply chain integrity and cybersecurity accountability, he emphasizes the importance of taking complete, self-sovereign control over cryptographic signing keys.
Aronowski demonstrates how mastering key custody with Zarhus can mitigate risks by eliminating third-party dependencies, fortifying supply chains, and providing ultimate operational resilience.
#NIS2 #CyberSecurity #FirmwareSecurity #SupplyChainSecurity
By securing your firmware with a complete key sovereignty, organizations can ensure long-term, transparent, and privacy-respecting machine validation, aligning with the stringent demands of NIS2, while enhancing overall security and trustworthiness.
cfp.3mdeb.com/zarhus-develop…
A detailed look at the Dasharo Tools Suite (DTS) by Daniil, covering its development, testing, and future roadmap. The presentation explained how DTS facilitates firmware installation, management, and updates, supporting both developers and end-users.
#SecureUpdates #Dasharo
It highlighted the suite's architecture and the design decisions that ensure efficient and secure firmware updates across different hardware platforms.
#firmware #cybersecurity
The speaker also focused on the testing and validation processes within DTS, explaining the design and use of a custom end-to-end testing methodology that ensures reliability and security.
🔗 Video, description & slides:
cfp.3mdeb.com/zarhus-develop…
Context-Based Authentication (CBA) offers an innovative solution to securing access without relying on specialized hardware like GPS or cellular signals, which are typically used in geofencing.
This tech not only strengthens authentication but also improves the security of stationary devices, without needing extra hardware. In this talk, we will demonstrate how CBA works, showcase the technology stack behind it, and share the latest developments from the @crosscon_eu
Video, description & slides:
cfp.3mdeb.com/zarhus-develop…
Blog:
blog.3mdeb.com/2025/2025-10-…
Virtualization on ARMv8-M with the @crosscon_eu hypervisor running Zephyr RTOS and a TLS client. The demo on LPCXpresso55S69 showcases a secure TLS application setup ready for 2FA integration.
Watch here: youtu.be/GpKOEpA1aTQ?si=3hc8…
#Zephyr #ARMv8M #TLS #RTOS #EmbeddedSecurity
🛡️NIS2 changes everything. Compliance alone won't secure your supply chain. Learn how cryptographic key sovereignty turns NIS2 from a burden into a competitive edge.
Your firmware. Your machine. Your keys.
👉cfp.3mdeb.com/zarhus-develop…
👉youtube.com/live/soVaGPbJKVw…
If you want to understand how cache timing attacks operate and how to detect them in practice, we published an overview explaining how information leaks through cache behavior and how these channels are exploited in real systems.
The talk focuses on cache behavior and several possible cache attack types, explaining how they work in practice. It briefly mentions ongoing plans to test whether the @crosscon_eu hypervisor implements relevant mitigations.
The demo presents one example attack that successfully extracts data prior to any mitigation. More details are available on the event page:
cfp.3mdeb.com/zarhus-develop…


