security News - CNX Software - Embedded Systems News

March 11, 2025March 11, 2025 by Debashis Das - 4 Comments

u-blox ZED-X20P all-band GNSS module delivers global centimeter-level accuracy at a 90% lower cost (TCO)

Previously u-blox announced the release of the X20 series of all-band GNSS modules, but at the time, the company did not disclose detailed specifications for the module. Recently, they have launched the ZED-X20P all-band GNSS module designed to deliver centimeter-level global positioning at a significantly lower cost, up to 90% less than traditional solutions when considering the total cost of ownership. The module supports L1, L2, L5, and L6 bands across four GNSS constellations (GPS, Galileo, GLONASS, and BeiDou), along with SBAS, QZSS, and NavIC. Additionally, the module is compatible with PPP-RTK, network RTK, and global PPP correction services, along with u-blox’s PointPerfect and Galileo’s free High Accuracy Service (HAS), ensuring precise and flexible positioning. It also features secure boot, signed firmware, encrypted communication, and anti-jamming capabilities, for critical applications. The ZED-X20P maintains the ZED form factor, making the footprint compatible with the ZED-F9P chip for easier upgrades. u-blox says […]

March 10, 2025 by Jean-Luc Aufranc (CNXSoft) - 13 Comments

Hidden proprietary Bluetooth HCI commands in ESP32 microcontroller could pose a security risk

Security is hard. Just as Espressif Systems announced PSA Level 2 for the ESP32-C6 microcontroller, Spain-based cybersecurity company Tarlogic published their findings about a hidden Bluetooth functionality that can be used as a backdoor in the previous generation ESP32, and gave a presentation in Spanish at Rootedcon 2025. Specifically, they found hidden proprietary Bluetooth HCI (Host Controller Interface) commands used to read & write controller memory, and typically used for debugging. However, they could also facilitate supply chain attacks, the concealment of backdoors in the chipset, or the execution of more sophisticated attacks. Tarlogic initially called it a “backdoor”, but some disputed the claim (more on that later), and the company eventually issued an update downgrading it to a “hidden” feature: We would like to clarify that it is more appropriate to refer to the presence of proprietary HCI commands—which allow operations such as reading and modifying memory in the […]

March 10, 2025March 10, 2025 by Debashis Das - No Comments

ASRock iEP-7040E fanless industrial IoT controllers feature Intel Core Ultra Arrow Lake-H CPU, 36V DI/DO

ASRock has recently released the iEP-7040E series which are Arrow Lake-H industrial IoT controllers powered by Intel Core Ultra “Arrow Lake-H” SoCs with Intel Arc graphics and Intel AI Boost. They feature a fanless design, 9V to 36V or 19V to 36V DC input, three Gigabit Ethernet ports, and two optional Intel GbE ports with PoE. Depending on the variant, the iEP-7040E supports 4x DI/4x DO or 8x DI/8x DO (with 36V isolation), up to 96GB DDR5 5600MHz with In-Band ECC (IBECC), and Intel In-Band Manageability with TPM 2.0. Expansion options include an M.2 B-Key socket and Nano SIM card slot for cellular, an M.2 E-Key socket for WiFi/BT, and an M.2 2280 M-key socket for storage. I/O options include HDMI 2.0b, VGA, three USB 3.2 Gen2 ports, one USB 2.0 port, three RS232/422/485, audio I/O, and multiple power options with OVP, UVP, OCP, and 80V surge protection. Certified for […]

March 7, 2025 by Jean-Luc Aufranc (CNXSoft) - No Comments

ESP32-C6 is the first RISC-V microcontroller to achieve PSA Level 2 security compliance

ESP32-C6 RISC-V MCU PSA Level 2 Certified

Arm introduced the Platform Security Architecture (PSA) back in 2017 to make Internet of Things (IoT) chips more secure. Since then we’ve seen many PSA certified products such as Silicon Labs’ EFR32FG23 (FG23) and EFR32ZG23 (ZG23) Cortex-M33 microcontrollers with PSA Level 3 certification. But as announced in 2017, PSA is architecture-agnostic, and the security architecture has gone beyond just certifying Arm microcontrollers, as shown by Espressif Systems who just announced that the ESP32-C6 RISC-V wireless microcontroller was now PSA Level 2 certified. The ESP32-C3 RISC-V MCU also achieved PSA certification earlier, but at the lower Level 1. The PSA-L2 certification was mostly made possible thanks to the ESP-TEE (Trusted Execution Environment) firmware that provides hardware-enforced isolation to enhance security for operations such as cryptographic key management, secure boot verification, and firmware updates. Espressif also reminded us of ESP32-C6’s hardware security features in the announcement: Physical Memory Protection (PMP) and Access […]

March 6, 2025 by Jean-Luc Aufranc (CNXSoft) - 4 Comments

STMicro STM32WBA6 2.4 GHz wireless MCU gets up to 2MB flash, 512KB SRAM, USB OTG, and more

STMicro had two announcements yesterday. I’ve already covered the launch of the ultra-low-power STM32U3 microcontroller family, so today, I’ll check the new 100 MHz STM32WBA6 Cortex-M33 wireless MCU family with 2.4GHz radios for Bluetooth LE 6.0, Zigbee, Thread, and Matter designed for wearables, smart home devices, remote weather sensors, and more. The STM32WBA6 is an evolution of the STM32WBA family introduced last year, especially of the STM32WBA54 and STM32WBA55 with many of the same features SESIP (Security Evaluation Standard for IoT Platforms) Level 3 security certification, but gets more memory and flash with up to 512KB of SRAM and up to 2MB of flash. The new STM32WBA6 family also gains a High-Speed USB OTG interface and extra digital interfaces such as three SPI ports, four I2C ports, three USARTs, and one LPUART. STMicro STM32WBA6 key features and specifications: MCU core – Arm Cortex-M33 at 100MHz with FPU and DSP Memory […]

March 5, 2025 by Jean-Luc Aufranc (CNXSoft) - 7 Comments

Rockchip RK3588 4K video encoder features four SDI inputs, four SDI loop outputs

Mekotronics R58-4x4-3U RK3588 video encoder

Mekotronics R58-4×4 3U is yet another device based on Rockchip RK3588 from the company, but this product is a 4K video encoder with four SDI inputs, and four SDI loop outputs mirroring the SDI inputs. SDI (Serial Digital Interface) inputs are used for transmitting uncompressed, unencrypted digital video signals and typically found in professional video production and broadcasting environments. The SDI interface can also be found in security cameras like the MOKOSE SHD50-2.8-12MM and I can also see it used in cameras designed for live streaming on YouTube, or other services. The main advantages of SDI over interfaces like USB, HDMI, or Ethernet, are that it can use longer cables up to 300 meters, offers better signal integrity, and has near zero latency. Compatibility for professional camera equipment is another advantage. Let’s look at the Mekotronics R58-4×4 3U specifications: SoC – Rockchip RK3588 octa-core processor with CPU – 4x CortexA76 […]

March 1, 2025March 5, 2025 by Jean-Luc Aufranc (CNXSoft) - 6 Comments

Tropic Square TROPIC01 is an auditable, open architecture, tamper-proof RISC-V secure element (SE) for IoT and microcontrollers

Tropic Square TROPIC01 is an auditable, open architecture, tamper-proof RISC-V based secure element (SE) designed to interface with microcontrollers in products such as hardware wallets, authentication solutions, biometric wallets, medical devices, and other IoT solutions. There are plenty of secure elements on the market, but their design is usually closed-source, so the design can’t be easily verified by third parties and flaws may remain hidden even when discovered. With its open designs, potentially flaws in the TROPIC01 can easily be found, disclosed, and fixed by the community, and such verifiable design improved trust in the security of the solution. TOPIC01 secure element specifications: CPU core – RISC-V IBEX Controller Core with secure firmware updates and customizable FW upon request Memory OTP to store x.509 certificate and keys Flash to store general purpose and PIN verification data Memory address scrambling On-the-fly encryption Error correction code protection Communication Interface SPI application control […]

February 21, 2025February 21, 2025 by Debashis Das - No Comments

Renesas RA4L1 ultra-low-power MCU family offers 168 µA/MHz operation, dual-bank flash, capacitive touch

Renesas has recently introduced the RA4L1 ultra-low-power Arm Cortex-M33 MCU family along with two evaluation/development boards. This new lineup consists of 14 ultra-low-power devices based on an 80 MHz Arm Cortex-M33 processor with TrustZone support and designed for metering, IoT sensing, smart locks, digital cameras, and human-machine interface (HMI) applications. The RA4L1 MCU family offers high power efficiency at 168 µA/MHz while active and a standby current of 1.70 µA while retaining SRAM. Additionally, they support segment LCD, capacitive touch, USB-FS, CAN FD, low-power UART, multiple serial interfaces (SPI, QSPI, I2C, I3C, SSI), ADC, DAC, real-time clock, and security features like the RSIP security engine with TRNG, AES, ECC, and Hash. Renesas RA4L1 microcontroller Renesas RA4L1 specifications MCU core Arm Cortex-M33 core (Armv8-M) Up to 80 MHz operating frequency Arm Memory Protection Unit (MPU) 8 secure regions (MPU_S) 8 non-secure regions (MPU_NS) CoreSight ETM-M33 Dual SysTick timers (secure & non-secure) […]