Posts about supplier due diligence, component risk, and product security supply chains.
View All Tags
On 12 May 2026, CISA highlighted an updated version of the joint Secure-by-Design guidance, co-sealed by additional international cybersecurity agencies. The update reinforces the core message behind the movement: technology providers should take ownership of customer security outcomes, be transparent about their security posture, and treat security as an executive-level product responsibility (CISA Secure-by-Design resource).
On 4 March 2026, STMicroelectronics announced a dedicated Cyber Resilience Act (CRA) resource hub for developers and product teams. The move is notable not just because of ST's size, but because it shows how fast the market is shifting: component vendors are no longer talking only about features, performance, and price. They are increasingly talking about security lifecycle, documentation, and compliance support for products with digital elements (ST announcement).