Alex Baker retweeted
🚀 Finite State is growing!
We’re looking for talented people ready to tackle important challenges in product security and help secure the connected products and systems we rely on every day. Explore our open roles and help spread the word: bit.ly/4wAtyqK
#Hiring
Toy makers, homebuilders, and automakers all answer for what they ship. The AI Force debate comes down to whether frontier labs get an exemption from that standard. xitter.cf/FiniteStateInc/status/…
An AI agent causes harm. The lab blames the deployer, the deployer blames the user, and the user blames the model. As the White House floats an "AI Force," Doc McConnell tells ClearanceJobs why frontier labs need real liability. #AIPolicy #ProductSecurity
bit.ly/4z385bd
Alex Baker retweeted
The DOE opened a request for information on securing the power grid from foreign-made equipment. Finite State's Doc McConnell says the signal is clear: regulators want evidence about what's inside the box, not just attestations. 🔌 #OTSecurity
bit.ly/4herTCx
Alex Baker retweeted
The US has 150,000+ water utilities; only a few hundred are in Water-ISAC, the sector's threat-sharing group. Finite State's Joshua Marpet on OpenAI's $1B defender fund. Welcome help, but it only matters if lean utilities can actually use it. #OTSecurity
bit.ly/4rnjyzH
The FCC's action covers new device models only, so everything already installed stays exactly where it is. For the connected hardware running in your plant right now, could you produce a software bill of materials for any of it? xitter.cf/FiniteStateInc/status/…
Robots and power inverters are now on the FCC's Covered List, blocking equipment authorization for new foreign-made models. Finite State CEO Matt Wyckhouse: the risks are documented, and origin alone won't tell you if a device is secure. bit.ly/4wJr9dW #ProductSecurity
Alex Baker retweeted
Embedded and OT devices stay in service for decades while their software ages into risk. Finite State CEO Matt Wyckhouse in eSecurity Planet on why managing that starts with reading the actual firmware inside deployed devices. #ProductSecurity #OTSecurity
bit.ly/4pwvcaJ
If you're planning for the Cyber Resilience Act, this is a useful walkthrough of the key 2026 and 2027 deadlines and what they mean for manufacturers. xitter.cf/FiniteStateInc/status/…
Sept. 11, 2026 brings vulnerability reporting requirements. Dec. 11, 2027 brings full CRA compliance.
Organizations that wait until 2027 will already be behind. Watch the video for a practical breakdown: bit.ly/4pAaiaG
#CyberResilienceAct #CRA
Another great example of how visibility drives stronger product security decisions. xitter.cf/FiniteStateInc/status/…
"Finite State digs deep into firmware and supply chain components to uncover vulnerabilities that would otherwise remain unnoticed."
A 5-star review highlights the value of knowing what's inside your connected products. bit.ly/4w5WNSv.
#SBOM #FirmwareSecurity
Helping organizations build resilient product security programs is meaningful work. It's rewarding to see customers recognize the impact of that partnership. xitter.cf/FiniteStateInc/status/…
Great product security starts with expertise and execution.
A customer shared that Finite State helped them build a secure development program and team architecture, calling our team "expert" and "indefatigable."
Learn more: bit.ly/4aBaIHB
#ProductSecurity
Larry Pesce and the team just launched a guide on firmware binary analysis. Learn why your source manifest and the firmware you actually ship aren't the same thing. xitter.cf/FiniteStateInc/status/…
Most software in a connected device was written by someone other than the company shipping it, and source tools can't see most of it. Firmware binary analysis reads the shipped image to find what a manifest misses: bit.ly/4ec6Uib #FirmwareSecurity
Adversaries are already scaling attacks with AI. Keeping advanced defensive models locked behind exclusive waitlists only guarantees the attackers an asymmetric advantage. xitter.cf/FiniteStateInc/status/…
The Five Eyes intelligence agencies just elevated AI cyber threats to a systemic operational liability.
In Industrial Cyber, Doc McConnell explains why gating defensive AI behind early-access programs serves the attackers. bit.ly/3SKdjIS #AISecurity
France will stop certifying non-quantum-safe cybersecurity products in 2027. Can your team accurately map every instance of asymmetric cryptography in your shipped products right now? xitter.cf/FiniteStateInc/status/…
France's ANSSI will stop certifying non-quantum-safe security products in 2027. Finite State's Josh Marpet explains why you have exactly 12 months to inventory your asymmetric cryptography. bit.ly/4f0as7n #PQC #Cybersecurity
A scan tells you what's vulnerable. CRA wants to know what you decided about it, documented on every finding and maintained across every release. Our new guide lays out the whole program; give it a read. xitter.cf/FiniteStateInc/status/…
A scanner finds the CVEs. It can't pick what to fix, document why, ship the update, or file the Article 14 report. CRA expects the whole program. Our new guide walks it end-to-end.
Read it: bit.ly/4gNK0iv
#EUCRA #SBOM
Having accurate visibility into the software components running in products is critical for effective risk management. Ground truth matters. xitter.cf/FiniteStateInc/status/…
"The truth of the vulnerability is what we can prove." - Roland Lindsey, Finite State
Finite State creates a ground truth software inventory by analyzing firmware, binaries, source code, and supplier SBOMs.
• Trusted software inventory
• Vulnerability context
• Portfolio visibility
• Component inventory
Learn more: bit.ly/4oN6Okq
#SBOM #Cybersecurity #SoftwareSupplyChain
Customer success stories like this demonstrate the value of moving beyond surface-level vulnerability analysis. xitter.cf/FiniteStateInc/status/…
What becomes possible when you can see the software supply chain risks others miss?
A recent 5-star review from a large enterprise customer highlights how Finite State helps uncover hidden vulnerabilities across third-party components, embedded dependencies, binaries, and firmware.
Better visibility. Better prioritization. More secure products. ⭐
Request a live demo. bit.ly/4cWLJQy.
#SoftwareSupplyChain #Cybersecurity #SBOM
Automotive cybersecurity depends on stronger software supply chain security and industry collaboration. Connect with Sharon at Auto-ISAC Europe this week. xitter.cf/FiniteStateInc/status/…
We're at Auto-ISAC Europe this week.
Join Sharon Hagi's keynote, "AI Closes the Window: Automotive Supply Chain Security in an Accelerated Threat Environment," on June 24, and stop by Booth #5 to discuss software supply chain risk, SBOM readiness, and connected vehicle security.
Read the PR about the upcoming keynote: bwnews.pr/4vsaFpR.
Schedule a demo: bit.ly/4uHXTCr.
#AutoISAC #AutomotiveCybersecurity #SBOM
Adtech was built to locate people for advertising. Josh Marpet's point is that the same capability now reaches deployed troops, which is exactly why device-level data visibility matters. xitter.cf/FiniteStateInc/status/…
Commercial location data from everyday apps can reveal where US troops are deployed, and adversaries can buy it. A new CENTCOM report lays out the risk. Finite State's Josh Marpet in CPO Magazine on how the ad ecosystem makes it possible. #DataPrivacy bit.ly/4udB0pZ
Confidence comes from knowing what's in your software. See how Finite State helps security and compliance teams act faster. xitter.cf/FiniteStateInc/status/…
Can you identify the software supply chain risks hiding in your products?
See how Finite State helps security and compliance teams gain visibility, prioritize remediation, manage SBOMs, and accelerate audit readiness.
🎥 2-minute overview: bit.ly/4uZL86G.
#ProductSecurity #SBOM #Cybersecurity #DevSecOps #Compliance
If you want to see how to build continuous compliance into your engineering lifecycle without adding friction, read this solutions brief! xitter.cf/FiniteStateInc/status/…
Our Parallel Rail brief by CSO Sharon Hagi shows how to automate audit-ready proof at every stage of the product lifecycle—from design to deployment—without creating friction for your team.
Download to see how: finitestate.io/resources/the…
#EUCRA #ProductSecurity
A great recognition of the work our team is doing to advance firmware security, vulnerability analysis, and software supply chain security. xitter.cf/FiniteStateInc/status/…
Finite State has been awarded the 2026 Cybersecurity Stars Award for Firmware Security & Vulnerability Analysis Platform, recognizing our innovation and impact in product security.
Thank you to The Hacker News, the judges, our customers, and our team for this recognition.
#Cybersecurity #ProductSecurity #FirmwareSecurity #SBOM #SoftwareSupplyChain
