wolfSSL now supports the SEC security engine on NXP's QorIQ PowerPC T-series processors. SEC is the QorIQ name for the same CAAM block that wolfSSL has long sup

Automotive security is moving deeper into the silicon, and wolfSSL is continuing to expand wolfHSM support across the MCU platforms powering next-generation veh

TL;DR FoxIO has published full details and proof-of-concept code for three GoAhead TLS vulnerabilities. The worst scores 9.1 on CVSS and lets revoked client certificates pass mutual TLS checks. GoAhead is an embedded web server that, according to FoxIO, runs in "hundreds of millions" of devices. Three separate bugs in GoAhead's TLS backends can accept revoked certificates, expose encrypted sessions or skip a chain-depth limit.

TL;DR FoxIO has published full details and proof-of-concept code for three GoAhead TLS vulnerabilities. The worst scores 9.1 on CVSS and lets revoked client certificates pass mutual TLS checks. GoAhead is an embedded web server that, according to FoxIO, runs in "hundreds of millions" of devices. Three separate bugs in GoAhead's TLS backends can accept revoked certificates, expose encrypted sessions or skip a chain-depth limit.

Secure the Future of Embedded Connectivity. Listen now to our partner webinar with NXP and wolfSSL to explore how to defend connected devices from the emerging threat of quantum computing. See how to deploy post-quantum cryptography (PQC) with wolfSSL on the NXP FRDM-MCXN947 platform — and see a li

Device certificates need renewal. Keys need rollover. Across an embedded fleet, both must work within tight memory and processing limits. Watch now for an introduction to wolfCert, the successor to wolfSCEP. Learn how to integrate certificate enrollment into MCU and RTOS applications within your de

TL;DR wolfSSL has released wolfSSH 1.6.0 to fix five security flaws in its lightweight SSH library. The most serious of these wolfSSH vulnerabilities, CVE-2026-16516, scores 9.0 on CVSS 4.0 and can let a man-in-the-middle attacker pass off a forged server key. All five affect wolfSSH 1.5.0 and earlier. Why It Matters wolfSSH is built for embedded devices, IoT products and other constrained systems.

TL;DR wolfSSL shipped version 5.9.4 on September 25, 2026, fixing 10 wolfSSL vulnerabilities. Three are rated High, and each lets a malicious peer bypass TLS authentication or forge certificates in certain builds. Several flaws were found through the Anthropic OSS program. Why These wolfSSL Vulnerabilities Matter wolfSSL is a lightweight TLS library built for embedded systems, IoT devices, and cloud software.

We are pleased to announce the publication of a white paper jointly developed by Renesas and wolfSSL.

Strategies need to focus less on cybersecurity cost and more on patching, IP protection and all the factors impacting uptime.

The widespread scale of cybercrime now makes it a strategic imperative for business leaders. But they can't simply focus on systems protection.