# \#security **URL:** https://hub.mender.io/tag/security/90.md [Latest](https://hub.mender.io/latest.md) · [Categories](https://hub.mender.io/categories.md) · [Tags](https://hub.mender.io/tags.md) --- ## [Syscall Sandboxing with seccomp-BPF (on Yocto)](https://hub.mender.io/t/syscall-sandboxing-with-seccomp-bpf-on-yocto/8156)
**Author:** [@TheYoctoJester](https://hub.mender.io/u/TheYoctoJester)\ **Replies:** 0\ **Last updated:** [January 7, 2026, 7:22pm UTC](https://hub.mender.io/t/syscall-sandboxing-with-seccomp-bpf-on-yocto/8156 "2026-01-07T19:22:48Z")
When a network-connected application on an embedded device gets compromised, the attacker’s first move is typically to spawn a shell or execute additional tools. This tutorial demonstrates how to use seccomp-BPF to block… --- ## [Adding Multi-Factor Authentication to Yocto Project Images](https://hub.mender.io/t/adding-multi-factor-authentication-to-yocto-project-images/8093)
**Author:** [@TheYoctoJester](https://hub.mender.io/u/TheYoctoJester)\ **Replies:** 0\ **Last updated:** [November 12, 2025, 2:29pm UTC](https://hub.mender.io/t/adding-multi-factor-authentication-to-yocto-project-images/8093 "2025-11-12T14:29:52Z")
Securing SSH access to embedded Linux devices has become increasingly important. While password authentication provides a basic level of security, Time-based One-Time Passwords (TOTP) offer an additional layer of protect… --- ## [Protecting Your Custom Application with Fail2Ban](https://hub.mender.io/t/protecting-your-custom-application-with-fail2ban/8037)
**Author:** [@TheYoctoJester](https://hub.mender.io/u/TheYoctoJester)\ **Replies:** 0\ **Last updated:** [October 8, 2025, 10:18am UTC](https://hub.mender.io/t/protecting-your-custom-application-with-fail2ban/8037 "2025-10-08T10:18:10Z")
Ever deployed a simple web service only to find your logs filling up with automated scanning attempts? Or watched as the same IP hammers your endpoint over and over? That’s where Fail2Ban comes in - a tool that monitors … --- ## [PKCS11/HSM Support for authentication/authorization and signature verification](https://hub.mender.io/t/pkcs11-hsm-support-for-authentication-authorization-and-signature-verification/886)
**Author:** [@SuicidalLabRat](https://hub.mender.io/u/SuicidalLabRat)\ **Replies:** 25\ **Last updated:** [December 13, 2024, 3:57pm UTC](https://hub.mender.io/t/pkcs11-hsm-support-for-authentication-authorization-and-signature-verification/886 "2024-12-13T15:57:52Z")
We have put significant resource into narrowing the attack surface of our device fleets, including the implementation of HSM type security/crypto modules to manage device secrets and PKI duties. The mender client is the… --- ## [HSM/secure element use cases](https://hub.mender.io/t/hsm-secure-element-use-cases/4815)
**Author:** [@mattwood2000](https://hub.mender.io/u/mattwood2000)\ **Replies:** 7\ **Last updated:** [July 4, 2024, 5:11pm UTC](https://hub.mender.io/t/hsm-secure-element-use-cases/4815 "2024-07-04T17:11:53Z")
Hi, I’m trying to understand the use cases for using a secure element and how that maps to the Certificates and Keys section of the docs. In the Security section the docs state: Currently, Mender supports hardware sec… --- ## [Code injection via device inventory?](https://hub.mender.io/t/code-injection-via-device-inventory/6858)
**Author:** [@mister\_kanister](https://hub.mender.io/u/mister_kanister)\ **Replies:** 1\ **Last updated:** [June 3, 2024, 3:22pm UTC](https://hub.mender.io/t/code-injection-via-device-inventory/6858 "2024-06-03T15:22:21Z")
Good Day, Friends! I’m working on an mender artifact that will extend the device inventory. It is a more general question about security because I do not understand the implications. Via --type script update module I h… --- ## [Validate device JWT authentication token on custom server](https://hub.mender.io/t/validate-device-jwt-authentication-token-on-custom-server/5232)
**Author:** [@anysomewhere](https://hub.mender.io/u/anysomewhere)\ **Replies:** 4\ **Last updated:** [September 9, 2022, 12:02pm UTC](https://hub.mender.io/t/validate-device-jwt-authentication-token-on-custom-server/5232 "2022-09-09T12:02:25Z")
We want to use the device JWT authentication token on our custom server to identify a device. The plan is to get a token via D-Bus with the GetJwtToken Method and use it as the bearer-token to call our server. As we wan… --- ## [Impact of CVE-2021-39293 on Mender](https://hub.mender.io/t/impact-of-cve-2021-39293-on-mender/4548)
**Author:** [@deffo](https://hub.mender.io/u/deffo)\ **Replies:** 1\ **Last updated:** [February 8, 2022, 10:41am UTC](https://hub.mender.io/t/impact-of-cve-2021-39293-on-mender/4548 "2022-02-08T10:41:36Z")
As always I’d like to ask you guys if you see CVE-2021-39293 \[1\] as a threat for Yocto Dunfell installations. Thanks! \[1\] NVD - CVE-2021-39293 --- ## [Impact of CVE-2021-44716 and CVE-2021-44717 on Mender](https://hub.mender.io/t/impact-of-cve-2021-44716-and-cve-2021-44717-on-mender/4479)
**Author:** [@deffo](https://hub.mender.io/u/deffo)\ **Replies:** 1\ **Last updated:** [January 14, 2022, 8:01am UTC](https://hub.mender.io/t/impact-of-cve-2021-44716-and-cve-2021-44717-on-mender/4479 "2022-01-14T08:01:57Z")
As always I’d like to ask you guys of you see these two beauties as a threat for Yocto Dunfell installations. Thanks! \[1\] NVD - CVE-2021-44716 \[2\] NVD - CVE-2021-44717 --- ## [Impact of CVE-2021-38297 on Mender](https://hub.mender.io/t/impact-of-cve-2021-38297-on-mender/4225)
**Author:** [@deffo](https://hub.mender.io/u/deffo)\ **Replies:** 1\ **Last updated:** [October 26, 2021, 3:59pm UTC](https://hub.mender.io/t/impact-of-cve-2021-38297-on-mender/4225 "2021-10-26T15:59:54Z")
Hi there! How do you consider the impact of CVE-2021-38297 \[1\] on Mender? Do you think this is critical? Best regards \[1\] NVD - CVE-2021-38297 --- ## [Impact of certain CVEs on Mender](https://hub.mender.io/t/impact-of-certain-cves-on-mender/4003)
**Author:** [@deffo](https://hub.mender.io/u/deffo)\ **Replies:** 2\ **Last updated:** [August 16, 2021, 7:58am UTC](https://hub.mender.io/t/impact-of-certain-cves-on-mender/4003 "2021-08-16T07:58:52Z")
Hi there! How do you consider the impact of https://nvd.nist.gov/vuln/detail/CVE-2021-33195 https://nvd.nist.gov/vuln/detail/CVE-2021-33196 https://nvd.nist.gov/vuln/detail/CVE-2021-33197 https://nvd.nist.gov/vuln/d… --- ## [Impact of CVE-2021-31525 and CVE-2021-33194 on Mender](https://hub.mender.io/t/impact-of-cve-2021-31525-and-cve-2021-33194-on-mender/3821)
**Author:** [@deffo](https://hub.mender.io/u/deffo)\ **Replies:** 2\ **Last updated:** [July 2, 2021, 1:46pm UTC](https://hub.mender.io/t/impact-of-cve-2021-31525-and-cve-2021-33194-on-mender/3821 "2021-07-02T13:46:22Z")
Hi there! How do you consider the impact of CVE-2021-31525 \[1\] and CVE-2021-33194 \[2\] on Mender? Do you think this is critical? Best regards \[1\] NVD - CVE-2021-31525 \[2\] NVD - CVE-2021-33194 --- ## [Impact of CVE-2021-27918 on Mender](https://hub.mender.io/t/impact-of-cve-2021-27918-on-mender/3403)
**Author:** [@deffo](https://hub.mender.io/u/deffo)\ **Replies:** 1\ **Last updated:** [March 22, 2021, 7:59am UTC](https://hub.mender.io/t/impact-of-cve-2021-27918-on-mender/3403 "2021-03-22T07:59:04Z")
Hi there! How do you consider the impact of CVE-2021-27918 \[1\] on Mender? Do you think this is critical? We are asking since warrior-v2020.10 is directly affected with version 1.14.7. Best regards \[1\] NVD - CVE-2021-2… --- ## [Impact of CVE-2020-29510 on Mender](https://hub.mender.io/t/impact-of-cve-2020-29510-on-mender/3140)
**Author:** [@deffo](https://hub.mender.io/u/deffo)\ **Replies:** 2\ **Last updated:** [February 1, 2021, 8:07am UTC](https://hub.mender.io/t/impact-of-cve-2020-29510-on-mender/3140 "2021-02-01T08:07:20Z")
Hi there! How do you consider the impact of CVE-2020-29510 \[1\] on Mender? Do you think this is critical? We are asking since warrior-v2020.10 is directly affected with version 1.14.7. Best regards \[1\] https://nvd.nist…