Carnegie Mellon University Software Engineering Institute

06/18/2026

A New CERT Vulnerability Note: SignalRGB kernel driver contains improper access control and IOCTL vulnerabilitieshttps://kb.cert.org/vuls/id/380058

06/16/2026

As outlined in this post, the SEI is pioneering research into the application of zero trust principles within weapon system environments with embedded OT -

Zero trust frameworks tailored to the unique requirements of OT systems are just beginning to emerge. The SEI is pioneering research into the application of zero trust principles within weapon system environments with embedded OT.

06/15/2026

Join SEI CERT Division director Gregory Touhill Tuesday, June 23, for the LinkedIn Live session "Cybersecurity Oversight: What Boards Should Expect From a Cyber Risk Report."

Boards are getting more cybersecurity information than ever. But volume isn't insight.

Effective cyber-risk oversight depends on reporting that helps directors understand what's actually at risk, how management is responding, where accountability sits, and which decisions truly require board-level attention.

That's the focus of the opening LinkedIn Live session on the 5th Edition of the NACD Director's Handbook on Cyber-Risk Oversight, co-produced by NACD and the Internet Security Alliance.

The conversation zeroes in on one of the Handbook's most practical resources: Tool-Kit L, "Example Cybersecurity Board Reporting"--written by Touhill--and its connection to Principle 1, "Treating Cybersecurity as a Strategic Risk." We'll dig into what effective reporting should include, what directors should expect from security leadership, and how better reporting moves boards from passive updates to active oversight.

Moderated by Dylan Sandlin, Program Manager for Digital and Cybersecurity Content at NACD (National Association of Corporate Directors), the session features:

- Larry Clinton — President of the Internet Security Alliance.

- Brig. Gen. Gregory Touhill, USAF (Ret.) — the first Federal CISO of the United States, Director of the CERT Division at Carnegie Mellon's Software Engineering Institute, and ISA board member.

- Andrea Bonime-Blanc, JD/PhD — Founder and CEO of GEC Risk Advisory, bringing the director's perspective on how boards can ask sharper questions, assess business impact, and strengthen enterprise resilience.

https://www.linkedin.com/events/7467247421270622209/

06/12/2026

SEI Releases Fortran Coding Standard -

This post describes our work on the SEI CERT Fortran Coding Standard, which provides a core of well-documented and enforceable coding guidelines for Fortran.

06/11/2026

A New CERT Vulnerability Note: Microsoft-signed UEFI shim bootloaders vulnerable to Secure Boot bypass - https://kb.cert.org/vuls/id/616257

06/10/2026

Watch the archived video of yesterday's "Rethinking and Maturing AI Adoption."

https://www.youtube.com/watch?v=ob4plwq7PnE

In this webcast, experts from the SEI and Accenture shared technical insights and lessons learned from maturing AI adoption in complex environments. They demonstrated how a nimble assessment instrument such as the road-tested AI Adoption Maturity Model fills critical gaps faced by organizations adopting AI.

Panelists included Anita Carleton, Ipek Ozkaya, Rajendra Prasad (RP), John Haller, Tony Leraris, Majd Sakr, and Kaveh Safavi.

AI Adoption Maturity Model: Improving How Organizations Adopt AI So...

06/09/2026

Today! Don't miss "Rethinking and Maturing AI Adoption" at 1:30 p.m. ET.

In this webcast, experts from the Software Engineering Institute at Carnegie Mellon University and Accenture will share technical insights and lessons learned from maturing AI adoption in complex environments. They will demonstrate how a nimble assessment instrument such as the road-tested AI Adoption Maturity Model fills critical gaps faced by organizations adopting AI.

The panel of speakers include Anita Carleton, John Haller, Ipek Ozkaya, Tony Leraris, Majd Sakr, Kaveh Safavi, and Rajendra Prasad (RP) - https://www.eventbrite.com/e/rethinking-and-maturing-ai-adoption-tickets-1990513608787

06/08/2026

The newly released Artificial Intelligence (AI) Adoption Maturity Model is an empirically validated framework designed to help organizations move beyond AI experimentation and scale artificial intelligence with measurable, repeatable outcomes. The model, by the Software Engineering Institute in partnership with Accenture, provides a field-tested, structured approach for government and commercial enterprises to assess their current AI capabilities, identify gaps and build a clear roadmap for responsible, value-driven AI adoption -

Fortune 500 companies are already using the model to establish a baseline for adopting artificial intelligence technology and plan for future AI investments.