Divide Security Launches IoT and Embedded Systems Security Training Platform with Vulnerable-by-Design Hardware

This NoLimitSecu podcast episode discusses IoT and embedded systems security training with Arnaud Courti, Lionel Cobet, and Dorian Peluso from Divide Security. The company offers a training platform centered around a vulnerable-by-design electronic board called Divide V2, which features STM32 and ESP32 cores and costs 250 euros with tooling, plus a 3,000 euro annual subscription for access to all training scenarios. The board supports multiple communication protocols including WiFi, Bluetooth, and UART, with plans to add LoRa modules, and is designed to simulate various IoT device vulnerabilities without requiring expensive equipment. The platform combines SaaS-based guided training scenarios with open-source challenge content, allowing users to practice attacks in CTF mode or follow step-by-step solutions. Training demand is driven by both real security risks in peripheral systems and regulatory requirements like the EU Cyber Resilience Act. The STM32 F103 component was deliberately chosen for its known vulnerabilities, including susceptibility to voltage glitching attacks that can bypass firmware protection. A next-generation V3 board is planned for 2027-2028 with Trusted Execution Environment capabilities and interchangeable cores for different industry sectors like automotive.