Dear All,
MITRE has released an updated list of the 2025 CWE™ Most Important Hardware Weaknesses (MIHW), updating the 2021 list. The new list comprises 11 items, including Sensitive Information in Resource Not Removed Before Reuse; Improper Isolation of Shared Resources on System-on-a-Chip (SoC); On-Chip Debug and Test Interface With Improper Access Control; and Hardware Internal or Debug Modes Allow Override of Locks. MITRE writes, "This update incorporates advancements in data collection and analysis, leveraging AI-assisted data collection alongside expert opinions from the Hardware CWE Special Interest Group (SIG), which includes subject matter experts from the hardware design, manufacturing, research, and security domains, as well as academia and government. This approach combines data-driven analysis with collaborative subject matter expertise."
