Carnegie Mellon University Software Engineering Institute

10/19/2026

Are you passionate about the intersection of AI, Machine Learning, and Communication Theory? We are looking for an AI/ML Communications Research Engineer to conduct high-level research and develop next-generation ML models that bridge the gap between signal processing and artificial intelligence - https://cmu.wd115.myworkdayjobs.com/SEI/job/Pittsburgh-PA/Associate-AI-ML-Communications-Research-Engineer_2025237

10/14/2026

A New Note: Multiple TLS Libraries can Bypass Delegation Enforcement - https://kb.cert.org/vuls/id/948176

10/14/2026

A New CERT Vulnerability Note: Google BoringSSL Name Constraints Bypass in SAN Validation Logic - https://kb.cert.org/vuls/id/410595

10/13/2026

Our latest post proposes a five-step framework for determining the sufficient cyber realism of a simulated environment -

This blog post proposes a five-step framework for determining the needed realism of a simulated environment.

10/09/2026

Check out the latest supplements in the Software Acquisition Go Bag.

Previous supplements gave guidance on developing the right metrics and finding hidden value in metrics you already collect. "Going Beyond SWP Metrics with Metrics Scenarios" shows how to layer additional high-value metrics on top of core Software Acquisition Pathway metrics without sacrificing the lightweight philosophy - https://www.sei.cmu.edu/documents/6591/Going_Beyond_SWP_Metrics.pdf?utm_source=social&utm_medium=fb&utm_campaign=gobag_fb

Another new supplement, "Ensuring My Program Gets the Data It Needs," explains how to access all that data - https://www.sei.cmu.edu/documents/6592/Ensuring_My_Program_Gets_The_Data.pdf?utm_source=social&utm_medium=fb&utm_campaign=gobag_fb

10/01/2026

How do you test compilers designed to rapidly adapt to hardware they’ve never seen? The SEI’s Advanced Computing Lab is helping DARPA’s MOCHA program answer that question -

How do you select the best hardware to test next-gen compilers? Our latest post explores how the SEI is tackling this challenge for DARPA’s MOCHA program.

10/01/2026

A New CERT Vulnerability Note: InsydeH2O IHISI SMM is vulnerable to unsafe memory write operations - https://kb.cert.org/vuls/id/553437

09/29/2026

4 open source text-to-speech systems for edge deployment, voice cloning & long-form audio, and when to use each -

This post dissects four open-source text-to-speech systems that represent distinct points in the design space.

09/28/2026

A New CERT Vulnerability Note: ViewSonic vCast media streaming service allows unauthenticated screen exfiltration and device compromise - https://kb.cert.org/vuls/id/234131

09/28/2026

A New CERT Vulnerability Note: Readwise Reader for Android, version 8.7.2, contains multiple XSS vulnerabilities - https://kb.cert.org/vuls/id/699627