An embedded controller is a specialized computer built into a device to manage one specific function, such as braking, steering, power delivery, or industrial process control. Unlike a general-purpose PC, it runs fixed-purpose firmware, uses dedicated inputs and outputs, and is often designed to operate continuously with strict timing and safety requirements.
In cyber security, embedded controllers matter because they sit inside the attack surface of critical equipment. If their firmware has flaws, an attacker may be able to crash the device, disrupt service, or in some cases execute code and alter behavior. Defenders focus on secure firmware updates, authenticated diagnostics, network segmentation, and version control so a compromised controller cannot be easily reached or modified. In vehicles and other safety systems, an embedded controller is not just software: it is part of the physical control loop, so a cyber issue can quickly become an operational or safety issue.