An in-circuit read is a way to extract data from a memory chip while it remains soldered to the board. Instead of desoldering the part, a technician or attacker accesses the chip through the device’s existing hardware path, often over a bus such as SPI. This is common in embedded systems because flash memory may store firmware, boot code, and configuration data that can be copied for analysis or recovery.
In cyber security, this matters because physical access to a device can expose sensitive firmware without visibly damaging the hardware. A successful read may reveal code structure, update routines, credentials, or other design details that help defenders assess risk—or help an attacker find weaknesses. Defenders reduce this exposure with secure boot, authenticated updates, board-level access controls, and by limiting exposed programming interfaces. An in-circuit read does not automatically mean a compromise, but it does show that trust in embedded systems depends on more than software alone.


