Hacking Trains

The report highlights that decades-old End-of-Train (FRED/EOT) radio devices used to communicate between the rear and head of trains lack encryption and authentication, relying only on a simple BCH checksum; CISA warns that attackers using software-defined radios could inject fake packets to interfere with operations (including brake commands), posing a serious safety risk to rail infrastructure.