logo

Nobody was checking the drives that encrypt your laptop

ID: 12895df2-65ea-5f38-be8a-79b0f09b3bd5

STIX ID: report--12895df2-65ea-5f38-be8a-79b0f09b3bd5

Feed Name: Help Net Security

Threat Score
40/100

Date Published: 2026-07-21

Date Updated: 2026-07-21

Author: Anamarija Pogorelec

...
...

Researchers purchased and black‑box tested Opal2 self‑encrypting SSDs from multiple vendors and found multiple practical flaws (shared AES‑XTS tweaks that reveal data patterns, biased RNG outputs, sequential or permissive PSID reset codes, and broken single‑user mode). The team reported issues to vendors, released cryptsetup updates and an Opal Test Suite, and recommended layering software encryption over unreliable hardware encryption; vendors were largely unresponsive or unable to provide widespread firmware fixes.

Your team is not currently subscribed to this feed. You must subscribe to it in order to see this post.