Nobody was checking the drives that encrypt your laptop

Help Net Security

July 21, 2026 at 5:30 AM

Overview

A recent investigation by Milan Brož and his colleagues found that many solid-state drives (SSDs) labeled as having hardware encryption may not be secure. They tested 38 drives compliant with the TCG Opal2 standard, commonly used in millions of laptops and workstations. The researchers discovered that the drives failed to adequately protect data, raising concerns about the reliability of hardware encryption. This affects users and organizations relying on these drives for data security, as they may be under the false impression that their sensitive information is safe. With the increasing use of SSDs in computing, this issue highlights a significant gap in security practices and the need for more rigorous checks on encryption technologies.

Key Takeaways

Affected Systems: Solid-state drives (SSDs) compliant with TCG Opal2 standard
Action Required: Users should verify the encryption capabilities of their SSDs and consider alternative security measures until the issue is addressed by manufacturers.
Timeline: Newly disclosed

Original Article Summary

A drive ships with a label promising hardware encryption. You plug it in, set a password, and trust the chip inside to handle the rest. Millions of laptops and workstations run this way, on solid-state drives built to the TCG Opal2 standard. Milan Brož and three colleagues bought 38 of those drives and ran them through a test bench. Brož maintains cryptsetup, the tool that configures disk encryption on most Linux systems. The drives came … More → The post Nobody was checking the drives that encrypt your laptop appeared first on Help Net Security.

Impact

Solid-state drives (SSDs) compliant with TCG Opal2 standard

Exploitation Status

No active exploitation has been reported at this time. However, organizations should still apply patches promptly as proof-of-concept code may exist.

Timeline

Newly disclosed

Remediation

Users should verify the encryption capabilities of their SSDs and consider alternative security measures until the issue is addressed by manufacturers.

Additional Information

This threat intelligence is aggregated from trusted cybersecurity sources. For the most up-to-date information, technical details, and official vendor guidance, please refer to the original article linked below.

Related Topics: This incident relates to Linux, Vulnerability.

Read Original Article

Related Coverage

FBI Warns of Deepfake Videos Impersonating IC3 Leadership

Infosecurity Magazine

The FBI has issued a warning about deepfake videos that impersonate leaders from the Internet Crime Complaint Center (IC3). These videos are misleading users into visiting fake complaint sites, where they may unknowingly provide personal information or report fraudulent activities. This tactic is particularly concerning as it uses the authority of recognized figures to lend credibility to the scam. The deepfake technology can make these videos appear highly convincing, making it difficult for individuals to discern the truth. As a result, users should be cautious and verify any communications they receive that claim to be from IC3 or similar agencies.

Jul 21, 2026

N-day is Becoming N-Hour. Patching Faster Won't Save You.

The Hacker News

The article discusses the challenges of patching software vulnerabilities in a timely manner. When vendors release a security patch, they reveal information about what was fixed, which can be exploited by attackers against systems that haven't been updated yet. This practice, known as N-day exploitation, creates a race between the vendors issuing patches and defenders trying to apply these updates before they are targeted. The piece emphasizes that simply patching faster may not be enough to protect systems, as the window of opportunity for attackers can be dangerously short. This issue affects all companies relying on software, particularly those with critical infrastructure that may be slow to implement updates.

Jul 21, 2026

MIT to Become Hotbed of AI Video Surveillance

Schneier on Security

MIT is investing over $3 million to install more than 500 AI surveillance cameras across its campus, including academic buildings and outdoor areas. This project, which began in November 2025 and is expected to finish by September 2026, will enhance the university's ability to monitor activities through advanced features like real-time facial recognition, object classification, and motion detection. The cameras can identify individuals based on clothing color, gender, and age from up to 35 feet away. Data collected from the cameras will be stored for up to 30 days, unless specific exceptions are made. The implications of this extensive surveillance initiative raise concerns about privacy and data security on campus, as it affects students, faculty, and visitors who may be monitored without their explicit consent.

Jul 21, 2026

US seizes over 1,000 websites in FIFA World Cup piracy crackdown

BleepingComputer

The U.S. Justice Department has taken significant action against unauthorized streaming of FIFA World Cup 2026 matches by seizing over 1,000 websites and blocking nearly 2,000 domains linked to piracy. This crackdown aims to protect the rights of broadcasters and uphold copyright laws, especially as the World Cup draws near. The seized sites were used to stream matches without permission, which undermines legitimate services and can lead to financial losses for content creators. This operation illustrates the ongoing battle against online piracy and the measures authorities are willing to take to enforce copyright protections. As major sporting events attract large audiences, illegal streaming becomes a greater concern for stakeholders in the sports and entertainment industries.

Jul 21, 2026

Meta Paid $78,000 Bounty for Vulnerability Exposing Customer Support Data

SecurityWeek

A security researcher uncovered a broken access control vulnerability in Meta's support infrastructure, which could have potentially exposed customer support data. The flaw was serious enough that Meta awarded the researcher a bounty of $78,000 for their findings. This incident raises concerns about the security of user data handled by Meta, particularly as it relates to customer support interactions. While the exact impact on users remains unclear, the discovery serves as a reminder of the importance of robust security measures in protecting sensitive information. Companies like Meta need to continuously monitor and improve their security practices to safeguard user data from similar vulnerabilities.

Jul 21, 2026

Critical Palo Alto VPN bug now exploited by Qilin ransomware gang

BleepingComputer

The Qilin ransomware group is taking advantage of a serious flaw in PAN-OS GlobalProtect, which allows attackers to bypass authentication and access victims' networks. This vulnerability has raised alarms among cybersecurity experts, particularly Arctic Wolf, who reported on the ongoing exploitation. Organizations using Palo Alto Networks' GlobalProtect VPN are at risk, as the attackers can infiltrate systems without proper credentials. This situation emphasizes the urgency for affected companies to address the vulnerability and safeguard their networks to prevent ransomware attacks, which can result in data loss and significant downtime. Users are advised to stay vigilant and apply any available security updates promptly.

Jul 21, 2026