TSN OT Protocol Vulnerable, But Could be Encrypted
NEOSEC enrichment — no mirror of the original source
Research presented at Black Hat USA 2026 highlighted the need to secure communications protocols used for operational technology (OT) that rely on the Time-Sensitive Networking (TSN) protocol. TSN is a newer protocol family that supports "d
Source: SANS NewsBites. For licensing reasons NEOSEC Intel does not mirror the full text verbatim. The full text and expert commentary are available at the original source.
Editorial context in the original issue
The SANS NewsBites issue carries commentary by: Neely, Sachs.
More on Encrypted
Other advisories
- Not ratedosv:CLEANSTART-2023-KQ18335vulnerability was found in Privoxy which was fixed in process_encrypted_request_headers() by freeing header memory when failing to get the request destination
- Not ratedosv:CLEANSTART-2024-XB78130When viewing an email message A, which contains an attached message B, where B is encrypted or digitally signed or both, Thunderbird may show an incorrect encryption or signature status
- Not ratedosv:CLEANSTART-2025-NP47712If LibreOffice has an encrypted document open and crashes, that document is auto-saved encrypted
- Not ratedosv:CLEANSTART-2026-MY48509cached side channel attack during handshakes using RSA encryption could allow for the decryption of encrypted content
- Not ratedosv:CLEANSTART-2026-RQ80380Handshakes which used Encrypted Client Hello could be de-anonymized by a passive network observer due to a disclosure of pre-shared key identities in the unencrypted client hello
- Not ratedosv:CLEANSTART-2026-NQ21805Missing cryptographic key commitment in the AWS SDK for PHP may allow a user with write access to the S3 bucket to introduce a new EDK that decrypts to different plaintext when the encrypted data k...
- Not ratedosv:CLEANSTART-2026-GW34771When a server is configured to support unencrypted HTTP/2, it reads a few bytes from each new connection to see if they contain the HTTP/2 client preface
- HighCVE-2026-65629Weak PBKDF2 parameters for password-encrypted private-key export in jose
Other news entries
- TLS Flaws Found in GoAhead Web Server Used in Hundreds of Millions of DevicesNewsSecurityWeek
- Bithumb internal groupware hacked, ID numbers and ID copies of 844 customers leakedBreachpwn.watch
- Railway Says Intruder May Have Accessed Customer Secrets, Urges Credential RotationNewsThe Hacker News
- Railway discloses unauthorized access to customer environment variablesBreachpwn.watch
- Inside AvisLoader: A Windows Malware Loader Built to Resist DisruptionNewsBleepingComputer
- Ransomware recovery CEO charged over secret ransom paymentsNewsBleepingComputer
- Encrypted instructions trick Copilot CLI into spilling developer secretsNewsCSO Online
- OpenSSL Fixes High-Severity DTLS Flaw That Can Leak Heap Memory UnencryptedNewsThe Hacker News
ID