"A new study published on Monday found that communications from cellphone carriers, retailers, banks, and even militaries are being broadcast unencrypted through geostationary satellites..." reports Gizmodo. "The team obtained unencrypted internet communications from U.S. military sea vessels and even communications regarding narcotics trafficking from Mexican military and law enforcement."
Researchers from the University of California, San Diego (UCSD) and the University of Maryland scanned 39 of these satellites from a rooftop in Southern California over three years. They found that roughly half of the signals they analyzed were transmitting unencrypted data, potentially exposing everything from phone calls and military logistics to a retail chain's inventory. "There is a clear mismatch between how satellite customers expect data to be secured and how it is secured in practice," the researchers wrote in their paper titled "Don't Look Up: There Are Sensitive Internal Links in the Clear on GEO Satellites...." "They assumed that no one was ever going to check and scan all these satellites and see what was out there. That was their method of security," Aaron Schulman, a UCSD professor and co-lead of the study, told Wired....
Even more surprisingly, the researchers didn't need any fancy spy gear to collect this data. Their setup used only off-the-shelf hardware, including a $185 satellite dish, a $140 roof mount with a $195 motor, and a $230 tuner card. Altogether, the system cost roughly $750 and was installed on a university building in La Jolla, San Diego.
With their simple setup, the researchers were able to collect a wide range of communication data, including phone calls, texts, in-flight Wi-Fi data from airline passengers, and signals from electric utilities. They even obtained U.S. and Mexican military and law enforcement communications, as well as ATM transactions and corporate communications... When it came to telecoms, specifically, the team collected phone numbers, calls, and texts from customers of T-Mobile, AT&T Mexico, and Telmex... It only took the team nine hours to collect the phone numbers of over 2,700 T-Mobile users, along with some of their calls and text messages.
T-Mobile told Gizmodo the lack of encryption was "a vendor's technical misconfiguration" affecting "a limited number of cell sites" and was "not network-wide... [W]e implemented nationwide Session Initiation Protocol (SIP) encryption for all customers to further protect signaling traffic as it travels between mobile handsets and the network core, including call set up, numbers dialed and text message content. We appreciate our collaboration with the security research community, whose work helps reinforce our ongoing commitment to protecting customer data and enhances security across the industry."
Indeed, the researchers write that "Each time we discovered sensitive information in our data, we went through considerable effort to determine the responsible party, establish contact, and disclose the vulnerability. In several cases, the responsible party told us that they had deployed a remedy. For the following parties, we re-scanned with their permission and were able to verify a remedy had been deployed: T-Mobile, WalMart, and KPU."
The researchers acknowledge that exposure "was limited to a relatively small number of cell towers in specific remote areas."
In two separate reports, Apple and Samsung are said to report underwhelming sales of their new ultra-thin smartphones. According to The Elec, Apple plans to cut production of the iPhone Air while Samsung has canceled its planned Galaxy S26 Edge smartphone after disappointing sales of the Galaxy S25 Edge, Korea's NewsPim claims. MacRumors reports: Samsung apparently halted work on the Galaxy S26 Edge this week, informing employees internally that the product line would be discontinued. Internal discussions in September shifted priorities toward the more conventional "Plus" form factor after confirming that consumer demand for ultra-slim flagships was weaker than expected. [...]
Samsung will apparently instead add a Galaxy S26 Plus model to its 2026 lineup, reverting to the company's traditional three-tier structure of base, Plus, and Ultra variants. Despite the cancellation, development of the Galaxy S26 Edge was already complete. Development of the S26 Plus is expected to begin before the end of the third quarter of 2025. The atmosphere inside the company is said to be "chaotic" and "embarrassed" following the sudden lineup revision. Samsung reportedly plans to sell through existing inventory of the Galaxy S25 Edge and cease further production once stock is depleted. As for Apple's iPhone Air, here's what MacRumors is reporting: The Japanese investment banking and securities firm claims that the iPhone 17 Pro and iPhone 17 Pro Max are seeing higher sales than their predecessors during the same period last year, while the standard iPhone 17 is a major success, performing significantly better than the iPhone 16.
The iPhone Air is apparently the outlier; Apple plans to reduce production by one million units this year. Meanwhile, Apple plans to increase production of all other models by two million units. The overall production forecast of the iPhone 17 series this year has also been increased from 88 million units to 94 million units for the start of 2026.
Apple's third-generation of AirPods arrived to much acclaim, and having now listened to them, it's just highlighted how good the previous model still is.
OnePlus has confirmed the display specs for the new OnePlus 15 in a social media post for its Chinese audience, confirming a 165Hz refresh rate, increased brightness, and better color accuracy.
Login
TechRadar - All the latest technology news
