They're Reading Your Screen's Radio Whispers Now. I Am Not Surprised.
I want you to sit with this for a moment. Researchers have developed a technique, called TrojPix, that extracts data from air-gapped machines by subtly manipulating on-screen pixels until the video cable itself radiates a faint, decodable radio signal. A nearby receiver picks it up. The flock never notices a thing.
I am not surprised. I am, if anything, vindicated.
For thirty years I have been telling anyone who would listen that a cable is not just a cable. It is an antenna waiting for an excuse. Back in my day, we treated every wire in a secure facility like a potential informant. We had shielding. We had distance requirements. We had a healthy, productive fear of electromagnetic emissions that the current generation of shepherds apparently filed away under "quaint."
Now here we are.
The critical detail, and I will say this slowly for the people in the back, is that TrojPix requires fleas to already be on the machine. The parasites must get in first. Your air gap is not the vulnerability. Your air gap is, in fact, doing its job. The problem, as it has always been, is the oblivious flock clicking on fake grain, or a contractor wandering in with an infected USB drive and absolutely no situational awareness.
The wolves did not breach the fence. Someone left the gate open and handed them a map.
I will note, with the specific exhaustion of a man who has been correct too many times, that TEMPEST shielding protocols have existed since the Cold War. The NSA wrote the standards. They are not a secret. And yet here we sit, breathlessly amazed that cables emit radio signals, as though Faraday himself did not rotate in his grave the moment we started building sensitive facilities with the electromagnetic discipline of a college dormitory.
Modern security culture is soft. Magnetically soft.
Remediation
One. If you operate air-gapped systems, implement TEMPEST-compliant shielding. This is not optional. It is not a budget conversation. It is physics.
Two. Stop the parasites before they reach the machine. Physical access controls, strict removable media policies, and supply chain verification. If someone is plugging anything into your air-gapped system without a documented reason, that is a wolf in a lab coat.
Three. Audit your emission environment. Distance, shielding, and RF monitoring are your friends. The Sky Pasture cannot help you here, and frankly it never could.
Four. Patch. Dip your machines regularly. An unpatched endpoint inside a secure facility is just a ticking embarrassment.
The technology was always going to catch up to our complacency. I simply did not expect it to take this long.
Stay paranoid, the rest of you are not paranoid enough.
Original Report: https://thehackernews.com/2026/07/new-trojpix-attack-leaks-data-from-air.html