CISA warns of a cyberattacker’s ability to derail a train by engaging emergency brakes through software-defined radio (SDR).

CISA warns of a cyberattacker’s ability to derail a train by engaging emergency brakes through software-defined radio (SDR).

A significant cybersecurity vulnerability affecting the United States rail network has recently come to light, revealing that trains can be remotely forced to engage emergency brakes through the use of inexpensive software-defined radio (SDR) equipment. This flaw, which poses serious safety and operational risks, has been known to security researcher Neil Smith since 2012, but only gained widespread attention following a formal advisory issued by the Cybersecurity and Infrastructure Security Agency (CISA) in 2025.