SPECTER Attack Uses USB Power Signals to Leak Data From Air-Gapped PCs

The SPECTER attack demonstrates that physical isolation alone is insufficient to protect highly sensitive systems, as adversaries can exploit USB power-management controls to encode and exfiltrate data through covert electromagnetic or charging-state signals. The attack requires administrator-level privileges, meaning a prior compromise of the target system is a prerequisite, highlighting that layered defenses must extend beyond the network perimeter. Air-gapped environments are often assumed to be inherently secure, leading organizations to under-monitor them for internal threats. This matters because classified, industrial, or critical infrastructure environments that rely on air-gapping as a primary security control are now demonstrably vulnerable to a sophisticated, hardware-level side-channel attack.