Discover the latest updates and defenses against eavesdropping in cybersecurity. Stay informed on prevention methods to secure private conversations.
Search across headline titles and summaries.
Background for this topic.
Eavesdropping is listening to or capturing private communications without authorization. In information security, it usually means intercepting data in transit, such as packet capture on a compromised network, monitoring an insecure wireless connection, or tapping a communication link. It can also involve nearby voice interception or malware that records data at an endpoint. Encryption can protect message contents, but traffic metadata and information exposed at the endpoints may still be accessible.
The main risks are disclosure of credentials, session tokens, personal information, and confidential business data. Defenses include authenticated encryption such as TLS, secure wireless configurations, avoiding plaintext protocols, validating certificates, and controlling physical access to network equipment and devices. Security teams investigating suspected interception should examine affected network paths and endpoints, determine what data may have been captured, and rotate exposed credentials or tokens.
Verdict Says Meta Tracked Consumers' Sensitive Data in Flo Health AppA federal jury found that Meta violated California privacy laws by eavesdropping and recording confidential communications without the consent of millions of consumers who used Flo Health's fertility app embedded with Meta' software development tools and tracking pixels.
Russian Intelligence Tied to SSL Stripping Attacks Designed for EavesdroppingRussian intelligence since 2024 has been using their country's internet service providers to run adversary-in-the-middle attacks designed to infect diplomats inside the country's borders with intelligence-gathering malware, Microsoft warns.