Discover the latest updates and defenses against eavesdropping in cybersecurity. Stay informed on prevention methods to secure private conversations.
Search across headline titles and summaries.
Background for this topic.
Eavesdropping is listening to or capturing private communications without authorization. In information security, it usually means intercepting data in transit, such as packet capture on a compromised network, monitoring an insecure wireless connection, or tapping a communication link. It can also involve nearby voice interception or malware that records data at an endpoint. Encryption can protect message contents, but traffic metadata and information exposed at the endpoints may still be accessible.
The main risks are disclosure of credentials, session tokens, personal information, and confidential business data. Defenses include authenticated encryption such as TLS, secure wireless configurations, avoiding plaintext protocols, validating certificates, and controlling physical access to network equipment and devices. Security teams investigating suspected interception should examine affected network paths and endpoints, determine what data may have been captured, and rotate exposed credentials or tokens.
Weekly headline count for the current query.
A critical vulnerability in Grandstream GXP1600 series VoIP phones allows a remote, unauthenticated attacker to gain root privileges and silently eavesdrop on communications. [...]
Vulnerabilities affecting a Bluetooth chipset present in more than two dozen audio devices from ten vendors can be exploited for eavesdropping or stealing sensitive information. [...]
The North Korean APT37 hacking group uses a new 'FadeStealer' information-stealing malware containing a 'wiretapping' feature, allowing the threat actor to snoop and record from victims' microphones. [...]
A team of researchers has developed an eavesdropping attack for Android devices that can, to various degrees, recognize the caller's gender and identity, and even discern private speech. [...]
Columbia University researchers have developed a novel algorithm that can block rogue audio eavesdropping via microphones in smartphones, voice assistants, and IoTs in general. [...]
A security analyst has devised a way to capture Visual Voice Mail (VVM) credentials on Android devices and then remotely listen to voicemail messages without the victim's knowledge. [...]