Smart Device Eavesdropping: The Santa Clause

Fact,  fiction, or prediction. You decide.
Marketer sparks panic with claims it uses smart devices to eavesdrop on people...

Makers of microphone-equipped electronics sometimes admit to selling voice data to third parties (advertisers). But that's usually voice data accumulated after a user has prompted their device to start listening to them...

But a marketing company called CMG Local Solutions sparked panic recently by alluding that it has access to people's private conversations by tapping into data gathered by the microphones on their phones, TVs, and other personal electronics, as first reported by 404 Media on Thursday. The marketing firm had said it uses these personal conversations for ad targeting.

CMG's Active Listening website starts with a banner promoting an accurate but worrisome statement, "It's true. Your devices are listening to you." more

Security Alert: Unsolicited Smartwatches Received by Mail

Service members across the military have reported receiving smartwatches unsolicited in the mail. These smartwatches, when used, have auto-connected to Wi-Fi and began connecting to cell phones unprompted, gaining access to a myriad of user data.

These smartwatches may also contain malware that would grant the sender access to saved data to include banking information, contacts, and account information such as usernames and passwords...

What to do if you receive one of these devices:

• DO NOT turn the device on.
• Report it to your local counterintelligence, security manager, or through our Submit a Tip - Report a Crime reporting portal. more

Some Thoughts on Mobile Spyware

It really is a great time to be a mobile threat. As mobile devices become ever more critical in our daily lives, hackers are seizing on a vulnerable blindspot in the enterprise attack surface...

Mobile threats often emanate from app stores, where many types of mobile malware hide as legitimate apps...

As Sun Tzu once said, “There is no place where espionage is not possible.” Spyware exemplifies that statement perfectly. Spyware turns a personal mobile device into a corporate espionage bug just by entering an office, nestled in someone’s pocket...

To secure this largely-unrecognized vector, enterprises can look to mobile threat defense. When incorporated as part of a zero trust approach, MTD technology can examine the security of individual mobile devices, alerting the enterprise to threats and blocking access. It can ensure the device hasn’t been infected, jailbroken or compromised and act to protect corporate data if a threat arises. more

IoT News: Data from Over 116.5 million Smart Devices Go Here

From rooftop to basement and the bedrooms in between, much of the technology making consumer products smart comes from a little-known Chinese firm, Tuya Inc. of Hangzhou. More than 5,000 brands have incorporated Tuya’s technology in their products... Smart home thermostats. Smart home security cameras. Smart refrigerators. Smart TVs. Smart pet feeders. Smart breast pumps...

Tuya says as of 2020, its services cover more than 1,100 categories, such as healthcare, agriculture and apartment management, and are sold in more than 220 countries and regions globally in over 116.5 million smart devices... including Dutch multinational Philips, and TCL, the Chinese electronics company that makes Roku TV, according to the company. Global retailers Amazon, Target and Walmart sell consumer products that use Tuya’s technology.

Some cybersecurity experts worry about the lack of protection for the consumer data collected by Tuya tech in household items and in products used in health care and hospitality. more

Legislation Proposed in NY to Protect Owners from Eavesdropping Devices

New York Governor Andrew Cuomo is proposing ground-breaking legislation that would require companies that make “smart” devices like smart phones and televisions that can record, retain and transmit recordings to clearly display those capabilities to consumers.

The Democrat says the legislation is intended to make sure people know their smartphones, smart speakers and smart TVs that are connected to the internet can record what their owners are doing so they can manage their settings accordingly. 

The Governor says everyone has heard stories about smart devices connected to the internet recording people without their knowledge. Cuomo says people should be better informed about those capabilities and not have to search for that information hidden in fine print.

The Governor’s announcement did not go into detail on how that information would be displayed and what penalties could be levied against companies that failed to clearly disclose recording capabilities. more