42
30
35
35
60
30
60
60
30
30
30
55
30
55
30
Injected and Leaked: Actively Inducing Side-Channel Leakage Using Electromagnetic Injection and Hardware Nonlinearity
Researchers introduce InjectEave, using electromagnetic injection and hardware nonlinearity to induce side-channel leakage and eavesdrop on headphone audio from 30 meters.
An arXiv paper shows electromagnetic injection can actively amplify side-channel leakage: nonlinear hardware such as amplifiers, ADCs, and power converters modulates secret electrical signals onto an injected EM carrier, upconverting low-frequency secrets into measurable EM emissions. By tuning injection frequency and amplitude, an adversary can shape the effective spectrum and entropy of the resulting leakage. The InjectEave attack demonstrated eavesdropping on wired and wireless headphone audio from up to 30 meters and in through-wall scenarios using accessible RF equipment, plus leakage of smart home device power consumption and analog sensor inputs. Case studies show closed-loop eavesdropping and manipulation of landline phone conversations, and the paper discusses mitigations.
34
57
30
Armored Likho expands its cyber-espionage toolkit
Kaspersky reports the Armored Likho espionage group now delivers its new Still Toolkit via fundraising-themed lures to steal Telegram data and eavesdrop on victims.
Kaspersky researchers describe a new campaign by the Armored Likho espionage actor. The campaign masquerades as fundraising efforts and delivers a newly developed Still Toolkit designed to steal Telegram data and eavesdrop on victims. The update expands the group's toolkit and continues its espionage-focused targeting.
58
60
30
30
42
42
55
45
30
60
30
55
30
60
57
60
55
30
30
Weekly Cybersecurity Newsletter – Top 50 Biggest Cybersecurity Stories of the Week
GBHackers weekly digest rounds up 50 stories including Microsoft's 973-CVE patch drop, exploited Cisco FMC flaws, and Claude agent attacks.
GBHackers' September 7-12, 2026 newsletter summarizes the 50 biggest cybersecurity stories of the week. Highlights include Microsoft patching a record 973 CVEs with two exploited zero-days, active exploitation of Cisco FMC, Check Point VPN and Ivanti flaws, China-linked crews chaining Chrome and Windows zero-days, AI agents mass-exploiting PaperCut to compromise 440 servers, and the emergence of Panzer cross-platform ransomware. It also covers Anthropic and OpenAI agentic AI incidents and CrowdStrike's SafeMind launch.
15
Watch out: Apple timepiece can grab snippets of conversation without both speakers' consent
Apple's Watch Series 12 Live Rewind and Siri Recap transcribe nearby conversations without bystander consent, drawing EFF criticism over all-party-consent laws.
Apple Watch Series 12's Audio Intelligence features on the S11 chip include Live Rewind, which transcribes the last 15 seconds of a conversation after a Digital Crown double-press, processing audio in a Secure Exclave and routing it to a nearby iPhone. Siri Recap generates AI summaries of daily conversations without retaining raw audio or attributing speakers. Apple says an audible chime and visual cue alert bystanders, but privacy advocates including the EFF note that 11 US states require all-party consent for recording and that bystanders have no practical way to opt in or decline.
30
42