Smashing Security #484: AliExpress audio fingerprinting, Berlin government ransom demand, Claude token theft, Five Eyes breach comms advice
Episode 484 of the Smashing Security podcast, hosted by Graham Cluley with guest Danny Palmer, covers several security stories. The lead item is audio fingerprinting: a user named Matt found that an open AliExpress page, playing silent audio at zero volume, kept his multipoint Bluetooth headphones from switching to his phone. The episode also references reports that hackers demanded $2.3M in ransom after breaching a Berlin government network, and that two suspects were arrested in France over the hack of the tax authority. It also cites reporting that hackers are stealing Claude tokens from subscribers. In addition, it discusses CISA and Five Eyes guidance advising organisations to communicate carefully after a cyber attack and to stop calling every breach "sophisticated". The article is a show-notes page with link lists, not original reporting, so details of each incident are limited.
Technical Details
- The WebAudio fingerprinting technique reportedly uses a silent audio stream on an AliExpress webpage. It was noticed because it kept Bluetooth headphones active. The article does not say how the fingerprint is derived or what is collected.
- The Berlin government breach, the French tax authority arrests and the Claude token theft are only named as headlines. The article gives no technical details, IOCs or attribution for them.
Remediation
The article gives no specific remediation steps. It points to CISA's "Communicating Under Pressure: Best Practices for Service Providers" guidance on breach communication.
Linha do tempo
-
Smashing Security #484: AliExpress audio fingerprinting, Berlin government ransom demand, Claude token theft, Five Eyes breach comms advice
ler a análise desta fonte ocultar
Episode 484 of the Smashing Security podcast, hosted by Graham Cluley with guest Danny Palmer, covers several security stories. The lead item is audio fingerprinting: a user named Matt found that an open AliExpress page, playing silent audio at zero volume, kept his multipoint Bluetooth headphones from switching to his phone. The episode also references reports that hackers demanded $2.3M in ransom after breaching a Berlin government network, and that two suspects were arrested in France over the hack of the tax authority. It also cites reporting that hackers are stealing Claude tokens from subscribers. In addition, it discusses CISA and Five Eyes guidance advising organisations to communicate carefully after a cyber attack and to stop calling every breach "sophisticated". The article is a show-notes page with link lists, not original reporting, so details of each incident are limited.
Technical Details
- The WebAudio fingerprinting technique reportedly uses a silent audio stream on an AliExpress webpage. It was noticed because it kept Bluetooth headphones active. The article does not say how the fingerprint is derived or what is collected.
- The Berlin government breach, the French tax authority arrests and the Claude token theft are only named as headlines. The article gives no technical details, IOCs or attribution for them.
Remediation
The article gives no specific remediation steps. It points to CISA's "Communicating Under Pressure: Best Practices for Service Providers" guidance on breach communication.