Several national cybersecurity agencies, including those from the Five Eyes intelligence alliance, have issued new guidance for organizations on how to communicate following a cyberattack. The core recommendation advises companies to avoid using vague or overly dramatic language, such as consistently describing every incident as a "sophisticated cyberattack," and instead provide clear, factual information.
This recommendation comes as cybersecurity experts note a trend of companies releasing generic statements after breaches, which can obscure the true nature and impact of an incident. The intelligence agencies emphasize the importance of transparent and precise communication to aid in understanding and mitigating the broader cybersecurity landscape.
In other cybersecurity news, a novel web tracking technique has been identified that exploits the human auditory system's ability to perceive extremely quiet sounds. This method, dubbed "audio fingerprinting," involves a webpage playing inaudible audio at zero volume. Despite being imperceptible to humans, this silent audio can still be detected by hardware, such as Bluetooth headphones, and used to track users across the internet.
The discovery was made when a user observed their Bluetooth headphones unexpectedly connecting to a device, only to find the culprit was a single AliExpress webpage open in their browser, playing no audible sound. This incident highlights a new, stealthy approach to online tracking that leverages the interaction between web content and user hardware.
This "silent tracking" method represents an evolution in online surveillance techniques, moving beyond traditional cookies and digital fingerprints to exploit subtle hardware interactions. The technique's ability to operate without user awareness or audible cues makes it particularly insidious.
