The Swiss security research firm Modzero just published a report documenting a grave flaw in HP laptops: an audio-driver made by Conexant that captures every keystroke (to detect volume up/down and mute-button presses) and saves them to an unencrypted file on the local system, which can then be exfiltrated via a debugging API that allows remote parties to see every keystroke in realtime.
At least 28 models of HP laptop are vulnerable.
According to researchers, the keylogger feature was discovered in the Conexant HD Audio Driver Package version 184.108.40.206 and earlier.
This is an audio driver that is preinstalled on HP laptops. One of the files of this audio driver is MicTray64.exe (C:\windows\system32\mictray64.exe).
This file is registered to start via a Scheduled Task every time the user logs into his computer. According to modzero researchers, the file "monitors all keystrokes made by the user to capture and react to functions such as microphone mute/unmute keys/hotkeys."
Security Advisory: Unintended/Covert Storage Channel for
sensitive data in Conexant HD Audio Driver Package. [Modzero]
Keylogger Found in Audio Driver of HP Laptops
[Catalin Cimpanu/Bleeping Computer]
The increasingly popular social media application TikTok has a concerning relationship with the Chinese state. That link became ever the more concerning today, when reports began circulating of a brand new partnership between the company that owns TikTok, ByteDance, and the government of China.
Nulledcast is a realtime podcast streamed on a Discord channel for the hacking forum Nulled: the hosts break into Ring and Nest cameras in realtime, blare sirens at the owners, then torment them with insults and racist slurs, livestreaming their responses to hundreds of listeners.
A family in DeSoto County, Mississippi, bought a Ring security camera so they could keep an eye on their three young girls in their bedroom. Four days later, they learned that a hacker had broken into the camera and subjected their children to continuous bedroom surveillance, taunting the children through the camera's built-in speaker.
This holiday season, give the delivery man a break. Who needs the extra cost and uncertainty of shipping anyway? Here are 10-holiday gifts that cut out the middleman and go straight to the nicest ones on your Christmas list. Winc Wine Delivery Okay, we might be cheating a little with this first one, but a […]
For some folks, writing notes by hand is just plain easier, but having to re-type them later can be a huge bore, not to mention time-sink. The guys from Rocketbook successfully merged the best parts of analog and digital note-taking with their Everlast notebook awhile back. And now, that tech just got a lot more […]
There are fast-paced card games, and some of them even require enough dexterity for a mini-workout (like Skip-Bo or Snap). But there’s nothing quite like the Mokuru® Card Game, which uses an already addictive fidget toy as the centerpiece for a cutthroat game of tabletop challenges. The game is named for the toy that gets […]