Cyber Security News

Fiber Optic Cables Turned Into Hidden Microphones to Spy on Private Conversations

Internet users worldwide rely on fiber optic cables for blazing-fast and secure web connections. However, a groundbreaking discovery reveals that these very cables can be turned into covert listening devices.

In a newly published 2026 cybersecurity research paper, experts demonstrated how standard telecom optical fibers can secretly capture airborne sounds, allowing attackers to eavesdrop on private conversations from afar.

How the Attack Works

Unlike traditional copper wires that emit detectable radio-frequency signals, fiber optic cables use light to transmit data and were long considered immune to remote eavesdropping.

Researchers from The Hong Kong Polytechnic University and other institutions found a critical acoustic vulnerability.

Sound waves traveling through the air hit the fiber optic cables and cause microscopic physical deformations. These tiny structural changes slightly alter the phase of the laser light traveling back and forth inside the cable.

By hooking up a commercially available Distributed Acoustic Sensing (DAS) system to the remote end of a Fiber-to-the-Home connection, an attacker can monitor these minute light shifts and decode them back into audio.

Because standard cables alone struggle to pick up normal human speech, the attackers can create a stealthy sensory receptor.

By coiling 15 meters of the fiber around a small plastic cylinder and hiding it inside a standard wall-mounted internet box, the cable’s sensitivity to sound is massively amplified.

The results of this side-channel attack present a severe privacy risk for modern buildings. In real-world office setups, the research team successfully captured spoken conversations up to two meters away from the hidden fiber box.

the sound signal is reconstructed (Source: SSD Symposium Paper)

By processing the audio through modern AI speech recognition tools, the attackers retained over 80% of the spoken information.

Beyond human speech, the technique can detect fine-grained domestic activities, such as footsteps, keyboard typing, and washing machines.

It can even be used to track the exact indoor location of the person speaking. The attack remains effective even if the eavesdropper is connected to the optical distribution network up to 50 meters away from the victim’s room.

One of the most dangerous aspects of this fiber-optic spying technique is its high level of stealth.

Hidden electronics or regular wireless bugs can usually be detected by standard security sweeps, and privacy-conscious organizations often use ultrasonic jammers to disable unwanted microphones.

Because the optical fiber relies entirely on light and physical vibration rather than electricity, it is completely invisible to traditional radio-frequency detectors.

Furthermore, the system proved to be entirely immune to commercial ultrasonic microphone jammers during testing. Even with loud ambient noise in an adjacent corridor, the external interference barely impacted the quality of the stolen audio.

While this threat requires an attacker to access the network infrastructure physically, the widespread use of residential and commercial fiber installations makes it a realistic concern for high-security environments.

To mitigate the risk, security experts recommend changing how cables are installed indoors. Homeowners and IT teams should minimize excess loops of optical fiber inside rooms, as more cable surface area captures more sound.

Utilizing sound-proofing materials and installing optical isolators, which force light to travel in only one direction, can also prevent the audio-laced scattered light from bouncing back to an attacker.

Follow us on Google News, LinkedIn, and X to Get Instant Updates and Set GBH as a Preferred Source in Google.

Divya

Divya is a Senior Journalist at GBhackers covering Cyber Attacks, Threats, Breaches, Vulnerabilities and other happenings in the cyber world.

Recent Posts

Hackers Use ConnectWise SkyKick Credentials to Access Microsoft 365, Halting Cloud Backups

Attackers abused compromised ConnectWise Cloud Backup credentials to access Microsoft 365 customer environments, prompting ConnectWise…

1 day ago

Anthropic’s Claude AI Uncovers Origins of NSA-Provided Cryptographic Keys After 25 Years

Anthropic says an internal Claude research model reconstructed how the National Security Agency generated seeds…

1 day ago

Critical WordPress Flaws Allow Attackers to Execute Remote Code Without Authentication

Two WordPress Core vulnerabilities can be chained to execute remote code without authentication, according to…

1 day ago

OpenBSD Kernel Flaw Dating Back 37 Years Enables Local Privilege Escalation to Root

A newly disclosed OpenBSD kernel exploitation chain combines a shared memory accounting flaw with a…

1 day ago

GhostAction Hackers Hide Credential-Stealing Malware in Fake Font Files Across 94 GitHub Repositories

GhostAction attackers have expanded their GitHub credential theft campaign with a second stage that disguises…

1 day ago

SideCopy Hackers Target Indian Organizations With ReverseRAT Malware to Steal Data

Indian authorities have warned that SideCopy hackers are targeting Indian organizations, including academic institutions, with…

1 day ago