Amazon Echo

Lasers Can Take Over Voice Assistant Systems From Long Distances, Research Finds

By pointing a laser or even a flashlight into the microphone of a Google Home, Siri or Alexa system, the researchers were able to control the devices and the systems connected to them.

Security researchers in Japan and the University of Michigan discovered a startling flaw in voice-controlled assistant systems that revealed how easily devices like Siri, Alexa and Google Home could be manipulated.

In a paper published on Monday, cybersecurity experts shared details of how they were able to use easily available laser pointers, and in some cases flashlights, to take over Amazon, Google and Apple digital assistants from hundreds of feet away.

Some examples include opening a garage door by pointing a laser at a voice assistant connected to the system, and even climbing to the top of a bell tower at the University of Michigan to manipulate a Google Home in an office building 230 feet away, The New York Times reported.

The longest distance that the researchers were able to control a voice assistant was more than 350 feet away, showcasing a glaring vulnerability in the systems.

“This opens up an entirely new class of vulnerabilities,” Kevin Fu, a computer science professor at the University of Michigan, told the Times. “It’s difficult to know how many products are affected, because this is so basic.”

All companies affected by the issue, including Tesla, Ford, Amazon, Apple and Google, were alerted to the light vulnerability prior to the release of the paper. Each corporation said they were studying the issues detailed in the research.

Perhaps the most concerning aspect of the report is that by taking over the digital assistant systems, hackers would have the ability to access and control any systems connected to a Google Home or similar product. The researchers pointed out that they could have unlocked cars or started vehicles remotely if they were connected to the devices.

To fix the issue, most microphones on the systems would need to be redesigned because covering the mic with a piece of tape does not address the problem. Dirt shields on several microphones were not able to block the lasers and the commands, according to Fu.

There is no indication that lasers or flashlights have been used to carry out cyberattacks or takeovers of the devices, according to the researchers. As tech companies assess the problem, experts advise users of voice-controlled assistants to move their devices away from areas where it can be seen from the outside and limit the number of systems connected to them.

“This is the tip of the iceberg,” Fu said. “There is this wide gap between what computers are supposed to do and what they actually do. With the internet of things, they can do unadvertised behaviors, and this is just one example.”

About the Author

Haley Samsel is an Associate Content Editor for the Infrastructure Solutions Group at 1105 Media.

Featured

  • Report Reveals Security Training Reduces Global Phishing Click Rates by 86%

    KnowBe4, the cybersecurity platform that comprehensively addresses human risk management, today launched its “Phishing by Industry Benchmarking Report 2025” which measures an organization’s Phish-prone Percentage (PPP) — the percentage of employees likely to fall for social engineering or phishing attacks, indicating the organization’s overall susceptibility to phishing threats. This year’s report found a global average baseline PPP of 33.1%, meaning a third of employees interact with phishing simulations before taking part in best-practice security awareness training (SAT).COVER 2025-PIB-NA-Report_EN-US Read Now

  • TSA Begins REAL ID Full Enforcement Today

    Today, the Transportation Security Administration (TSA) announced the imminent implementation of its REAL ID enforcement measures at TSA checkpoints nationwide. Read Now

  • Body-Worn Cameras on the Rise

    On the evening of Oct. 29, 2024, the owner of 300 Guard based in Houston, was shot while on duty at a convenience store. He returned fire. He was wearing a plated vest and thankfully recovered in the hospital. Read Now

  • Brazil Port Enhances Surveillance and Supports Wildlife Conservation with Sustainable Technology

    Ferroport, which operates the iron ore terminal at the Port of Açu in São João da Barra, Rio de Janeiro, Brazil, has deployed state-of-the-art video surveillance cameras from Axis Communications to enhance nighttime security and visibility, while decreasing environmental impact and prioritizing sustainability. With cutting-edge technology, the port now has precise surveillance cameras that capture high-quality nighttime images, while reducing the amount of artificial lighting that negatively impacts the surrounding ecosystem. Read Now

  • Fast-Forward from 1,000 B.C.E. to Today

    The lock and key have been around since time immemorial. In fact, the locksmith profession is one of the oldest in the world when you consider the earliest wooden tumbler lock debuted three-plus millennia ago. Read Now

New Products

  • PE80 Series

    PE80 Series by SARGENT / ED4000/PED5000 Series by Corbin Russwin

    ASSA ABLOY, a global leader in access solutions, has announced the launch of two next generation exit devices from long-standing leaders in the premium exit device market: the PE80 Series by SARGENT and the PED4000/PED5000 Series by Corbin Russwin. These new exit devices boast industry-first features that are specifically designed to provide enhanced safety, security and convenience, setting new standards for exit solutions. The SARGENT PE80 and Corbin Russwin PED4000/PED5000 Series exit devices are engineered to meet the ever-evolving needs of modern buildings. Featuring the high strength, security and durability that ASSA ABLOY is known for, the new exit devices deliver several innovative, industry-first features in addition to elegant design finishes for every opening.

  • 4K Video Decoder

    3xLOGIC’s VH-DECODER-4K is perfect for use in organizations of all sizes in diverse vertical sectors such as retail, leisure and hospitality, education and commercial premises.

  • ResponderLink

    ResponderLink

    Shooter Detection Systems (SDS), an Alarm.com company and a global leader in gunshot detection solutions, has introduced ResponderLink, a groundbreaking new 911 notification service for gunshot events. ResponderLink completes the circle from detection to 911 notification to first responder awareness, giving law enforcement enhanced situational intelligence they urgently need to save lives. Integrating SDS’s proven gunshot detection system with Noonlight’s SendPolice platform, ResponderLink is the first solution to automatically deliver real-time gunshot detection data to 911 call centers and first responders. When shots are detected, the 911 dispatching center, also known as the Public Safety Answering Point or PSAP, is contacted based on the gunfire location, enabling faster initiation of life-saving emergency protocols.