SilentGlass stops cable attacks

A monitor cable can carry more than video, and the UK’s National Cyber Security Centre says its new SilentGlass device is built to stop that route. (ncsc.gov.uk) The National Cyber Security Centre, part of GCHQ, said on April 22 that SilentGlass blocks unexpected or malicious activity between HDMI or DisplayPort connections and screens. The agency said the device is already deployed on UK government estates and is now on sale more broadly. (ncsc.gov.uk) In plain terms, a display cable is a physical link between a laptop and a monitor, and physical links can double as attack paths if they are not tightly controlled. The National Cyber Security Centre’s device-security guidance already warns that external interfaces such as USB, Bluetooth and Thunderbolt can give attackers another route into a device or its data. (ncsc.gov.uk) SilentGlass is meant to turn that cable into a one-job connection: show the picture, and reject anything else. The agency said the device is “plug-and-play,” approved for “the most high-threat environments,” and designed to protect monitors that handle sensitive or personal data. (ncsc.gov.uk) The National Cyber Security Centre said monitors are “highly likely” to be targeted for espionage, disruption or financial gain because they can hold and process valuable information. It said existing mitigations for that risk are often costly and inefficient, which is why it framed SilentGlass as a practical hardware control rather than another policy document. (ncsc.gov.uk) The launch also marks a commercial shift for the agency. The National Cyber Security Centre said SilentGlass is the first commercially available product licensed to use NCSC branding, with Goldilock Labs chosen after a competitive process to manufacture and sell it globally in partnership with Sony UK. (ncsc.gov.uk) That matters for buyers because the product is no longer a lab prototype or an internal government fix. The agency launched it at CYBERUK, the UK government’s annual cyber conference, and said it is available for anyone to buy and use. (ncsc.gov.uk) Goldilock Labs said the gap SilentGlass addresses has been “widely overlooked,” pointing to supply chains, third-party servicing and direct physical access as reasons to treat hardware ports as security boundaries. That is the same basic idea behind older National Cyber Security Centre guidance on peripherals: every extra interface is another place to control, restrict or shut off. (ncsc.gov.uk; ncsc.gov.uk) The National Cyber Security Centre’s pitch is simple: if a monitor cable has become an attack surface, put a guard on the cable. SilentGlass is now the hardware version of that idea. (ncsc.gov.uk)