NCSC ships SilentGlass device
- The UK National Cyber Security Centre said April 22 it has licensed Goldilock Labs to sell SilentGlass, a device for HDMI and DisplayPort links. - NCSC says SilentGlass is already deployed on UK government estates, approved for “the most high-threat environments,” and now available globally through Sony UK. - The launch turns monitors and display cables into a frontline security issue, not just accessories. (ncsc.gov.uk)
A monitor cable is not just a cable in the NCSC’s threat model. Britain’s National Cyber Security Centre has now put a product behind that idea. (ncsc.gov.uk) On April 22, the NCSC said it had licensed Goldilock Labs to manufacture and sell SilentGlass, a plug-and-play device that sits between a computer and a screen on HDMI and DisplayPort connections. (ncsc.gov.uk) The agency said SilentGlass blocks “anything unexpected or malicious” moving across those display links. It also said the device has already been deployed on UK government estates. (ncsc.gov.uk) That reflects a basic hardware problem: modern monitors do more than show pixels. They can store data, process signals and expose extra pathways that a hostile device could try to abuse. (ncsc.gov.uk) The NCSC said monitors are “highly likely” to be used to gain network access for espionage, disruption or financial gain, and said existing mitigations are often costly and inefficient. (ncsc.gov.uk) In plain terms, SilentGlass treats the display connection like a checkpoint, not a harmless wire. The agency said hardware interfaces have rarely been treated as security boundaries despite supply-chain risk, third-party servicing and direct physical access. (ncsc.gov.uk) The commercial structure is unusual for the NCSC. It said SilentGlass is the first commercially available product licensed to use NCSC branding. (ncsc.gov.uk) (theregister.com) Goldilock Labs won the exploitation licence after what the NCSC called a competitive process, and Sony UK Technology Centre is the manufacturing partner. The NCSC said the product is available globally now. (ncsc.gov.uk) NCSC Chief Technology Officer Ollie Whitehouse said the device is approved for use in “the most high-threat environments.” The agency presented it at CYBERUK, the UK government’s annual cybersecurity conference. (ncsc.gov.uk) (infosecurity-magazine.com) The pitch is wider than government. The NCSC said businesses can use the same hardware to protect display links at scale with an “affordable” plug-in device. (ncsc.gov.uk) SilentGlass does not change the usual advice on phishing, patching or identity controls. It adds one more place to defend: the screen sitting on the desk. (ncsc.gov.uk)
