GAZEPLOIT COULD WORK OUT VISION PRO USER PASSWORDS FROM WATCHING THEIR AVATAR

Summary from the TLDR InfoSec newsletter

Researchers have developed a new exploit, dubbed GAZEploit, that uses a neural network to detect Vision Pro users' passwords based on the eye movements reflected in their avatars' faces when the on-screen keyboard is pulled up. The researchers managed to achieve an 85.9% precision rate and 96.8% recall rate in their test of 30 users. Apple has fixed this vulnerability by disabling avatars while the virtual keyboard is pulled up.