Live audio is real-time capture or streaming of sound from a device, usually through its microphone or an attached audio source. In cyber security, it matters because it turns an infected endpoint into a listening device, giving an attacker immediate visibility into conversations, meetings, and background activity without waiting for files to be stolen.
Attackers may enable live audio through malware plugins, remote-access tools, or abusive use of legitimate audio APIs and permissions. Defenders look for unusual microphone access, unexpected outbound streaming, suspicious child processes tied to audio services, and indicators that a remote session is invoking recording features. Blocking unnecessary microphone permissions, monitoring endpoint privacy settings, and alerting on silent or hidden audio capture can reduce the risk of covert surveillance.