Abstract:The Brain-Computer Interface (BCI) is a rapidly evolving technology set to revolutionize our perception of the Internet of Things (IoT). BCI facilitates direct communication between the brain and external devices, enabling the control or interaction of devices without physical intervention. BCI technology is becoming more sophisticated, allowing third-party software embedded in emerging technologies such as Virtual Reality (VR), Augmented Reality (AR), and Mixed Reality (MR) to access sensors that read brain activity. These can be grouped under the umbrella term Extended Reality (XR). While BCI technology is disrupting the way data is collected, interpreted, and utilized within IoT networks, it is important to consider the potential privacy and security threats that it poses. Previous and not-so-recent cybersecurity research only scratched the surface in terms of security and privacy aspects of the then-emerging neural and brain-connecting technologies. However, recent advances in reconstructing language, music tracks, and imagery solely based on decoding neural signals pose a significant risk of mental privacy invasion and cybersecurity abuse. In this paper, we present an analysis of the potential threats posed by the integration of BCI with VR, AR, and MR. We analyze the involvement of major technological players in shaping BCI and XR advancements, examining the potential for these technologies to create detailed user profiles and reshape the monetization of user data in the ever-more-aggressive data-driven economy. We also outline a position view on the cybersecurity aspects that are not related to privacy and profiling per se, for example, cybersecurity attacks on the brain (e.g., ``brain rewriting'' attacks) facilitated by potentially vulnerable XR-BCI devices and software. The paper concludes by emphasizing the need for further research on the privacy and security implications of XR-BCI integration and inviting deeper exploration of the topic beyond theoretical papers and toward a more applied experimental setup.

Protecting Human Users Against Cognitive Attacks in Immersive Environments

Leveraging Artificial Intelligence to Promote Awareness in Augmented Reality Systems

Inception Attacks: Immersive Hijacking in Virtual Reality Systems

Challenges and New Directions in Augmented Reality, Computer Security, and Neuroscience -- Part 1: Risks to Sensation and Perception

Privacy and Security in Mixed Reality Learning Environments by Input and User/Bot Interaction Protection

An Agent-Based Intelligent HCI Information System in Mixed Reality

Moderating Embodied Cyber Threats Using Generative AI

An AR-assisted Deep Reinforcement Learning-based approach towards mutual-cognitive safe human-robot interaction

Mitigating Technological Anxiety through the Application of Natural Interaction in Mixed Reality Systems

Amplifying robotics capacities with a human touch: An immersive low-latency panoramic remote system

Designing and Evaluating Scalable Privacy Awareness and Control User Interfaces for Mixed Reality

Brain-Computer Interface Integration With Extended Reality (XR): Future, Privacy And Security Outlook

Evaluating visual encoding quality of a mixed reality user interface for human–machine co-assembly in complex operational terrain

Secure and Trustworthy Artificial Intelligence-Extended Reality (AI-XR) for Metaverses

Enabling Data-Driven and Empathetic Interactions: A Context-Aware 3D Virtual Agent in Mixed Reality for Enhanced Financial Customer Experience

Human - Machine Augmented Intelligence: Research and Applications

On Challenges of AI to Cognitive Security and Safety

Artificial Intelligence Security: Threats and Countermeasures

Towards Security and Privacy for Multi-user Augmented Reality: Foundations with End Users

Defense Against Adversarial Ai

Security and Privacy for Artificial Intelligence: Opportunities and Challenges