How your voice assistant could do the bidding of a hacker – without you ever hearing a thing