All articles tagged with #bluetooth security
Apple fixed a high-severity Bluetooth eavesdropping vulnerability (CVE-2025-20701) in Beats Studio Buds with firmware update 1B211, preventing attackers within range from impersonating previously paired devices to listen via the earbud microphone. The patch is delivered automatically when the buds are near a paired iPhone, iPad, or Mac, and other affected manufacturers (e.g., Jabra, Bose, JBL) have released updates as well.
Security researchers disclosed a flaw called WhisperPair in Google's Fast Pair protocol that could let an attacker within Bluetooth range pair with 17 affected headphones and speakers from 10 brands, enabling microphone access, ambient audio eavesdropping, audio injection, or location tracking. Google says Pixel Buds are patched and has provided fixes to OEMs; some updates require the manufacturer’s app. The researchers demonstrated the vulnerability and noted patches have been rolled out, though workarounds exist and continued vigilance on firmware updates is advised.
Apple has released Magic Keyboard firmware version 2.0.6 to address a Bluetooth-related security vulnerability that could allow an attacker with physical access to the accessory to extract its Bluetooth pairing key and monitor Bluetooth traffic. The update is available for various Magic Keyboard models and is automatically installed when paired with a device running macOS, iOS, iPadOS, or tvOS. This is the first firmware update for some Magic Keyboard models in several years.
Two newly-discovered Bluetooth security flaws, collectively named BLUFFS, allow attackers to hijack the connections of all devices using Bluetooth 4.2 to 5.4, including Apple devices. These flaws exploit vulnerabilities in the Bluetooth architecture, enabling device impersonation and man-in-the-middle attacks. All devices running Bluetooth 4.2 to 5.4 are vulnerable, and there is currently no fix for the vulnerabilities. Users are advised to minimize risk by keeping Bluetooth turned off when not in use and avoiding sending sensitive information via Bluetooth in public places.