NEW BLUETOOTH FLAWS LETS ATTACKERS TAKE OVER ANDROID, IOS, MACOS, AND LINUX DEVICES

Summary from the TLDR InfoSec newsletter

Researchers have discovered a new flaw, tracked as CVE-2023-45866, that allows for remote code execution on Android, iOS, macOS, and Linux Devices. The attack deceives the target into thinking that it’s connected to a Bluetooth keyboard by taking advantage of an unauthenticated pairing mechanism that’s defined in the Bluetooth specification. No specialized hardware is needed for the attack, which allows attackers in Bluetooth proximity to inject keystrokes into a vulnerable device.