TLDR InfoSec · ATTACKS & VULNERABILITIES

BLUETOOTH FLAWS COULD LET HACKERS SPY THROUGH YOUR MICROPHONE

bleepingcomputer.com2 min read

Summary from the TLDR InfoSec newsletter

Three vulnerabilities in Airoha Bluetooth chipsets affect 29 audio devices from major brands like Bose, Sony, and JBL, allowing attackers within Bluetooth range to eavesdrop on conversations and hijack phone connections. The flaws enable the extraction of call history and contacts and the ability to initiate calls to arbitrary numbers by exploiting missing authentication in Bluetooth protocols. While technically serious, practical attacks require physical proximity and high technical skills, limiting the threat to high-value targets in sensitive industries.