TLDR InfoSec · ATTACKS & VULNERABILITIES
BLUETOOTH FLAWS COULD LET HACKERS SPY THROUGH YOUR MICROPHONE
Summary from the TLDR InfoSec newsletter
Three vulnerabilities in Airoha Bluetooth chipsets affect 29 audio devices from major brands like Bose, Sony, and JBL, allowing attackers within Bluetooth range to eavesdrop on conversations and hijack phone connections. The flaws enable the extraction of call history and contacts and the ability to initiate calls to arbitrary numbers by exploiting missing authentication in Bluetooth protocols. While technically serious, practical attacks require physical proximity and high technical skills, limiting the threat to high-value targets in sensitive industries.