TLDR InfoSec · ATTACKS & VULNERABILITIES

MANY BLUETOOTH DEVICES WITH GOOGLE FAST PAIR VULNERABLE TO WHISPERPAIR ATTACK

arstechnica.com2 min read

Summary from the TLDR InfoSec newsletter

Belgian security experts have identified a new flaw in Bluetooth devices using Google's Fast Pair. This vulnerability enables attackers to take control of devices to manage audio, track location, or listen to microphone audio. The issue occurs because devices accept Fast Pair connections even outside pairing mode. An attacker can hijack a device in about 10 seconds from a distance of up to 14 meters.