TLDR InfoSec · ATTACKS & VULNERABILITIES
MANY BLUETOOTH DEVICES WITH GOOGLE FAST PAIR VULNERABLE TO WHISPERPAIR ATTACK
Summary from the TLDR InfoSec newsletter
Belgian security experts have identified a new flaw in Bluetooth devices using Google's Fast Pair. This vulnerability enables attackers to take control of devices to manage audio, track location, or listen to microphone audio. The issue occurs because devices accept Fast Pair connections even outside pairing mode. An attacker can hijack a device in about 10 seconds from a distance of up to 14 meters.