A potential security issue has been discovered by cybersecurity researchers that has the capability to affect more than one billion devices.
According to researchers at the cybersecurity firm Tarlogic,sex position videos a hidden command has been foundcoded into a bluetooth chip installed in devices around the world. This secret functionality can be weaponized by bad actors and, according to the researchers, used as an exploit into these devices.
Using these commands, hackers could impersonate a trusted device and then connect to smartphones, computers, and other devices in order to access information stored on them. Bad actors can continue to utilize their connection to the device to essentially spy on users.
The bluetooth chip is called ESP32 and is manufactured by the China-based company Espressif. According to researchers, the ESP32 is "a microcontroller that enables WiFi and Bluetooth connection." In 2023, Espressif reported that one billion units of its ESP32 chip had been sold globally. Millions of IoT devices like smart appliances utilize this particular ESP32 chip.
Tarlogic researchers say that this hidden command could be exploited, which would allow "hostile actors to conduct impersonation attacks and permanently infect sensitive devices such as mobile phones, computers, smart locks or medical equipment by bypassing code audit controls." Tarlogic says that these commands are not publicly documented by Espressif.
Researchers with Tarlogic developed a new Bluetooth driver tool in order to aid in Bluetooth-related security research, which enabled the security firm to discover a total of 29 hidden functionalities that could be exploited to impersonate known devices and access confidential information stored on a device.
According to Tarlogic, Espressif sells these bluetooth chips for roughly $2, which explains why so many devices utilize the component over higher costing options.
As BleepingComputerreports, the issue is being tracked as CVE-2025-27840.
Topics Bluetooth Cybersecurity
(Editor: {typename type="name"/})
Best monitor deal: Get $350 off the Samsung Odyssey OLED G6 gaming monitor at B&H Photo
Best Black Friday speaker deal: Save $30 on the JBL Clip 5
Brazil vs. Uruguay 2024 livestream: Watch World Cup Qualifiers for free
News influencers are predominantly men and more likely conservative, study finds
Best robot vacuum deal: Eufy Omni C20 robot vacuum and mop $300 off at Amazon
Best Amazon deals of the day: Samsung Galaxy Tab A9+, Roku Ultra, LG StanbyMe, JBL Flip 6
Black Friday deal: Save $900 on AWOL Vision 4K projector
Best smartwatch deal: Save 44% on CMF Watch Pro for $38.90 at Amazon
'Heartbreak High' Season 3 set visit: School's out forever
A worthless juicer and a Gipper-branded server
Black Friday vs. Cyber Monday 2024: Which day has better deals?
接受PR>=1、BR>=1,流量相当,内容相关类链接。