A potential security issue has been discovered by cybersecurity researchers that has the capability to affect more than one billion devices.
According to researchers at the cybersecurity firm Tarlogic,I Want To Be The First Guy a hidden command has been foundcoded into a bluetooth chip installed in devices around the world. This secret functionality can be weaponized by bad actors and, according to the researchers, used as an exploit into these devices.
Using these commands, hackers could impersonate a trusted device and then connect to smartphones, computers, and other devices in order to access information stored on them. Bad actors can continue to utilize their connection to the device to essentially spy on users.
The bluetooth chip is called ESP32 and is manufactured by the China-based company Espressif. According to researchers, the ESP32 is "a microcontroller that enables WiFi and Bluetooth connection." In 2023, Espressif reported that one billion units of its ESP32 chip had been sold globally. Millions of IoT devices like smart appliances utilize this particular ESP32 chip.
Tarlogic researchers say that this hidden command could be exploited, which would allow "hostile actors to conduct impersonation attacks and permanently infect sensitive devices such as mobile phones, computers, smart locks or medical equipment by bypassing code audit controls." Tarlogic says that these commands are not publicly documented by Espressif.
Researchers with Tarlogic developed a new Bluetooth driver tool in order to aid in Bluetooth-related security research, which enabled the security firm to discover a total of 29 hidden functionalities that could be exploited to impersonate known devices and access confidential information stored on a device.
According to Tarlogic, Espressif sells these bluetooth chips for roughly $2, which explains why so many devices utilize the component over higher costing options.
As BleepingComputerreports, the issue is being tracked as CVE-2025-27840.
Topics Bluetooth Cybersecurity
(Editor: {typename type="name"/})
NYT Connections Sports Edition hints and answers for May 18: Tips to solve Connections #237
A look into a failed influencer deal to promote a cryptocurrency
Walmart+ provides a one
Find free food with this new Google site
NYT Strands hints, answers for May 2
Pebble smartwatches are coming, but they won't get along with the iPhone
Remember Pebble? The company made cool, versatile, affordable smartwatches a decade ago, before shut
...[Details]
Here's how to change the watch face on your Apple Watch
One of the best things about an Apple Watch is how customizable it is. Any old watch lets you switch
...[Details]
Apple is preparing to completely overhaul its lineup of MacBook Pro devices. This is according to a
...[Details]
Robinhood says its future is tied to Dogecoin. Seriously.
So it has come to this. The fate of Robinhood, a much-despised stock and cryptocurrency trading app,
...[Details]
Musetti vs. Diallo 2025 livestream: Watch Madrid Open for free
TL;DR:Live stream Musetti vs. Diallo in the 2025 Madrid Open for free on RTVE. Access this free stre
...[Details]
Of course Kristen Bell makes being pregnant look like so much fun
Kristen Bell may seem superhuman at times, but it's true, she pretty much is —and she has the
...[Details]
The 7 best astrology, horoscope, and cosmic magic podcasts
For centuries and across many cultures, humans looked up at the stars and planets for guidance. The
...[Details]
'Letterkenny' is the wholesome, filthy, endlessly quotable hangout comedy of your dreams
You'll know in the first three minutes of Letterkenny's first episode whether this show is for you.
...[Details]
Google Pixel Buds Pro 2: $40 off at Amazon
SAVE 17%:As of May 9, you can get the Google Pixel Buds Pro 2 for $189, down from $229, at Amazon. T
...[Details]
Netflix opens super '90s video stores for 'Fear Street' trilogy
For those who truly miss their trips to the video store and can't quite live off people's incredible
...[Details]
接受PR>=1、BR>=1，流量相当，内容相关类链接。
