A potential security issue has been discovered by cybersecurity researchers that has the capability to affect more than one billion devices.
According to researchers at the cybersecurity firm Tarlogic,Glori-Anne Gilbert Archives a hidden command has been foundcoded into a bluetooth chip installed in devices around the world. This secret functionality can be weaponized by bad actors and, according to the researchers, used as an exploit into these devices.
Using these commands, hackers could impersonate a trusted device and then connect to smartphones, computers, and other devices in order to access information stored on them. Bad actors can continue to utilize their connection to the device to essentially spy on users.
The bluetooth chip is called ESP32 and is manufactured by the China-based company Espressif. According to researchers, the ESP32 is "a microcontroller that enables WiFi and Bluetooth connection." In 2023, Espressif reported that one billion units of its ESP32 chip had been sold globally. Millions of IoT devices like smart appliances utilize this particular ESP32 chip.
Tarlogic researchers say that this hidden command could be exploited, which would allow "hostile actors to conduct impersonation attacks and permanently infect sensitive devices such as mobile phones, computers, smart locks or medical equipment by bypassing code audit controls." Tarlogic says that these commands are not publicly documented by Espressif.
Researchers with Tarlogic developed a new Bluetooth driver tool in order to aid in Bluetooth-related security research, which enabled the security firm to discover a total of 29 hidden functionalities that could be exploited to impersonate known devices and access confidential information stored on a device.
According to Tarlogic, Espressif sells these bluetooth chips for roughly $2, which explains why so many devices utilize the component over higher costing options.
As BleepingComputerreports, the issue is being tracked as CVE-2025-27840.
Topics Bluetooth Cybersecurity
Google: Oops, we may have sent your private Google Photos videos to strangersParent lovingly embarrasses their teen with a custom Snapchat filterMWC 2020 might be in trouble as another company bails due to coronavirus outbreakBarnes and Noble suspends 'diverse editions' collection amid backlashCadillac crams 38 inches of screen in the new EscaladeKid slips the most adorable note into her dad's suitcase before a tripPepsi finally unites America with its terrible Kendall Jenner adEqual pay chatbot wants to help women 'make a sh*t ton of money'Google Maps gets a new icon, transit features, and more for 15th birthdayWatch this legendary short movie from 1895 colorized and in 4KGoing electric has more perks than you might think (beyond saving the planet and gas money)Apple News' 2020 election hub shows promise despite a few misstepsAmazon makes it way easier to pay with cashNevada will no longer use app from Iowa caucus meltdown (UPDATE)Uber gets California permit to restart selfOne of John Krasinski’s ‘perfect’ cold opens in ‘The Office’ was accidentalBitmoji is working on more diversity options, including a wheelchairLittle girl shuts down a salesperson who asks her to choose a different dollKid slips the most adorable note into her dad's suitcase before a tripGoing electric has more perks than you might think (beyond saving the planet and gas money) This 'Super Mario' Exploring abandoned mansions on YouTube will fulfill the explorer in you What you should know about Billy McFarland's pre 'Unbreakable Kimmy Schmidt' co Instagram went down Google snuck in a few not How to celebrate Facebook celebrating 'Data Privacy Day' What the hell is going on in 'Serenity,' an explainer 'Anthem' gets off to a rocky start as EA's 'VIP' weekend falls apart Milo Yiannopoulos made a gospel song for views Starbucks barista shares video of a very good dog hilariously devouring a Puppuccino The blowjob guy from Fyre Fest doc is totally cool with your blowjob memes Pete Davidson grows up in 'Big Time Adolescence: Review Here's why you shouldn't experiment with your plastic £5 notes ProPublica claims Facebook is restricting access to political ads data Here's why Apple couldn't build the 2013 Mac Pro in the U.S. Finding humor in an absurd election 'Wounds' puts Armie Hammer through the wringer: Review Apple was warned of FaceTime bug over a week ago Disastrous FaceTime bug lets you spy on person you're calling
2.1456s , 8202.7265625 kb
Copyright © 2025 Powered by 【Glori-Anne Gilbert Archives】,Information Information Network