As part of our Bluetooth Audio security research, we found a security vulnerability in Apple’s Beats Studio Buds’ pairing mechanism. The devices were found vulnerable to an insecure Bluetooth pairing window in which an attacker could pair with the earbuds without user interaction and establish a valid Bluetooth bonding. This would allow an attacker to eavesdrop on the victim through the earbuds’ microphone, play audio on the device, or track the device via Bluetooth Low Energy.
Continue reading Continue reading