A potential security issue has been discovered by cybersecurity researchers that has the capability to affect more than one billion devices.
According to researchers at the cybersecurity firm Tarlogic,Mr & Mrs Jones (2010) a hidden command has been foundcoded into a bluetooth chip installed in devices around the world. This secret functionality can be weaponized by bad actors and, according to the researchers, used as an exploit into these devices.
Using these commands, hackers could impersonate a trusted device and then connect to smartphones, computers, and other devices in order to access information stored on them. Bad actors can continue to utilize their connection to the device to essentially spy on users.
The bluetooth chip is called ESP32 and is manufactured by the China-based company Espressif. According to researchers, the ESP32 is "a microcontroller that enables WiFi and Bluetooth connection." In 2023, Espressif reported that one billion units of its ESP32 chip had been sold globally. Millions of IoT devices like smart appliances utilize this particular ESP32 chip.
Tarlogic researchers say that this hidden command could be exploited, which would allow "hostile actors to conduct impersonation attacks and permanently infect sensitive devices such as mobile phones, computers, smart locks or medical equipment by bypassing code audit controls." Tarlogic says that these commands are not publicly documented by Espressif.
Researchers with Tarlogic developed a new Bluetooth driver tool in order to aid in Bluetooth-related security research, which enabled the security firm to discover a total of 29 hidden functionalities that could be exploited to impersonate known devices and access confidential information stored on a device.
According to Tarlogic, Espressif sells these bluetooth chips for roughly $2, which explains why so many devices utilize the component over higher costing options.
As BleepingComputerreports, the issue is being tracked as CVE-2025-27840.
Topics Bluetooth Cybersecurity
Best soundbar deal: Get $50 off the Amazon Fire TV Soundbar Plus
Hillary Clinton's acceptance speech
Mandy Moore says deciding to sing for Hillary Clinton was 'a no
Scientists in Singapore grow functioning 'mini' midbrain tissue
‘Jurassic World’: What was the headbutting dinosaur who saved the day?
The best 'Game of Thrones' gifts for her
New hack bypasses iPhone's lock screen on iOS 12
Elon Musk's current reading is kind of exactly what you'd expect
Comparing Team Communication Apps: What Do You Get for Free?
When Hillary Clinton embraces her inner nerd, she wins
Best grocery deal: Spend $20 and get $5 off at Amazon
Scientists in Singapore grow functioning 'mini' midbrain tissue
New hack bypasses iPhone's lock screen on iOS 12
Snobbery about romcoms goes all the way back to the 1930s
Robin Triumphant
Apple Wallet will support college student ID cards on iPhones
Hillary Clinton's presidential campaign hacked
Are the 'Harry Potter' films better than the books? A passionate and magical debate
NYT Strands hints, answers for May 18
Newfound object on the edge of the solar system could lead to Planet X
Drones replaced models on the Dolce & Gabbana runway'A Wrinkle in Time' will be free for underprivileged children at select theatersHow the Olympics can embrace non'Beast from the East' to plunge Europe into historic deep freezeWhat's coming to (and going from) Hulu in MarchWoman's mirror selfie creates a mind'The Simpsons' predicted two wild Winter Olympics moments years agoBMW's new smartphone car key means you better not lose your phoneMicrosoft set for Supreme Court battle over foreignMicrosoft set for Supreme Court battle over foreignDetective Pikachu's old man voice is a crime against nature'Love, Simon' is the gay romHands on with Sony's Xperia XZ2 and XZ2 Compact Android phonesArctic warm event stuns scientists, as record warmth reaches North PoleOne Apple repair center has called 911 1,600 times in four months'Love, Simon' is the gay romArctic warm event stuns scientists, as record warmth reaches North PoleSikurPhone is a smartphone for Bitcoin millionaires'Love, Simon' is the gay rom'Beast from the East' brings snow and frigid conditions to Europe SpaceX was paid millions by the U.S. government for its Starlink 'donation' to Ukraine The powerful planet Elon Musk joins Twitter Board of directors 'Wordle' #293 today: Here's the answer and hints for April 8 I tried the Amazon Plants Store and got covered in wet dirt Serena Williams opens up about 'postpartum emotions' in candid Instagram post The 30 best cat breeds, ranked This Instagram poet is making young people feel less alone 'Sailor Moon' pioneered LGBTQ representation for anime kids West Virginia will use blockchain smartphone voting in 2018 midterms Donald Trump Jr. shared a fake Photoshop of his dad's approval ratings Pornhub is currently Cornhub, bringing you nasty, hot corn videos Apple confirms virtual WWDC 2022 for June Why the pedestrian dignity movement should be your next accessibility cause Little girl on her first day of kindergarten is all of us realizing summer's pretty much over Jokey Tinder profiles are ruining the internet (and online dating, for that matter) How an Instagram post about 'saggy boobs' led to a global movement to empower women The only good thing left on Facebook is private meme groups You can now react with emoji in Google Docs Trump's '5 for 5!' tweet had Twitter users hilariously decoding its meaning
2.8275s , 10110.5546875 kb
Copyright © 2025 Powered by 【Mr & Mrs Jones (2010)】,New Knowledge Information Network