A potential security issue has been discovered by cybersecurity researchers that has the capability to affect more than one billion devices.
According to researchers at the cybersecurity firm Tarlogic,New Folder (2014) a hidden command has been foundcoded into a bluetooth chip installed in devices around the world. This secret functionality can be weaponized by bad actors and, according to the researchers, used as an exploit into these devices.
Using these commands, hackers could impersonate a trusted device and then connect to smartphones, computers, and other devices in order to access information stored on them. Bad actors can continue to utilize their connection to the device to essentially spy on users.
The bluetooth chip is called ESP32 and is manufactured by the China-based company Espressif. According to researchers, the ESP32 is "a microcontroller that enables WiFi and Bluetooth connection." In 2023, Espressif reported that one billion units of its ESP32 chip had been sold globally. Millions of IoT devices like smart appliances utilize this particular ESP32 chip.
Tarlogic researchers say that this hidden command could be exploited, which would allow "hostile actors to conduct impersonation attacks and permanently infect sensitive devices such as mobile phones, computers, smart locks or medical equipment by bypassing code audit controls." Tarlogic says that these commands are not publicly documented by Espressif.
Researchers with Tarlogic developed a new Bluetooth driver tool in order to aid in Bluetooth-related security research, which enabled the security firm to discover a total of 29 hidden functionalities that could be exploited to impersonate known devices and access confidential information stored on a device.
According to Tarlogic, Espressif sells these bluetooth chips for roughly $2, which explains why so many devices utilize the component over higher costing options.
As BleepingComputerreports, the issue is being tracked as CVE-2025-27840.
Topics Bluetooth Cybersecurity
The Baffler’s May Day Round Up
Excavating the Internet
Bolsonaro’s Long Shadow
From the Deep Forests and Seas of Yambaru
Best Kindle Unlimited deal: Get 3 months of Kindle Unlimited for 99 cents
Deeper in Debt
Let the Sunshine In
Bolsonaro’s Long Shadow
How an Australian VR gaming studio scored a gig with Boeing to train astronauts
On the Other Side of Despair
Here are the glorious proposed logos for Donald Trump's Space Force
Everyone’s a Critic
Hard to Be a God
Best controller deal: Save up to 27% on a PlayStation DualSense wireless controller
Best JBL deal: Save $10 on the Go 4 at Amazon
Let the Sunshine In
The Sick Proletariat
Best travel deal: Save 19% on the Anker Laptop Power Bank
Amazon requires sellers to use more efficient packaging, or pay up
Hollow City
X's 'Promoted Accounts' ad feature is no moreWhat We’re Loving: Reckless Love, Love via Telegraph by The Paris ReviewRibbons, Lambs, and Strawberry JamInterview: Marin Ireland reveals the diva 'Birth/Rebirth's setInterview: Marin Ireland reveals the diva 'Birth/Rebirth's setBad Connection by Brian ChristianRecapping Dante: Canto 32, or Area Man Discovers Hell Has Literally Frozen Over by Alexander AcimanSchool uses ChatGPT to determine which books are bannedHow to Duet on TikTokAn Interview with Shane JonesErgatta rower review: Worth the high price tag? We tested to find out.Bad Connection by Brian ChristianTesla's cheaper Model S and Model X are here, but at cost of lower rangeThe Saddest Sound in the World by Sadie SteinStevie Nicks posts Instagram love for 'Daisy Jones and the Six'Bloomsday Explained by Jonathan Goldman'Only Murders in the Building' Season 3: Who is Ben talking to in that video?The Morning News Roundup for June 11, 2014The Whys and WhereforesThe Morning News Roundup for June 23, 2014 Test your Disney Channel nostalgia with this original movie bracket We're almost positive this is where Google Duplex called for a meal New Zealand's Prime Minister makes appearance in hologram form Riz Ahmed and Mindy Kaling may just have tweeted their way into 'Ms. Marvel' 10kg dumbbell iPhone case forces you to pump iron as you text people Rashida Jones calls out Pixar's lack of diversity What Yanny vs. Laurel taught us: We yearn to be divided 'Brooklyn Nine Heavily pregnant woman dressing up for 'Deadpool 2' is the definition of maximum effort 8 things I learned when I published my debut novel 16 super weird Disney Channel movies we miss Apple may open campus in North Carolina, home of harsh anti Even Harry and Meghan will clash over British vs. American English Consumer Reports snubs Tesla on Model 3 recommendation Who is Alden Ehrenreich? Meet the new Han Solo 'Kingdom Hearts III' hands 'National Geographic' plastic bag cover dubbed 'one for the ages' Ariana Grande talked to 'Time' magazine about the Manchester Arena attack Elon Musk's ultra Google launches YouTube Music and YouTube Premium
1.6799s , 8204.5703125 kb
Copyright © 2025 Powered by 【New Folder (2014)】,Unobstructed Information Network