A potential security issue has been discovered by cybersecurity researchers that has the capability to affect more than one billion devices.
According to researchers at the cybersecurity firm Tarlogic,Double Cross (1996) a hidden command has been foundcoded into a bluetooth chip installed in devices around the world. This secret functionality can be weaponized by bad actors and, according to the researchers, used as an exploit into these devices.
Using these commands, hackers could impersonate a trusted device and then connect to smartphones, computers, and other devices in order to access information stored on them. Bad actors can continue to utilize their connection to the device to essentially spy on users.
The bluetooth chip is called ESP32 and is manufactured by the China-based company Espressif. According to researchers, the ESP32 is "a microcontroller that enables WiFi and Bluetooth connection." In 2023, Espressif reported that one billion units of its ESP32 chip had been sold globally. Millions of IoT devices like smart appliances utilize this particular ESP32 chip.
Tarlogic researchers say that this hidden command could be exploited, which would allow "hostile actors to conduct impersonation attacks and permanently infect sensitive devices such as mobile phones, computers, smart locks or medical equipment by bypassing code audit controls." Tarlogic says that these commands are not publicly documented by Espressif.
Researchers with Tarlogic developed a new Bluetooth driver tool in order to aid in Bluetooth-related security research, which enabled the security firm to discover a total of 29 hidden functionalities that could be exploited to impersonate known devices and access confidential information stored on a device.
According to Tarlogic, Espressif sells these bluetooth chips for roughly $2, which explains why so many devices utilize the component over higher costing options.
As BleepingComputerreports, the issue is being tracked as CVE-2025-27840.
Topics Bluetooth Cybersecurity
NYT Strands hints, answers for April 15Jackery portable power station deal: $90 off at AmazonNintendo Switch 2 preorder stock April 25: See the retailers accepting ordersHow to watch 'The Brutalist': the best Max streaming dealsBuilding a Budget PC: Should You Buy a Used Graphics Card?Best controller deal: Get $50 off the Razer Kishi Ultra at Amazon5 Great Chrome Extensions You Should InstallAmazon Prime Shipping: A Cost AnalysisBest places to buy refurbished electronics in 20252019's word of the year is 'climate strike'Best robot vacuum deal: Save $120 on the iRobot Roomba Q0120'The Elder Scrolls IV: Oblivion' remake screenshots leak ahead of possible releaseIt's snowing in Texas and Twitter is rightfully freaked outBest portable power station deal: Save $520 on Anker Solix C1000Wordle today: The answer and hints for May 2, 2025NASA developed a ventilator to treat COVIDNYT Strands hints, answers for April 15Chrome Tab Management Tips and ExtensionsA longshot federal recycling bill brings good ideas to the forefrontBest Kindle deal: Get a refurbished 2021 Kindle Paperwhite for $85 The correct pronunciation of Primark is still dividing hearts and minds Glitches and exploits hilariously ruined a recent 'For Honor' tournament 'Game of Thrones' episode 'Eastwatch' MVP: Davos Multiplayer in 'No Man's Sky' gets fans' hopes up all over again All hail King Jon Targaryen, first of his name: Why you should support Jon Snow for the Iron Throne 14 people on TripAdvisor who were so disappointed by Big Ben 'Wonder Woman' scores at the Teen Choice Awards Taylor Swift excused from defamation case day after groping testimony Tiny 'gym in a box' wants you to get fit during your lunch break Google is letting you use its Contacts app on any Android phone now Leaked Moto X4 reveals how Motorola's former flagship phone has fallen Classy football fan brings his own cheese plate to the game Rey's parentage will be revealed in 'The Last Jedi' — but will it matter? Tesla is showing off a solar Wait, the price of Bitcoin is how much? All the times Littlefinger betrayed people on 'Game of Thrones' because he sucks Nikolaj Coster Snapchat's newest feature is a game changer for concerts Fan strikes 'Rick and Morty' gold 'Game of Thrones' episode 5 recap: 'Eastwatch' is a Westeros Western
1.5557s , 8204.5859375 kb
Copyright © 2025 Powered by 【Double Cross (1996)】,Miracle Information Network