Bluetooth security flaws reveals all devices launched after 2014 can be hacked
from bless@lemmy.world to cybersecurity@infosec.pub on 01 Dec 2023 10:29
https://lemmy.world/post/8998372
from bless@lemmy.world to cybersecurity@infosec.pub on 01 Dec 2023 10:29
https://lemmy.world/post/8998372
-
Security researchers have discovered new Bluetooth security flaws that allow hackers to impersonate devices and perform man-in-the-middle attacks.
-
The vulnerabilities impact all devices with Bluetooth 4.2 through Bluetooth 5.4, including laptops, PCs, smartphones, tablets, and others.
-
Users can do nothing at the moment to fix the vulnerabilities, and the solution requires device manufacturers to make changes to the security mechanisms used by the technology.
Research paper: dl.acm.org/doi/pdf/10.1145/3576915.3623066
Github: github.com/francozappa/bluffs
CVE: nvd.nist.gov/vuln/detail/CVE-2023-24023
#cybersecurity
threaded - newest
Oh fun.
And disabling Bluetooth on phones isn’t really a viable option these days because so many people use Bluetooth headphones because of the removal of headphone jacks/the convenience of Bluetooth earphones.
Thankfully the devices I look after are mainly iOS, windows, and macos, so patches should be available in due time.
People with old Android devices are going to be left out in the cold sadly. Thankfully my Samsung s21 is still in support.