THE HALFAX HEIMDALL AUGUR

Apple Patches Beats Studio Buds Eavesdropping Flaw Apple updated Beats Studio Buds to patch high-severity CVE-2025-20701 (CVSS 8.8) vulnerability that let nearby hackers eavesdrop on conversations Attackers within Bluetooth range could pair without user consent,

Apple fixes Beats Studio Buds flaw that let hackers spy on ... A high-severity vulnerability (CVE-2025-20701) was discovered in the Beats Studio Buds wireless earbuds that could allow attackers within Bluetooth range to listen to users' conversations without pairing. The flaw stems from missing authentication in the Bluetooth BR/EDR radio of the Airoha SoC used in the earbuds. Apple released a firmware update (1B211) that automatically patches this issue when the earbuds connect to an iPhone, iPad, or Mac. The vulnerability can be exploited to eavesdrop, read call history and contacts, and issue commands via Bluetooth Hands-Free Profile when chained with related vulnerabilities. Exploitation requires technical skill and physical proximity, likely limiting attacks to high-value targets. The vulnerability CVE-2025-20701 affects the Beats Studio Buds wireless earbuds using the Airoha system-on-a-chip. It arises from a missing authentication mechanism in the Bluetooth BR/EDR radio, allowing attackers within Bluetooth range to listen through the device's microphone without pairing. Researchers demonstrated that chaining this flaw with CVE-2025-20700 and CVE-2025-20702 enables attacker…

Beats Studio Buds: Apple patched CVE-2025-20701, a nearby spy flaw via incorrect Bluetooth audio authorization. Update firmware now and recheck pairing settings. #Cybersecurity #Vulnerability #InfoSec Source: https://thehackernews.com/2026/06/apple-patches-beats-studio-buds-flaw.html

Apple Fixes Critical Beats Studio Buds Bluetooth Flaw That Enables Covert Eavesdropping https://www.europesays.com/ie/546726/ Apple has released a security update for its Beats Studio Buds after researchers uncovered a serious Bluetooth vulnerability…

Apple has patched a high-severity eavesdropping vulnerability (CVE-2025-20701) in Beats Studio Buds, allowing nearby hackers to impersonate paired devices and eavesdrop on conversations. The vulnerability stemmed from improper authentication in Bluetooth firmware.

Apple Patches High-Severity Bluetooth Vulnerability in Beats ... Immediate Enterprise Concern Employees using vulnerable Beats Studio Buds may be susceptible to eavesdropping or unauthorized command execution if they are within Bluetooth range of an attacker. Apple has issued a security update to address a high-severity vulnerability affecting Beats Studio Buds wireless earbuds. The flaw, identified as CVE-2025-20701, allows an attacker within Bluetooth range to listen through the microphone of a device that is not yet paired but is actively seeking pair requests. Apple noted that this vulnerability exists in open-source code used within the Airoha system-on-a-chip (SoC) and affects Apple software. The vulnerability was discovered by Dennis Heinze and Frieder Steinmetz of ERNW GmbH and disclosed one year ago at the TROOPERS security conference in Germany. It stems from a missing authentication weakness in the Bluetooth BR/EDR radio. The researchers demonstrated that by chaining CVE-2025-20701 with two additional vulnerabilities, CVE-2025-20700 and CVE-2025-20702, attackers can hijack the connection between a phone and a paired Bluetooth audio device. This allows the use of the …

Apple Patches Beats Studio Buds Flaw Letting Nearby Attackers Spy via Microphone Apple has updated its Beats Studio Buds wireless earbuds to patch a high-severity vulnerability that could be exploited by nearby hackers to eavesdrop on users. The vulnerability, tracked as … #apple #hackernews #news

Apple patches eavesdropping vulnerability in Beats Studio Buds Text settings Story text Size Small Standard Large Width * Standard Wide Links Standard Orange * Subscribers only Learn more Minimize to nav Apple has updated its Beats Studio Buds wireless earbuds to patch a high-severity vulnerability that could be exploited by nearby hackers to eavesdrop on users. The vulnerability, CVE-2025-20701 , allowed improper authentication in the firmware running on the Bluetooth-related chips, enabling people within signal range to impersonate devices that had previously been paired with the earbuds. The researchers demonstrated this in a series of end-to-end attacks that allowed them to eavesdrop on conversations or sounds within earshot of the phone microphone. Apple joins the patch party “Impact: An attacker within Bluetooth range may be able to listen through the microphone of a device which is not yet paired and actively seeking pair requests,” Apple said in a Tuesday security advisory . The fix is contained in Beats Firmware Update 1B211, which is delivered automatically while headphones are paired with and within Bluetooth range of a user’s iPhone, iPad, or Mac. Users can che…

Apple patches high-severity eavesdropping vulnerability in Beats Studio Buds The vulnerability, disclosed 12 months ago, affects multiple manufacturers.

Apple fixes Beats Studio Buds flaw that let hackers ... - BleepingComputer Apple fixes Beats Studio Buds flaw that let hackers spy on conversations By Sergiu Gatlan June 18, 2026 08:23 AM 0 Apple has released security updates to patch a high-severity flaw affecting the Beats Studio Buds wireless earbuds that could allow attackers in Bluetooth range to spy on users' conversations. "An attacker within Bluetooth range may be able to listen through the microphone of a device which is not yet paired and actively seeking pair requests," Apple explained in a Tuesday advisory . "This is a vulnerability in open source code and Apple Software is among the affected projects. The CVE-ID was assigned by a third party." Apple patched the vulnerability in Beats Firmware Update 1B211, which will be automatically delivered to vulnerable headphones when they are paired and within Bluetooth range of the user's iPhone, iPad, or Mac. You can check whether the firmware has been applied from the Bluetooth settings on your device by tapping the info button next to the headphones. The security flaw ( CVE-2025-20701 ) was discovered by Dennis Heinze and Frieder Steinmetz of ERNW GmbH in the Airoha system-o…

📰 **Apple patches high-severity eavesdropping vulnerability in Beats Studio Buds** The vulnerability, disclosed 12 months ago, affects multiple manufacturers. 📰 Source: Ars Technica 🔗 Link […] [Original post on igeek.gamer-geek-news.com]