A potential security issue has been discovered by cybersecurity researchers that has the capability to affect more than one billion devices.
According to researchers at the cybersecurity firm Tarlogic,Denmark a hidden command has been foundcoded into a bluetooth chip installed in devices around the world. This secret functionality can be weaponized by bad actors and, according to the researchers, used as an exploit into these devices.
Using these commands, hackers could impersonate a trusted device and then connect to smartphones, computers, and other devices in order to access information stored on them. Bad actors can continue to utilize their connection to the device to essentially spy on users.
The bluetooth chip is called ESP32 and is manufactured by the China-based company Espressif. According to researchers, the ESP32 is "a microcontroller that enables WiFi and Bluetooth connection." In 2023, Espressif reported that one billion units of its ESP32 chip had been sold globally. Millions of IoT devices like smart appliances utilize this particular ESP32 chip.
Tarlogic researchers say that this hidden command could be exploited, which would allow "hostile actors to conduct impersonation attacks and permanently infect sensitive devices such as mobile phones, computers, smart locks or medical equipment by bypassing code audit controls." Tarlogic says that these commands are not publicly documented by Espressif.
Researchers with Tarlogic developed a new Bluetooth driver tool in order to aid in Bluetooth-related security research, which enabled the security firm to discover a total of 29 hidden functionalities that could be exploited to impersonate known devices and access confidential information stored on a device.
According to Tarlogic, Espressif sells these bluetooth chips for roughly $2, which explains why so many devices utilize the component over higher costing options.
As BleepingComputerreports, the issue is being tracked as CVE-2025-27840.
Topics Bluetooth Cybersecurity
Bayern Munich vs. Leverkusen 2025 livestream: Watch Champions League for free
Patricia Highsmith on Murder, Murderers, and Morality
Many Ways to Say “I Love You”: A Valentine from Mr. Rogers
The Best Breakup Song: Thomas Wyatt’s “They Flee From Me”
Things AMD Needs to Fix
The Perfect Metaphor for the Common Cold: Internet Trolls
Reading’s Long Journey from Chore to Passion
In Praise of Ordinary Human Love
Google will repair Hurricane Harvey victims' Pixel phones for free in Houston
Working at “The Onion”: Adventures in Tastelessness
Diseases from mosquitos and ticks have tripled in the U.S., CDC finds
How to Understand a Book: Read It 100 Times
Say Goodbye to Authors and Hello to Authorpreneurs
Working at “The Onion”: Adventures in Tastelessness
Study trains Port Jackson sharks to respond to jazz music
Readers to Writers: “Give Us More Grandparents!”
Picture Books by Sadie Stein
The Perfect Metaphor for the Common Cold: Internet Trolls
A Typical Wall Street Republican
Remembering Jane Wilson, Who Painted Evocative Landscapes
Amid Reddit Blackout, CEO downplays API protest as subreddits vow to keep fightingLuljeta Lleshanaku, Kruja, Albania by Matteo PericoliTwitter meme identifies things that feel racist, but technically aren'tAll the Difference by Sadie SteinNotes from a Bookshop: February, or the Folly of Love by Kelly McMastersLove in Amish Country by Rachel YoderThe Hollywood Subway: Against the Horizontal City by Aaron GilbreathNevermore by Sadie SteinNotes from a Bookshop: February, or the Folly of Love by Kelly McMastersThe Poetics of Football by Ariel LewitonA Week in Culture: Carlene Bauer, Writer by Carlene BaeurIn $250 million lawsuit against Twitter, 17 music publishers allege copyright infringementThe Worst Best Coloring Book Ever by Sadie SteinLove in Amish Country by Rachel YoderReader, I married him. by Sadie SteinDr. Seuss’s Hats, and Other News by Sadie Stein'Black Mirror' Season 6 is Charlie Brooker versus NetflixWhy you're reflecting on past mistakes more than ever beforeWatch Kamala Harris call Joe Biden to shout 'We did it'Nabokov Museum Vandalized, and Other News by Sadie Stein Chrissy Teigen promises big bail fund donation after Trump's 'MAGA Night' tweet Geoff Dyer on 'Otherwise Known as the Human Condition' by Evan Ratliff 'Succession' Season 4, episode 4: What does Kerry whisper to Roman? Netflix to finally stop sending DVDs by mail Nike urges people to stand against racism in striking new ad Facebook role play groups offer a mundane escape from the pandemic 'Succession' Season 4, episode 4: What's the deal with Logan's paper? Republican governor wants you to stop politicizing wearing a damn mask Ida Kar by Nicole Rudick Yoram Kaniuk on 'Life on Sandpaper' by Joshua Cohen Put Up This Wall! by David Zax Apple might announce new MacBooks at WWDC Memo to 'The Mandalorian': This is the way (to fix the show) Adam Gilders and 'Another Ventriloquist' by Craig Taylor and Deirdre Dolan 'Succession' Season 4, episode 4: What does Shiv's pregnancy actually mean? John Jeremiah Sullivan Wins Prize, Does Paris Review Proud by Lorin Stein Sadie Stein to Join Editorial Staff of 'The Paris Review' by Lorin Stein How to watch 'Barry' Season 4 for free Hilarious meme demands to know what's preventing men from looking like this The Outcasts of W. Eugene Smith’s Jazz Loft