A potential security issue has been discovered by cybersecurity researchers that has the capability to affect more than one billion devices.
According to researchers at the cybersecurity firm Tarlogic,Watch Power a hidden command has been foundcoded into a bluetooth chip installed in devices around the world. This secret functionality can be weaponized by bad actors and, according to the researchers, used as an exploit into these devices.
Using these commands, hackers could impersonate a trusted device and then connect to smartphones, computers, and other devices in order to access information stored on them. Bad actors can continue to utilize their connection to the device to essentially spy on users.
The bluetooth chip is called ESP32 and is manufactured by the China-based company Espressif. According to researchers, the ESP32 is "a microcontroller that enables WiFi and Bluetooth connection." In 2023, Espressif reported that one billion units of its ESP32 chip had been sold globally. Millions of IoT devices like smart appliances utilize this particular ESP32 chip.
Tarlogic researchers say that this hidden command could be exploited, which would allow "hostile actors to conduct impersonation attacks and permanently infect sensitive devices such as mobile phones, computers, smart locks or medical equipment by bypassing code audit controls." Tarlogic says that these commands are not publicly documented by Espressif.
Researchers with Tarlogic developed a new Bluetooth driver tool in order to aid in Bluetooth-related security research, which enabled the security firm to discover a total of 29 hidden functionalities that could be exploited to impersonate known devices and access confidential information stored on a device.
According to Tarlogic, Espressif sells these bluetooth chips for roughly $2, which explains why so many devices utilize the component over higher costing options.
As BleepingComputerreports, the issue is being tracked as CVE-2025-27840.
Topics Bluetooth Cybersecurity
A decade of New Year's Eve glasses, ranked by how dumb they lookedLG announces new 8K OLED TVs with smart upscaling and AirPlay 2This 'passiveSamsung's next Unpacked reveal event is set for midJustin Bieber can't eat lunch without being mobbed by fans and it's sadGoogle's AI is better at breast cancer screening than human experts, study claimsAmerican Girl's 2020 Doll of the Year is its first with hearing lossNetflix's 'Spinning Out' is bingeJ.K. Rowling blasts Trump's awkward handshake moment with 1 perfectly captioned tweetThis is the actual timeline of events in Netflix's 'The Witcher'LG unveils massive OLED displays for airplane passengersThe country where people devour pasta, wine and olive oil is the world's healthiest. Really.Australia's raging bushfires are smothering New Zealand with smokeEverything we think Apple will release in 2020Obama's photographer will never be done trolling TrumpWow, some stranger just gave us Trump's tax return and it's really weirdJ.K. Rowling blasts Trump's awkward handshake moment with 1 perfectly captioned tweet20 movies and shows to stream with your New Year's Day hangoverYouTube issues proper apology over restricted mode censoring creatorsSharon Stone gets on Bumble, gets blocked after users report her profile as fake Prince Harry comforts child whose mum passed away with words of encouragement Meta shuts down crypto site Novi How researchers are still using AI to predict crime 'Wordle' today: Get the answer, hints for July 3 Twitter introduces 'Twitter Circle' for tweeting to exclusive groups It's official: MacBook Air with M2 chip will be available to order on Friday Amazon Prime gets into food delivery, invests in Grubhub Xiaomi 12S Ultra has a massive, Leica Heidi Klum just outdid herself (again) with her Shrek How to report misgendering or deadnaming someone on Twitter Instagram adds 'I voted' stickers to Stories ‘Washington Examiner’ tweets ’Trump is going to hell' after hack Tesla sued again for alleged racism and harassment 'Wordle' today: Here's the answer, hints for July 9 'Wordle' today: Get the answer, hints for July 4 Whatever happened to Starman? SpaceX says he's gone beyond Mars. Meta's newest headset may be called Quest Pro 'The Office' cast recalls an Emmy Google employees in Australia join global walkout against sexual harassment I never want the hot dog sandwich debate to end
2.5337s , 8202.71875 kb
Copyright © 2025 Powered by 【Watch Power】,Steady Information Network