Secret commands found in Bluetooth chip used in a billion devices
According to researchers at the cybersecurity firm Tarlogic, a hidden command has been found coded into a bluetooth chip installed in devices around the world. This secret functionality can be weaponized by bad actors and, according to the researchers, used as an exploit into these devices.
Using these commands, hackers could impersonate a trusted device and then connect to smartphones, computers, and other devices in order to access information stored on them. Bad actors can continue to utilize their connection to the device to essentially spy on users.
The bluetooth chip is called ESP32 and is manufactured by the China-based company Espressif. According to researchers, the ESP32 is "a microcontroller that enables WiFi and Bluetooth connection." In 2023, Espressif reported that one billion units of its ESP32 chip had been sold globally. Millions of IoT devices like smart appliances utilize this particular ESP32 chip.
SEE ALSO: New 'browser syncjacking' cyberattack lets hackers take over your computer via Chrome
Tarlogic researchers say that this hidden command could be exploited, which would allow "hostile actors to conduct impersonation attacks and permanently infect sensitive devices such as mobile phones, computers, smart locks or medical equipment by bypassing code audit controls." Tarlogic says that these commands are not publicly documented by Espressif.
Researchers with Tarlogic developed a new Bluetooth driver tool in order to aid in Bluetooth-related security research, which enabled the security firm to discover a total of 29 hidden functionalities that could be exploited to impersonate known devices and access confidential information stored on a device.
According to Tarlogic, Espressif sells these bluetooth chips for roughly $2, which explains why so many devices utilize the component over higher costing options.
As BleepingComputer reports, the issue is being tracked as CVE-2025-27840.
Try Our AI Features
Explore what Daily8 AI can do for you:
Comments
No comments yet...
Related Articles
Bloomberg
40 minutes ago
- Bloomberg
Huawei Bid to Dismiss US Trade Sanction Case Rejected by Judge
Huawei Technologies Co. must face a criminal trial next year in New York after a federal judge refused a request by the Chinese wireless equipment maker to dismiss more than a dozen charges, including racketeering, trade secret theft and violating US sanctions on Iran. US District Judge Ann Donnelly on Tuesday rejected arguments by China's largest technology company that there wasn't enough evidence in the indictment to support 13 of the 16 charges.
Yahoo
an hour ago
- Yahoo
Joby Aviation Soars on Dubai Test Success
Joby Aviation (NYSE:JOBY) jumps over 10% after completing piloted eVTOL test flights in Dubai and locking in six-year exclusive air taxi rights. The stock closed at $10.55 and added 1.4% in premarket trading as investors cheered the milestone ahead of commercial service. The California-based company delivered its first aircraft to the UAE and ran vertical takeoffs, wingborne transitions and landings under the watch of Dubai's Roads and Transport Authority. Warning! GuruFocus has detected 4 Warning Signs with JOBY. Construction is already under way on Joby's first commercial vertiport at Dubai International Airport, paving the way for a 2026 launch linking Palm Jumeirah, Dubai Marina and Downtown. Joby's five-seat aircraft, which carries a pilot plus four passengers at up to 200 mph and a 100-mile range, underscores its capital efficiency: the company has raised over $2 billion from backers including Toyota (NYSE:TM) and Delta Air Lines (NYSE:DAL). Its three-part modeldirect operations, aircraft sales and city partnershipsaims to diversify revenue as it scales. Why It Matters: Securing exclusive Dubai rights and nailing real-world flights bolster Joby's lead in the hotly contested air taxi race and de-risk its path to commercialization. Investors will watch progress toward FAA certification in the U.S., updates on vertiport build-outs and 2026 launch plans for fresh execution cues. This article first appeared on GuruFocus.
Yahoo
an hour ago
- Yahoo
5 Insightful Analyst Questions From Keysight's Q1 Earnings Call
Keysight's first quarter results came in ahead of Wall Street's revenue and profit expectations, reflecting steady demand across its core markets. Management credited the performance to strong order growth in the Communications Solutions Group, particularly from data center infrastructure and wireline network customers, as well as stabilization in the Electronic Industrial Solutions Group. CEO Satish Dhanasekaran highlighted that 'R&D investments in 1.6 terabyte electrical and optical technologies, as well as expansion of new protocols in AI data center networks, are fueling demand,' emphasizing a technology-driven recovery. Is now the time to buy KEYS? Find out in our full research report (it's free). Revenue: $1.31 billion vs analyst estimates of $1.28 billion (7.4% year-on-year growth, 1.8% beat) Adjusted EPS: $1.70 vs analyst estimates of $1.65 (3.3% beat) Adjusted EBITDA: $361.4 million vs analyst estimates of $352.5 million (27.7% margin, 2.5% beat) Revenue Guidance for Q2 CY2025 is $1.32 billion at the midpoint, above analyst estimates of $1.30 billion Adjusted EPS guidance for Q2 CY2025 is $1.66 at the midpoint, below analyst estimates of $1.69 Operating Margin: 15.8%, up from 14.6% in the same quarter last year Backlog: $2.35 billion at quarter end, up 4.3% year on year Market Capitalization: $28.28 billion While we enjoy listening to the management's commentary, our favorite part of earnings calls are the analyst questions. Those are unscripted and can often highlight topics that management teams would rather avoid or topics where the answer is complicated. Here is what has caught our attention. Tim Long (Barclays) asked about the significance of AI-related activity and pipeline visibility for the second half. CEO Satish Dhanasekaran said AI is a long-term opportunity, with double-digit wireline growth and a solid project pipeline supporting their outlook. Matt Niknam (Deutsche Bank) sought clarity on the sources of improved guidance and strong cash flow. Dhanasekaran attributed the higher outlook to order momentum and backlog, while CFO Neil Dougherty noted working capital improvements and a one-time gain on a currency hedge. Mark Delaney (Goldman Sachs) questioned the magnitude and mitigation of tariff exposure. Dougherty explained the $75–100 million annualized gross impact would be gradually offset by supply chain changes and price adjustments, with full mitigation by next year. Aaron Rakers (Wells Fargo) inquired about incremental operating margins above 5% revenue growth and the wireless business's sustainability. Dougherty reiterated the 40% incremental margin target, noting tariffs as a temporary drag, while Dhanasekaran highlighted stronger infrastructure demand in wireless. Meta Marshall (Morgan Stanley) asked about defense order trends and China's tariff exposure. Dhanasekaran said U.S. and European defense orders grew despite government budget constraints, while Dougherty estimated China-related tariff exposure at less than 10% of the total. In the coming quarters, the StockStory team will closely monitor (1) the pace of AI-driven demand and adoption of new networking standards, (2) the effectiveness and timing of Keysight's tariff mitigation initiatives, and (3) continued growth in software and simulation revenue as a share of the total business. Updates on regulatory approvals and integration for pending acquisitions will also be key factors to watch. Keysight currently trades at $164.69, up from $162.51 just before the earnings. At this price, is it a buy or sell? Find out in our full research report (it's free). The market surged in 2024 and reached record highs after Donald Trump's presidential victory in November, but questions about new economic policies are adding much uncertainty for 2025. While the crowd speculates what might happen next, we're homing in on the companies that can succeed regardless of the political or macroeconomic environment. Put yourself in the driver's seat and build a durable portfolio by checking out our Top 5 Strong Momentum Stocks for this week. This is a curated list of our High Quality stocks that have generated a market-beating return of 183% over the last five years (as of March 31st 2025). Stocks that made our list in 2020 include now familiar names such as Nvidia (+1,545% between March 2020 and March 2025) as well as under-the-radar businesses like the once-micro-cap company Tecnoglass (+1,754% five-year return). Find your next big winner with StockStory today.
