Security vulnerability detected in headphones of famous brands: Millions of users at risk!

Wireless headphones have gained an important place in the daily lives of millions of people with their comfortable use, portable structure and features that save them from cable clutter.

However, a recent report published by a Germany-based cybersecurity company revealed that these technological products could also pose a serious security risk.

The report notes that three critical software vulnerabilities have been found in Bluetooth chips belonging to the Airoha brand, which is known to be used in many popular headphone models.

AMBIENT LISTENING IS POSSIBLE WITH REMOTE ACCESS

According to the news on shiftdelete, it was noted that the detected vulnerabilities affected both Bluetooth Low Energy (LE) and classic Bluetooth protocols. One of the most striking findings is that attackers can directly access the device from a distance of approximately 10 meters without pairing.

A malicious person who exploits these vulnerabilities can take control of the device by presenting himself as a headset. Remote activation of the microphone and listening to the environment are also among the threats these vulnerabilities can create.

UPDATE HAS ARRIVED BUT NOT APPLIED

Airoha has released a software patch to close the vulnerabilities, but it appears that headphone manufacturers have yet to integrate the patch into their products, leaving millions of users at risk.

BRANDS AND MODELS AT RISK

According to the published list, the brands that use chips with security vulnerabilities include the following names:

Sony, Bose, JBL, Jabra, Marshall, Beyerdynamic, JLab, MoerLabs and Teufel.

In particular, Sony's WF and WH series, Marshall's current headphone and speaker models, and Bose's QuietComfort series are among the devices directly affected.

SECURITY WARNING FROM EXPERTS

Cybersecurity experts recommend that users of these models regularly check for software updates and follow the official statements of the manufacturers. It is also emphasized that the headphones should be completely turned off when not in use in public areas.

There have been no reports of these vulnerabilities being actively exploited in attacks to date. However, the nature of the vulnerabilities is said to pose a serious threat potential.