#bluetoothvulnerability — Public Fediverse posts
Live and recent posts from across the Fediverse tagged #bluetoothvulnerability, aggregated by home.social.
-
🚨 A team of white-hat hackers just revealed a chilling remote hack on the 2020 Nissan LEAF! Using Bluetooth & DNS attacks, they gained full control-from steering to surveillance-without physical access. This exposes serious risks in EV security. Stay updated & cautious! 🔐🚗 #CyberSecurity #NissanLEAF #EVHack #BluetoothVulnerability #CarHacking #InfoSec #BlackHatAsia2025 #newz
Read more: https://cyberinsider.com/nissan-leaf-remotely-hacked-via-bluetooth-and-dns-attack/
-
Apple Lets Stalkers Find YOU — ‘nRootTag’ Team Breaks AirTag Crypto – Source: securityboulevard.com https://ciso2ciso.com/apple-lets-stalkers-find-you-nroottag-team-breaks-airtag-crypto-source-securityboulevard-com/ #SecurityBoulevard(Original) #rssfeedpostgeneratorecho #Analytics&Intelligence #Bluetoothvulnerability #Bluetoothlowenergy #ThreatIntelligence #BluetoothProtocol #bluetoothsecurity #CyberSecurityNews #EditorialCalendar #IndustrySpotlight #SecurityAwareness #SecurityBoulevard #AirTags
-
"🚨 Major Bluetooth Flaw in BlueZ: Keystroke Injection Risk! 🚨"
A Bluetooth vulnerability, CVE-2023-45866, has been uncovered, posing a significant threat to various devices. Discovered by Marc Newlin, this flaw in BlueZ allows unauthenticated devices to inject HID events, leading to potential keystroke injections and arbitrary command executions on affected devices. Particularly alarming, this vulnerability affects a wide range of operating systems including Android, Linux, macOS, and iOS, even those in Lockdown Mode.
Key details include:
- BlueZ not properly restricting non-bonded devices from injecting HID events into the input subsystem.
- Potential for an unauthenticated Peripheral role HID Device to establish an encrypted connection without user interaction, injecting HID messages.
- CVE-2023-45866 carries a critical severity rating with a CVSS base score of 9.8, indicating a high level of threat.
Marc Newlin's analysis highlights that this attack exploits an unauthenticated pairing mechanism within the Bluetooth specification, allowing fake keyboards to connect to target devices.
Stay vigilant and update your devices! 🛡️📱💻
Tags: #CyberSecurity #BluetoothVulnerability #BlueZ #CVE202345866 #KeystrokeInjection #DeviceSecurity #MarcNewlin #ThreatAlert
Sources:
- NVD: CVE-2023-45866
- Tenable: CVE-2023-45866 Details
- Hackread Article by Waqas: Bluetooth Vulnerability Report