Apple made a firmware update to the Beats Studio headset.

Apple made a firmware update to the Beats Studio headset, the latter finding that it could be used to eavesdrop on users.

According to a report by the official website of the developer of the famous anti-malware tool, Malwarebytes has mentioned the detection of a CVE-2025-20701 bug on Apple's Beats Studio headset. The vulnerability is a security vulnerability within the "System on Chip" or System-on-a-Chip (SoCs) on the Airoha chip. It is a vulnerability that occurs in the authentication phase during the pairing between the headphones and other tools that allow hackers to intervene. This results in the ability of non-users to act as follows:

Secretly eavesdropping through a headset

Stealing the Pairing Key of the headset itself

Impersonation of a Trusted Earpiece

The most extreme of these can lead to mobile phone Hijacking connected to a bugged headset. Hackers can steal contacts, activate voice assistants, or control dial-in calls.

Fortunately, to do this, hackers only need to be within the Bluetooth radius of the tool in question to access and use the vulnerability, making it difficult to use the vulnerability in real-world situations. In addition, after Apple found out about it, the company released Firmware Beats Firmware Update 1B211 to eliminate the vulnerability in a quick time. By updating it, although it does not have a mobile phone update button, if the user connects the headset to iPhone, iPad, and Mac, the headset will update. Automatically, or while charging the earphone and holding the lid open, the earphone will also update itself.

# Trending # lemon 8 diary # eavesdropping # Apple # beatsstudio