TLDR Tech / InfoSec
Apple patches Beats Studio Buds flaw that could turn earbuds into a wiretap
Apple shipped Beats Firmware Update 1B211 to fix CVE-2025-20701, an authentication flaw in Airoha SoCs disclosed at a 2025 German security conference, which allowed an attacker within Bluetooth range to listen through the microphone of an unpaired earbud while it was actively seeking pairing requests. Chained with related Airoha bugs, the weakness could also extract pairing keys, impersonate trusted headphones, and pivot to call hijacking, contact extraction, and voice-assistant triggering on the paired phone. Exploitation is difficult and proximity-bound, making it a targeted-surveillance risk rather than an opportunistic one. The firmware rolls out silently when buds sit cased near a connected Apple device, and this can be verified under Settings > Bluetooth.
Read the full story