Apple Patches Critical Flaw Letting Hackers Listen In

Apple has addressed a significant security vulnerability in its Beats Studio Buds wireless earbuds. The flaw, identified as CVE-2025-20701, posed a critical risk, allowing individuals within Bluetooth range to potentially eavesdrop on users. This vulnerability stemmed from improper authentication within the earbuds' firmware, enabling attackers to impersonate previously paired devices.

Researchers demonstrated end-to-end attacks that could exploit this flaw to listen through the device's microphone. Apple has since released Beats Firmware Update 1B211 to rectify this issue, which is delivered automatically to devices connected to Apple products. The vulnerability, rated 8.8 out of 10, was part of a broader disclosure concerning Airoha Systems chips.

Other manufacturers like Jabra, Bose, and JBL have also implemented fixes for devices affected by these Airoha chip vulnerabilities. While such Bluetooth exploits are complex and rarely reported as actively exploited, security experts advise users to be aware of the risks and consider disabling Bluetooth when not in use.