惯性聚合 高效追踪和阅读你感兴趣的博客、新闻、科技资讯
阅读原文 在惯性聚合中打开

推荐订阅源

Project Zero
Project Zero
www.infosecurity-magazine.com
www.infosecurity-magazine.com
月光博客
月光博客
Simon Willison's Weblog
Simon Willison's Weblog
S
Schneier on Security
B
Blog
NISL@THU
NISL@THU
有赞技术团队
有赞技术团队
T
Tailwind CSS Blog
AWS News Blog
AWS News Blog
W
WeLiveSecurity
PCI Perspectives
PCI Perspectives
博客园 - 三生石上(FineUI控件)
Stack Overflow Blog
Stack Overflow Blog
F
Fortinet All Blogs
Apple Machine Learning Research
Apple Machine Learning Research
P
Palo Alto Networks Blog
I
Intezer
美团技术团队
博客园 - Franky
大猫的无限游戏
大猫的无限游戏
H
Heimdal Security Blog
T
Troy Hunt's Blog
freeCodeCamp Programming Tutorials: Python, JavaScript, Git & More
Forbes - Security
Forbes - Security
T
The Exploit Database - CXSecurity.com
钛媒体:引领未来商业与生活新知
钛媒体:引领未来商业与生活新知
C
Check Point Blog
J
Java Code Geeks
The GitHub Blog
The GitHub Blog
U
Unit 42
Cyber Security Advisories - MS-ISAC
Cyber Security Advisories - MS-ISAC
C
Cisco Blogs
S
SegmentFault 最新的问题
CTFtime.org: upcoming CTF events
CTFtime.org: upcoming CTF events
AI
AI
WordPress大学
WordPress大学
Help Net Security
Help Net Security
Security Archives - TechRepublic
Security Archives - TechRepublic
Microsoft Azure Blog
Microsoft Azure Blog
cs.AI updates on arXiv.org
cs.AI updates on arXiv.org
小众软件
小众软件
Cyberwarzone
Cyberwarzone
Scott Helme
Scott Helme
让小产品的独立变现更简单 - ezindie.com
让小产品的独立变现更简单 - ezindie.com
博客园 - 叶小钗
G
GRAHAM CLULEY
阮一峰的网络日志
阮一峰的网络日志
Last Week in AI
Last Week in AI
H
Hacker News: Front Page

CNET

Valve's Steam Machine: Summer Release Planned, Still No Price Apple TV: 28 of the Best Shows You're Probably Not Watching YouTube TV vs. DirecTV vs. Hulu Live and More: Which Has the Most Must-Have Channels Out of 100? If You Want to Be a Better Pet Parent, AI Can Help I Was Shocked by How Good These Budget TVs Were Trump Phone Looks Different, Has No Launch Date, Isn't Made in America The Apple Watch Series 12 Is Rumored to Revive a Retired iPhone Feature Best Projector of 2026: Tested by Experts Best Home Theater Systems of 2026 How to Use Apple's Clean Up Tool to Remove Unwanted People and Things From Your Photos Today's NYT Strands Hints, Answers and Help for April 12 #770 Today's NYT Connections Hints, Answers and Help for April 12, #1036 Today's Wordle Hints, Answer and Help for April 12, #1758 Today's NYT Mini Crossword Answers for Sunday, April 12 Today's NYT Connections: Sports Edition Hints and Answers for April 12, #566 Watch a Robot Stuff Cash Into a Wallet Just Like You Do This Animation Startup Wants to Make It Easier to Tell Open-Ended Stories The 23 Best Graduation Gifts for 2026 Grand National 2026 Livestream: How to Watch Aintree Horse Racing From Anywhere Amazon Luna to Drop Support for Third-Party Games and Subscriptions in June YouTube Premium Is the Latest Streaming Service to Hike Prices Today's NYT Mini Crossword Answers for Saturday, April 11 Elden Ring: Tarnished Edition for Switch 2 Reignites Controversy Over Game-Key Cards Comcast Adds New StreamSaver Bundles: HBO Max, Disney Plus, Hulu Now Part of the Lineup Samsung's Galaxy Z Fold 7 Just Got a Price Hike, 9 Months After Its Release Microsoft Is Scrubbing the Copilot Name From Some Windows 11 Apps These $299 Glasses Are Like an HDR TV on Your Face Today's NYT Connections: Sports Edition Hints and Answers for April 11, #565 How to Make Sure Your Private Signal Messages Aren't Still Lurking on Your Phone Apple AirPods Max 2 Review: Seemingly Small Changes Make a Substantial Difference Today's NYT Connections Hints, Answers and Help for April 11, #1035 Today's NYT Strands Hints, Answers and Help for April 11 #769 Today's Wordle Hints, Answer and Help for April 11, #1757 Encrypted Emails Are Now Available for Some Gmail Phone App Enterprise Customers Tyson Fury vs. Arslanbek Makhmudov Fight: When to Watch the Action on Netflix Encyclopedia Britannica and Merriam-Webster Sue OpenAI OpenAI to Launch ChatGPT 'Adult Mode' Despite Warnings From Its Own Advisers Google Rolls Out Latest AI Model, Gemini 3.1 Pro FA Cup Soccer 2026: Watch Aston Villa vs. Newcastle Live From Anywhere The Google Pixel 10 Pro Might Have the Best Phone Display for Gaming We Tested 35 Phones and Found the Surprising Winner of Best Battery Life Best Smart Soundbar of 2026 Today's Wordle Hints, Answer and Help for Feb. 13, #1700 Today's NYT Strands Hints, Answers and Help for Feb. 13 #712 Today's NYT Connections Hints, Answers and Help for Feb. 13, #978 Hackers Are Trying to Copy Gemini via Thousands of AI Prompts, Google Reports YouTube Is Finally on the Apple Vision Pro. Can We Expect More Google Apps to Come? Premier League Soccer: Stream Brentford vs. Arsenal Live From Anywhere Sony's New WF-1000XM6 Earbuds Just Jumped to the Top of My Best Earbuds List How to Connect Bluetooth Headphones to Your Smart TV Fitbit's Gemini-Powered Coach Comes to the iPhone and Rolls Out to More Countries Today's Wordle Hints, Answer and Help for Feb. 12, #1699 Today's NYT Connections Hints, Answers and Help for Feb. 12, #977 Lenovo IdeaPad 5i 16 2-in-1 Gen 10 Review: Budget Convertible With Good Performance but a Clunky Design Today's NYT Strands Hints, Answers and Help for Feb. 12 #711 Today's NYT Connections: Sports Edition Hints and Answers for Feb. 12, #507 Today's NYT Mini Crossword Answers for Thursday, Feb. 12 Remember James Van Der Beek by Streaming Dawson's Creek and His Other Roles Stay Patient, Apple Fans: Siri AI Delayed Again to Late 2026 at the Earliest Anthropic Expands Claude's Free Tier With More Features Diablo Celebrates 30th Anniversary With New Warlock Class, Coming to 3 Games This Year Amazon Pharmacy to Offer Same-Day Delivery to 2,000 More Communities in 2026 Dell XPS 14 Hands-On: The Long-Running Laptop Brand Goes Back to What Works Aloha, AI Moana: Google's AI Will No Longer Accept Disney Character Prompts Darren Aronofsky, Your AI Slop Is Ruining American History in 'On This Day…1776' Best PlayStation 5 Controllers in 2026: The Top PS5 Controllers From Sony, Razer, Nacon and More Best Streaming Services for Kids in 2026 Using AI at Work May Actually Make Your Days Longer and More Unpleasant, Study Finds Best Sonos Speakers for 2026 Premier League Soccer: Stream West Ham vs. Man United, Live From Anywhere Framework Desktop Review: Small and Mighty, but Shy of Upgrade Greatness Overwatch's New Season 1 Launches Today, Delivering on Decade-Long Potential The Best Way to Prevent Fraud: A Guide to Freezing Your Social Security Number Today's NYT Connections: Sports Edition Hints and Answers for Feb. 10, #505 Today's NYT Connections Hints, Answers and Help for Feb. 10, #975 TikTok Ordered to Change Algorithm Over 'Addictive Design,' or Face a Hefty Fine Super Bowl LX: Watch the AI-Related Ads Coming to the Big Game My Wife and I Play the Best Two-Player Games Every Week. Here Are Our Favorites 'Wicked: For Good' Is Coming to Streaming. Here's When You Can Watch Here's Why Taylor Swift's Opalite Music Video Isn't on YouTube Yet Testing the Best Laser Cutters and Engravers Is One of the Best Parts of My Job My iPhone 17 Pro Went Head-to-Head Against a Pro Cinema Camera Valve Delays Steam Frame and Steam Machine Pricing as Memory Costs Rise 'Predator: Badlands': Here's When You Can Stream It on Hulu Americans Plan to Spend $1,177 on a New TV. Here's How to Do It for Less in Time for the Big Game ExpressVPN’s New Privacy-Focused AI and Email Protection Features Could Be Game Changers From Data Entry to Strategy, AI Is Reshaping How We Do Taxes The Motorola Signature Is the Moto Phone I've Wanted for Years Spotify's Page Match Lets You Swap Between a Book and the Audiobook I Played the 5 New Overwatch Heroes Dropping Next Week. Check Out the Gameplay These New AI Transcription Models Are Built for Speed and Privacy Best Budget Earbuds for 2026: Cheap Wireless Picks Maximize Your Refund with H&R Block's Smart Tax Tools How H&R Block's Experts Can Help You Avoid Common Filing Mistakes Anthropic Pinky-Promises It Won't Add Ads to Claude This Phone Stays Charged for Almost a Week by Keeping Your Data Secure Winter Olympics 2026: How to Watch Ice Hockey Events 8 Essential Security Tips for Using AI Chatbots Safely Here's How to Use Apple's Invites App to Plan Your Super Bowl Party Google Brings Genie 3's Interactive World-Building Prototype to AI Ultra Subscribers
Your Bluetooth Audio Devices Could Be at Risk of Hijacking, Researchers Say
Omar Gallaga · 2026-01-17 · via CNET

Researchers working at KU Leuven University in Belgium are warning people who use Bluetooth audio products that their devices may be at risk due to vulnerabilities in Google's Fast Pair technology, a feature that makes it quicker and easier to connect Bluetooth devices.

Google says it has addressed issues that could allow hackers to hijack audio devices and track their location. But the researchers say the vulnerabilities, which it collectively refers to as WhisperPair, still affect products from device makers including Sony, Harman and Google itself. In their tests, the researchers found these products could be hacked from as far as about 46 feet away.

A Google representative told CNET that it has updated the software for some of its own audio products, including its Pixel Buds Pro, and that some of the vulnerabilities stemmed from other companies not properly following Fast Pair specifications. Google said it had informed companies about this in September.


Don't miss any of our unbiased tech content and lab-based reviews. Add CNET as a preferred Google source.


"We appreciate collaborating with security researchers through our Vulnerability Rewards Program, which helps keep our users safe. We worked with these researchers to fix these vulnerabilities, and we have not seen evidence of any exploitation outside of this report's lab setting," Google said in a statement provided to CNET. "As a best security practice, we recommend users check their headphones for the latest firmware updates. We are constantly evaluating and enhancing Fast Pair and Find Hub security."

In response to specific concerns about device tracking, Google added, "We rolled out a fix on our end to prevent Find Hub network provisioning in this scenario, which completely addresses the potential location tracking issue across all devices."

Google has issued two security updates this month, one for Wear OS and one for Google Pixel devices. Each contains information about the company's security patches.

The WhisperPair research group said it's working on an academic paper detailing its findings. On its website, the researcher group said, "Our findings show how a small usability 'add-on' can introduce large-scale security and privacy risks for hundreds of millions of users."

The research group released a YouTube video discussing problems with Fast Pair, a Google technology introduced in 2017 that connects Bluetooth devices with one tap across Android and Chrome OS.

The group said that it worked with Google after reporting its findings and was awarded a $15,000 bounty. The researchers said they agreed to a 150-day disclosure window in which Google would release security patches. However, the website points out that users of Bluetooth devices like earbuds may not be aware of security updates that could protect them.

The website includes a page where users can look up which audio products are vulnerable, with details on how to get them updated. Google doesn't have detailed information about these vulnerabilities on its Fast Pair Known Issues page.