惯性聚合 高效追踪和阅读你感兴趣的博客、新闻、科技资讯
阅读原文 在惯性聚合中打开

推荐订阅源

量子位
D
Docker
月光博客
月光博客
MongoDB | Blog
MongoDB | Blog
Vercel News
Vercel News
美团技术团队
博客园 - 叶小钗
I
InfoQ
Jina AI
Jina AI
博客园 - 司徒正美
雷峰网
雷峰网
B
Blog
Y
Y Combinator Blog
A
About on SuperTechFans
WordPress大学
WordPress大学
酷 壳 – CoolShell
酷 壳 – CoolShell
大猫的无限游戏
大猫的无限游戏
Microsoft Security Blog
Microsoft Security Blog
Stack Overflow Blog
Stack Overflow Blog
腾讯CDC
H
Hackread – Cybersecurity News, Data Breaches, AI and More
Recent Announcements
Recent Announcements
V
V2EX
N
Netflix TechBlog - Medium

CNET

Valve's Steam Machine: Summer Release Planned, Still No Price Apple TV: 28 of the Best Shows You're Probably Not Watching YouTube TV vs. DirecTV vs. Hulu Live and More: Which Has the Most Must-Have Channels Out of 100? If You Want to Be a Better Pet Parent, AI Can Help I Was Shocked by How Good These Budget TVs Were Trump Phone Looks Different, Has No Launch Date, Isn't Made in America The Apple Watch Series 12 Is Rumored to Revive a Retired iPhone Feature Best Projector of 2026: Tested by Experts Best Home Theater Systems of 2026 How to Use Apple's Clean Up Tool to Remove Unwanted People and Things From Your Photos Today's NYT Strands Hints, Answers and Help for April 12 #770 Today's NYT Connections Hints, Answers and Help for April 12, #1036 Today's Wordle Hints, Answer and Help for April 12, #1758 Today's NYT Mini Crossword Answers for Sunday, April 12 Today's NYT Connections: Sports Edition Hints and Answers for April 12, #566 Watch a Robot Stuff Cash Into a Wallet Just Like You Do This Animation Startup Wants to Make It Easier to Tell Open-Ended Stories The 23 Best Graduation Gifts for 2026 Grand National 2026 Livestream: How to Watch Aintree Horse Racing From Anywhere Amazon Luna to Drop Support for Third-Party Games and Subscriptions in June YouTube Premium Is the Latest Streaming Service to Hike Prices Today's NYT Mini Crossword Answers for Saturday, April 11 Elden Ring: Tarnished Edition for Switch 2 Reignites Controversy Over Game-Key Cards Comcast Adds New StreamSaver Bundles: HBO Max, Disney Plus, Hulu Now Part of the Lineup Samsung's Galaxy Z Fold 7 Just Got a Price Hike, 9 Months After Its Release Microsoft Is Scrubbing the Copilot Name From Some Windows 11 Apps These $299 Glasses Are Like an HDR TV on Your Face Today's NYT Connections: Sports Edition Hints and Answers for April 11, #565 How to Make Sure Your Private Signal Messages Aren't Still Lurking on Your Phone Apple AirPods Max 2 Review: Seemingly Small Changes Make a Substantial Difference
Your Bluetooth Audio Devices Could Be at Risk of Hijackin...
Omar Gallaga · 2026-01-17 · via CNET

Researchers working at KU Leuven University in Belgium are warning people who use Bluetooth audio products that their devices may be at risk due to vulnerabilities in Google's Fast Pair technology, a feature that makes it quicker and easier to connect Bluetooth devices.

Google says it has addressed issues that could allow hackers to hijack audio devices and track their location. But the researchers say the vulnerabilities, which it collectively refers to as WhisperPair, still affect products from device makers including Sony, Harman and Google itself. In their tests, the researchers found these products could be hacked from as far as about 46 feet away.

A Google representative told CNET that it has updated the software for some of its own audio products, including its Pixel Buds Pro, and that some of the vulnerabilities stemmed from other companies not properly following Fast Pair specifications. Google said it had informed companies about this in September.


Don't miss any of our unbiased tech content and lab-based reviews. Add CNET as a preferred Google source.


"We appreciate collaborating with security researchers through our Vulnerability Rewards Program, which helps keep our users safe. We worked with these researchers to fix these vulnerabilities, and we have not seen evidence of any exploitation outside of this report's lab setting," Google said in a statement provided to CNET. "As a best security practice, we recommend users check their headphones for the latest firmware updates. We are constantly evaluating and enhancing Fast Pair and Find Hub security."

In response to specific concerns about device tracking, Google added, "We rolled out a fix on our end to prevent Find Hub network provisioning in this scenario, which completely addresses the potential location tracking issue across all devices."

Google has issued two security updates this month, one for Wear OS and one for Google Pixel devices. Each contains information about the company's security patches.

The WhisperPair research group said it's working on an academic paper detailing its findings. On its website, the researcher group said, "Our findings show how a small usability 'add-on' can introduce large-scale security and privacy risks for hundreds of millions of users."

The research group released a YouTube video discussing problems with Fast Pair, a Google technology introduced in 2017 that connects Bluetooth devices with one tap across Android and Chrome OS.

The group said that it worked with Google after reporting its findings and was awarded a $15,000 bounty. The researchers said they agreed to a 150-day disclosure window in which Google would release security patches. However, the website points out that users of Bluetooth devices like earbuds may not be aware of security updates that could protect them.

The website includes a page where users can look up which audio products are vulnerable, with details on how to get them updated. Google doesn't have detailed information about these vulnerabilities on its Fast Pair Known Issues page.