<?xml version="1.0" encoding="utf-8" standalone="yes"?><rss version="2.0" xmlns:atom="http://www.w3.org/2005/Atom"><channel><title>Bluetooth on HackingPassion.com : root@HackingPassion.com-[~]</title><link>https://hackingpassion.com/tags/bluetooth/</link><description>Recent content in Bluetooth on HackingPassion.com : root@HackingPassion.com-[~]</description><generator>Hugo</generator><language>en</language><lastBuildDate>Fri, 02 Jan 2026 13:27:00 +0100</lastBuildDate><atom:link href="https://hackingpassion.com/tags/bluetooth/index.xml" rel="self" type="application/rss+xml"/><item><title>70 Million Bluetooth Chips Have a Backdoor: Sony, Bose, JBL Headphones at Risk</title><link>https://hackingpassion.com/airoha-bluetooth-backdoor-sony-bose-jbl/</link><pubDate>Fri, 02 Jan 2026 13:27:00 +0100</pubDate><guid>https://hackingpassion.com/airoha-bluetooth-backdoor-sony-bose-jbl/</guid><description>&lt;p>Your headphones just became a backdoor to your phone. No pairing. No popup. Just Bluetooth range. 70 million chips. Sony. Bose. Marshall. JBL. A debug protocol active on production devices. Attackers can dump your Bluetooth keys, impersonate your headphones, and hijack your phone. 🤔&lt;/p>
&lt;p>Three CVEs. Zero authentication required. Full technical disclosure: December 27, 2025 at 39C3.&lt;/p>
&lt;p>The vulnerabilities&lt;/p>
&lt;p>→ CVE-2025-20700: No authentication on Bluetooth Low Energy
→ CVE-2025-20701: No authentication on Bluetooth Classic
→ CVE-2025-20702: Debug protocol exposed that should never be accessible&lt;/p></description></item></channel></rss>