Bluetooth vulnerability in audio devices can be exploited to spy on users

**Executive summary:** ERNW researchers disclosed three vulnerabilities in Airoha SoC–based Bluetooth audio devices used by many major vendors that can let a nearby, skilled attacker hijack the connection to a phone to initiate calls, eavesdrop on conversations, and potentially access call history or contacts; 29 consumer devices were confirmed affected and users should watch for vendor firmware updates and restart devices if connections drop.