Your Wireless Earbuds Were Listening. Not For You.
I want you to sit with that for a moment.
You put a small, wireless, internet-adjacent microphone directly into your ear canal, and you are surprised that someone nearby could hear everything you said. I am not surprised. I have not been surprised since 1994.
CVE-2025-20701. CVSS 8.8. A flaw in the Airoha Bluetooth audio SDK, buried inside the Beats Studio Buds, that allowed a wolf in close physical proximity to pair with your device without your knowledge or consent. No handshake. No prompt. No warning. Just a coyote standing near you at a coffee shop, silently bonded to your ear canal, listening to your conference call.
The incorrect authorization flaw meant the device skipped the part where you get to say no. Which, frankly, is the most 2025 product design philosophy I have ever encountered.
In the old days, if you wanted private audio, you used wired headphones. Copper wire. Electrons. Physics. No firmware, no SDK dependencies, no Bluetooth handshake vulnerabilities. You want to spy on someone using a 1997 pair of Sony MDR-V150s? Good luck. You will need wire cutters and a ladder.
Now the flock is walking around with autonomous, battery-powered, radio-frequency transmitters clipped to their skulls, connected via the Sky Pasture to God-knows-what, and the Shepherds at these companies are calling it "premium audio." Remarkable.
Apple has issued a patch. The ointment has been applied. Whether the lambs will actually update their firmware is, as always, the real vulnerability. Most of them do not know firmware exists. Several of them believe "Bluetooth" is a dental condition.
Remediation
1. Update your Beats Studio Buds firmware immediately. Open the Beats app. Find the firmware update. Apply it. This is not optional. This is hygiene.
2. Audit your Bluetooth paired devices list. If you see something you do not recognize, remove it. Do it now. I will wait.
3. Disable Bluetooth when you are not using it. I know this feels inconvenient. Good. Inconvenience is the price of not having a stranger in your ear.
4. Consider the threat model of putting a microphone in your head. I am not telling you to stop. I am telling you to think. Briefly. Just once.
5. Physical proximity matters here. This was a near-field attack. Crowded trains, open offices, and conference lobbies are your threat surface. Act accordingly.
Stay paranoid, stay patched, and for the love of magnetic tape, use a cable sometimes.
Original Report: https://thehackernews.com/2026/06/apple-patches-beats-studio-buds-flaw.html