.webp)
A vulnerability was recently discerned by Marc Newlin, Principal Reverse Engineer for Skysafe. This vulnerability, classified as CVE-2023-45866 allows unauthenticated keystroke-injection through Bluetooth. This is done by tricking the Bluetooth host machine into pairing with a fake keyboard through an unauthenticated pairing mechanism defined in the Bluetooth specification.
The vulnerability impacts a number of devices, the full catalog of which is not available at this time, but there have been tests with:
Regardless of these tests, this vulnerability has the potential to affect all Bluetooth-capable devices. The vulnerability can allow a nearby or network-adjacent attacker to connect to a vulnerable device over unauthenticated Bluetooth and inject keystrokes for malicious activity.
Review your use of Bluetooth-capable devices and disable connectivity on devices to prevent malicious exploitation of this vulnerability. Review vendor recommendations for any Bluetooth-capable devices and be on the lookout for patches that may become available. This vulnerability shows that Bluetooth is inherently unauthenticated. Therefore, use of the protocol should be limited whenever possible.
Google has announced that fixes for the issues that affected Android 11 through 14 are available. All currently-supported Pixel devices will receive this fix via December OTA updates.
BlueZ Linux Bluetooth protocol has provided a patch to this vulnerability.
Not many vendors have produced patches for this vulnerability yet.
This vulnerability allows a network adjacent attack to inject keystrokes into a user’s device. This can allow them to run commands in the context of the user. Depending on the access of the user, the impact could change dramatically. However, data loss, disclosure, and exfiltration are all possible consequences as is the installation of malware.
Review use of Bluetooth protocol: This vulnerability depends on the attacker being able to connect to the device using Bluetooth. Depending on use case it is possible to mitigate this vulnerability by completely disabling Bluetooth capability on devices.
Stay informed: Many vendors have not provided patches to this vulnerability yet. It is paramount to stay on top of this CVE to ensure that if a patch become available, it is applied promptly.
On this episode of the CyberWatch podcast, there are updates to software across the application and OS spectrum. New malicious campaigns are threatening victims of all sizes, and researchers have performed dissections on malware to give defenders new clues about just what it is they're fighting. All this today, in CyberWatch.
As we conclude our 'ransomware readiness week' of this Cybersecurity Awareness Month, it's time to take a critical look at your organization's defenses. Ransomware attacks are becoming more sophisticated, and no business is immune. In our latest article, we explore essential strategies to bolster your ransomware preparedness. Don't miss this vital information to help protect your business from emerging threats.
Ethical hacking has become an essential response to an IT industry kept on its toes by a spectrum of bad actors with malicious intent. This article introduces two prominent methodologies that help the good guys fight back: penetration testing (pen-testing) and red teaming. Learn more here.
Host Geoff Hancock was joined by guests Mike Rush, Director of Threat Intelligence at Access Point Consulting; and Evie Manning, Senior Director of Threat Hunting and Intelligence at Access Point Consulting. Together, they talked about cyber threat intelligence and the applications that can make it work for small and medium-sized businesses.
