Some iPhones, iPads, and Macs are vulnerable to short-range attacks via Bluetooth which could fool them into thinking they are connected to a trusted device. That would then enable an attacker to both send and request data via Bluetooth.
The same security vulnerability is found in a wide range of chips from Intel, Qualcomm, and Samsung, meaning that a large number of non-Apple devices are also affected …
The vulnerability relies on impersonating a previously-paired device and is thus dubbed Bluetooth Impersonation AttackS (BIAS).
Worryingly, BIAS attacks can impersonate either a ‘slave’ or ‘master’ device, meaning that the target device can be asked to either send data or, as in the case of a Bluetooth keyboard, accept it.
The attack works against any device which uses the Bluetooth Classic protocol. This includes some relatively recent Apple devices, including:
- iPhone 8 or older
- 2018 iPad or older
- 2017 MacBook Pro or older
Read more at 9to5Mac.com