Undocumented commands found in Bluetooth chip used by a billion devices
The ubiquitous ESP32 microchip made by Chinese manufacturer Espressif and used by over 1 billion units as of 2023 contains undocumented commands that could be leveraged for attacks.
The undocumented commands allow spoofing of trusted devices, unauthorized data access, pivoting to other devices on the network, and potentially establishing long-term persistence.
This was discovered by Spanish researchers Miguel Tarascó Acuña and Antonio Vázquez Blanco of Tarlogic Security, who presented their findings yesterday at RootedCON in Madrid.
"Tarlogic Security has detected a backdoor in the ESP32, a microcontroller that enables WiFi and Bluetooth connection and is present in millions of mass-market IoT devices," reads a Tarlogic announcement shared with BleepingComputer.
"Exploitation of this backdoor would allow hostile actors to conduct impersonation attacks and permanently infect sensitive devices such as mobile phones, computers, smart locks or medical equipment by bypassing code audit controls."
The researchers warned that ESP32 is one of the world's most widely used chips for Wi-Fi + Bluetooth connectivity in IoT (Internet of Things) devices, so the risk is significant. Bleeping computer
Hashtags
Try Our AI Features
Explore what Daily8 AI can do for you:
Comments
No comments yet...
Related Articles
Ammon
5 days ago
- Ammon
Microsoft makes OpenAI's new open model available on Windows
Ammon News - OpenAI released a new free and open GPT model yesterday that can run on a PC, and now Microsoft is making that easy to do for Windows users. The lightweight gpt-oss-20b model is now available on Windows AI Foundry, and will be coming soon to macOS, too. You'll need a PC or laptop with at least 16GB of VRAM, so you'll need one of the top GPUs from Nvidia or the variety of Radeon GPUs with sufficient VRAM. The gpt-oss-20b model is optimized for code execution and tool use, and Microsoft says it's 'perfect for building autonomous assistants or embedding AI into real-world workflows, even in bandwidth-constrained environments.' Microsoft has pre-optimized gpt-oss-20b for local inference, and it hints that support for more devices is coming soon. That could mean we see a more optimized version for Copilot Plus PCs at some point in the future, much like how Microsoft has been adding a variety of local AI models to Windows recently. Microsoft's speedy addition of OpenAI's latest model to the Windows AI Foundry comes as Amazon was equally quick to adopt the new open-weight GPT-OSS models for its cloud services. It's the first time you can run an OpenAI model locally on Windows, but it's also the first time Microsoft's biggest cloud competitor has had access to the latest OpenAI models — adding another dynamic to the complicated OpenAI and Microsoft partnership. The Verge
Jordan News
5 days ago
- Jordan News
Xiaomi's Audio Model Reshapes the Landscape of Auditory Intelligence - Jordan News
Xiaomi has unveiled its new open-source intelligent audio model, MiDashengLM-7B, marking a major leap forward in its efforts to strengthen the technical backbone of its platforms, including smart home devices and electric vehicles. The model builds upon Xiaomi's foundational audio system, Xiaomi Dasheng. اضافة اعلان Advanced Architecture and Unified Sound Understanding According to Xiaomi's post on Chinese social media platform Weibo, MiDashengLM-7B represents a significant advancement in audio comprehension technologies. It utilizes a cutting-edge architecture that integrates the Xiaomi Dasheng platform as an audio encoder and the Qwen2.5-Omni-7B model as a decoder, creating a seamless system capable of understanding speech, environmental sounds, and music in a unified manner. Innovative Training for Deeper Acoustic Insight The model employs innovative training strategies that redefine audio scene interpretation, enabling it to capture deep auditory meanings, including speaker emotions, spatial echo, and other nuanced features often missed by traditional audio transformation models. High Benchmark Performance MiDashengLM-7B has demonstrated superior performance across 22 public evaluation datasets covering a wide range of tasks, including audio captioning, comprehension, audio-based Q&A, and speech recognition. Its first-token response time in single-pass inference is just a quarter of what leading models require. Moreover, it processes 20 times more audio samples simultaneously under the same GPU memory constraints, giving Xiaomi a clear edge in performance. Precision Audio Processing The model has outperformed notable systems like Whisper and Kimi-Audio on X-ARES benchmarks, especially in non-speech tasks. Dasheng is also used for audio generation tasks such as noise reduction and auditory enhancement. Notably, Xiaomi's Dasheng-Denoiser has already been integrated into major international conferences like Interspeech 2025, showcasing its ability to turn noisy speech into clean audio using targeted encoding and advanced audio restoration networks. Efficient Resource Utilization In terms of computational efficiency, MiDashengLM shows impressive inference speed. For instance, it can process 512 audio samples (30 seconds each) within an 80GB memory environment, while competing models struggle beyond 16 samples. This efficiency also enabled a reduction in audio encoder output frame rates from 25 Hz to 5 Hz, resulting in up to 80% less computational power required. Fully Open Dataset The model was built entirely using 100% publicly available data, amounting to 1.1 million hours spanning a wide range of fields—speech recognition, environmental sound understanding, music analysis, non-verbal behavior, and audio-based interactive tasks. Redefining Audio Data Processing One of MiDashengLM's key breakthroughs is its radical departure from traditional ASR (Automatic Speech Recognition) systems. Instead, it uses comprehensive descriptive alignment mechanisms that integrate all types of sound content—including speech, ambient sounds, and music. This shift reduced the loss of valuable data, which conventional ASR methods often discarded—sometimes up to 90% of the audio content. Real-World Applications and Offline Capabilities MiDashengLM has broad applications, such as providing custom feedback during voice training or language learning, offering real-time insights while driving, or serving as an intelligent assistant that can answer questions about environmental sounds. Xiaomi also plans to expand the model to support offline operation on edge devices, along with enhanced voice editing features based on natural language commands. Transparency and Open Collaboration In a move toward full transparency, Xiaomi revealed all dataset details, including distribution ratios from 77 sources, and the entire training process—from the encoder's initial pretraining to the final fine-tuning. The model is released under the Apache 2.0 license, allowing full freedom for commercial or academic use. Xiaomi has invited the developer community to contribute via GitHub, reinforcing its philosophy of openness, transparency, and collaborative innovation.
Ammon
6 days ago
- Ammon
OpenAI says ChatGPT is on track to reach 700M weekly users
Ammon News - ChatGPT's impressive growth as a consumer app continues as the chatbot is on track to hit 700 million weekly active users this week, the company says. The app had earlier reached 500 million weekly active users as of the end of March, noted Nick Turley, OpenAI VP and head of ChatGPT's app, in a post on X. He also said the app has grown 4x since last year. 'Every day, people and teams are learning, creating, and solving harder problems. Big week ahead. Grateful to the team for making ChatGPT more useful and delivering on our mission so everyone can benefit from AI,' he posted. The app's popularity increased after OpenAI launched an upgraded image-generation feature, powered by the GPT-4 model, in March. In early April, the company's COO, Brad Lightcap, said that more than 130 million users had created over 700 million images in just a few days after the launch. The company has also seen an increase in subscribers. Last week, Lightcap said that ChatGPT had 5 million paying business users, up from 3 million in June. In a recent report, market intelligence firm Sensor Tower noted that users are using ChatGPT for more than 12 days a month on average, only behind Google and X. The report also said that in H1 2025, users spent an average of 16 minutes per day on the app. TechCrunch
