If you have an Apple device and tend to have your Bluetooth on in public, there’s a chance someone could use it to exploit your device. Despite laying dormant for years, a Bluetooth security flaw has just been spotted and according to the Android Security Bulletin, it is a ‘critical security vulnerability.’
As originally spotted by Marc Newlin from Sky Safe, any user who connects a Magic Keyboard to their MacBook can be vulnerable. A person running Linux can register their device to it, effectively causing keystroke-injection vulnerabilities – mimicking keystrokes by the legitimate user. This can be used to steal information, run commands on the device, and more. These vulnerabilities were disclosed to Apple on August 1st this year, followed by a public disclosure on December 6th.
