BlueBorne Bluetooth Flaws Left Billions of Devices Open to Silent Takeover

Armis Labs disclosed BlueBorne, a cluster of Bluetooth implementation vulnerabilities that exposed Android, Windows, Linux, older iOS versions, and some older macOS systems to attack without pairing, user interaction, or even an IP connection. The flaws, reported as eight to nine bugs across affected platforms, included remote code execution, man-in-the-middle, information disclosure, and full device takeover scenarios. Researchers said an infected device could invisibly reach nearby targets over Bluetooth from roughly 32 feet away, potentially intercept data, deliver malware, and spread in a worm-like fashion across phones, PCs, smartwatches, TVs, cars, drones, medical devices, and other IoT systems.

At disclosure, Armis estimated 5.3 billion devices were vulnerable, and US-CERT warned that millions of unpatched systems could be affected. Although patches were issued for some platforms, including Microsoft Windows and newer Android releases, older Android devices, many Linux systems, and unsupported Apple devices remained difficult to secure. A year after the flaws were revealed, Armis said more than two billion devices were still exposed because users had not installed updates or their hardware no longer received vendor support, underscoring the long tail of Bluetooth risk across legacy and embedded systems.