Apple has released a firmware update for Beats Studio Buds headphones after discovering a vulnerability that allowed a nearby attacker to activate the microphone without the user noticing. This meant that anyone with close physical access could listen to private conversations without consent. The company recommends installing the update immediately to prevent the device from becoming a spying tool.
How the flaw works and why it is critical 🛡️
The vulnerability, identified as CVE-2025-24214, affects the headphone firmware and allows an attacker within Bluetooth range to manipulate the microphone state without user interaction. It requires no prior pairing or malicious apps. Apple fixed the issue in firmware version 2C362. Users should update via the Beats app or Bluetooth settings on iOS. It is a reminder that audio devices are real attack vectors.
Your headphones are no longer recording your private life (for now) 😅
Fortunately, the next time you talk about your world domination plans or your secret croquette recipe, your Beats won't be sharing it with the neighbor. Apple has plugged the hole before it turned into a Netflix series. So you know: update your headphones, keep your mouth shut in the elevator, and if you see someone very close to your ear, it might not be affection, just a curious person with bad intentions.