Apple fixes Beats Studio Buds flaw that let hackers spy on conversations

The vulnerability stemmed from a missing authentication weakness in the Airoha SoC's Bluetooth implementation — a third-party chip supplier embedded in Apple's Beats Studio Buds — highlighting how supply chain dependencies can introduce critical security gaps into consumer devices. Attackers within Bluetooth range could chain this flaw with other vulnerabilities to eavesdrop on conversations, read device memory, and potentially initiate calls without user knowledge. This matters because IoT and audio devices are rarely considered high-risk attack surfaces, yet they process sensitive audio data in personal and professional environments. The incident underscores that firmware security and authentication controls must be enforced at the hardware component level, not just in the application layer.