"Security Researchers Discover Flaws in Wi-Fi Bluetooth SoCs"

Researchers from the University of Darmstadt have published a paper discussing several security vulnerabilities that could impact billions of devices globally. The highlighted vulnerabilities are said to affect wireless Systems-on-Chip (SoCs) that combine a Wi-Fi and Bluetooth module into a single package and leverage resources shared between the two processors. Various security measures are generally incorporated by devices that use Bluetooth in order to protect against remote attacks. These measures include encryption, random number generation, and real-time process monitoring. However, the researchers outlined new attacks that take advantage of the lack of hardware security in many popular SoCs, can be executed to steal private data (e.g., Wi-Fi keys), and can enable remote code execution. Affected devices include those produced by Broadcom, Cypress, and Silicon Labs. This article continues to discuss the vulnerabilities found in Wi-Fi Bluetooth SoCs that could leave billions of devices open to attack, whether these flaws are fixable, and why it is difficult to defend against hardware bugs. 

Electropages Media reports "Security Researchers Discover Flaws in Wi-Fi Bluetooth SoCs"