Apple has recently patched a significant security vulnerability affecting its Beats Studio Buds. This flaw, which had the potential to allow hackers to listen in on users through the device’s microphone, has been addressed in the latest Beats Firmware Update 1B211, released on June 16, 2026.
Details of the Vulnerability
The vulnerability was identified by security researchers Dennis Heinze and Frieder Steinmetz from ERNW GmbH. It was cataloged as CVE-2025-20701 and impacted users by exploiting a weakness in open-source code within Apple’s software. Specifically, it enabled unauthorized access to the earbuds’ microphone when they were searching for pairing connections.
This security flaw meant that any attacker within Bluetooth range could potentially connect to the earbuds without authorization, accessing live audio broadcasts. The proximity requirement, typically around 10 meters, limits the threat, but the lack of needed prior pairing made the risk particularly severe in public spaces such as offices or cafes.
Technical Aspects and Mitigation
While Apple has not shared in-depth technical details about the exploit, the vulnerability seems to stem from improper authentication during Bluetooth pairing. This unauthorized access posed a high risk of eavesdropping, with the possibility of capturing sensitive conversations without user consent.
To mitigate the threat, Apple has released a patch through Firmware Update 1B211, which is automatically applied to Beats Studio Buds when they are connected to an iPhone, iPad, or Mac. Users can confirm the update by checking the firmware version in their device settings. On an iPhone or iPad, navigate to Settings > Bluetooth and tap the info icon next to the earbuds. On a Mac, go to System Settings > Bluetooth and select the connected device.
Ongoing Security Measures and Recommendations
This incident underscores the ongoing risks associated with wireless communication technologies like Bluetooth. As devices increasingly rely on seamless connectivity, the attack surface for potential threats expands. Apple has credited external researchers for discovering the flaw, acknowledging the shared responsibility in maintaining software security.
Users are advised to ensure their devices are updated to the latest firmware to safeguard against such vulnerabilities. Additionally, disabling Bluetooth when not in use and avoiding pairing in untrusted environments can further reduce risk. Apple encourages users to monitor its security updates page for new advisories and to keep all connected devices current.
For further updates, you can follow Apple’s announcements on Google News, LinkedIn, and X.
