Xeno Kovah
@xenokovah@infosec.exchange
Interested in reverse engineering, firmware, bluetooth, trusted computing, and training. Founder of @OpenSecurityTraining2 https://ost2.fyi
infosec.exchange
🔵🦷🔒📈🆙‼️Bluetooth Security Timeline Update 2026-07-18!
(Meant to post this last week but forgot)
2026-06-27
"Pwning Bluetooth Devices in Unexpected Ways"
By Damien Cauquil @virtualabs@mamot.fr
Added to the Bluetooth Security Timeline: https://darkmentor.com/bt.html#Pwning%20Bluetooth%20Devices%20in%20Unexpected%20Ways:%5B%5BPwning%20Bluetooth%20Devices%20in%20Unexpected%20Ways%5D%5D%20%5B%5BBluetooth%20Security%20Timeline%5D%5D%20%24%3A%2FTagManager
2026-06-05
"The BlueFrag Zero-Click: A System Replay"
By Akshit Singh
Added to the Bluetooth Security Timeline: https://darkmentor.com/bt.html#The%20BlueFrag%20Zero-Click%3A%20A%20System%20Replay:%5B%5BThe%20BlueFrag%20Zero-Click%3A%20A%20System%20Replay%5D%5D%20%5B%5BBluetooth%20Security%20Timeline%5D%5D%20%24%3A%2FTagManager
2026-06-03
"Pwnd Blaster: Hacking your PC using your speaker without ever touching it"
By Rasmus Moorats
Added to the Bluetooth Security Timeline: https://darkmentor.com/bt.html#Pwnd%20Blaster%3A%20Hacking%20your%20PC%20using%20your%20speaker%20without%20ever%20touching%20it:%5B%5BPwnd%20Blaster%3A%20Hacking%20your%20PC%20using%20your%20speaker%20without%20ever%20touching%20it%5D%5D%20%5B%5BBluetooth%20Security%20Timeline%5D%5D%20%24%3A%2FTagManager
2026-04-17
"Opsec oopsie: Dutch navy frigate location outed by mailing it a Bluetooth tracker"
By Just Vervaart @just@journa.host
Added to the Bluetooth Security Timeline: https://darkmentor.com/bt.html#Opsec%20oopsie%3A%20Dutch%20navy%20frigate%20location%20outed%20by%20mailing%20it%20a%20Bluetooth%20tracker:%5B%5BOpsec%20oopsie%3A%20Dutch%20navy%20frigate%20location%20outed%20by%20mailing%20it%20a%20Bluetooth%20tracker%5D%5D%20%5B%5BBluetooth%20Security%20Timeline%5D%5D%20%24%3A%2FTagManager
2026-01-15
"WhisperPair: Hijacking Bluetooth Accessories Using Google Fast Pair"
By Sayon Duttagupta et al.
Added to the Bluetooth Security Timeline: https://darkmentor.com/bt.html#WhisperPair%3A%20Hijacking%20Bluetooth%20Accessories%20Using%20Google%20Fast%20Pair:%5B%5BWhisperPair%3A%20Hijacking%20Bluetooth%20Accessories%20Using%20Google%20Fast%20Pair%5D%5D%20%5B%5BBluetooth%20Security%20Timeline%5D%5D%20%24%3A%2FTagManager
2026-01-06
"Reverse engineering my cloud-connected e-scooter and finding the master key to unlock all scooters"
By Rasmus Moorats
Added to the Bluetooth Security Timeline: https://darkmentor.com/bt.html#Reverse%20engineering%20my%20cloud-connected%20e-scooter%20and%20finding%20the%20master%20key%20to%20unlock%20all%20scooters:%5B%5BReverse%20engineering%20my%20cloud-connected%20e-scooter%20and%20finding%20the%20master%20key%20to%20unlock%20all%20scooters%5D%5D%20%5B%5BBluetooth%20Security%20Timeline%5D%5D%20%24%3A%2FTagManager
2025-10-10
"Paint it Blue: Attacking the Bluetooth stack"
By Mehdi Talbi and Etienne Helluy-Lafont
Added to the Bluetooth Security Timeline: https://darkmentor.com/bt.html#Paint%20it%20Blue%3A%20Attacking%20the%20Bluetooth%20stack:%5B%5BPaint%20it%20Blue%3A%20Attacking%20the%20Bluetooth%20stack%5D%5D%20%5B%5BBluetooth%20Security%20Timeline%5D%5D%20%24%3A%2FTagManager
2025-09-01
"Sniffing established BLE connections with HackRF One"
By Clément Ballabriga
Added to the Bluetooth Security Timeline: https://darkmentor.com/bt.html#Sniffing%20established%20BLE%20connections%20with%20HackRF%20One:%5B%5BSniffing%20established%20BLE%20connections%20with%20HackRF%20One%5D%5D%20%5B%5BBluetooth%20Security%20Timeline%5D%5D%20%24%3A%2FTagManager
2025-08-04
"The Perfect BLEnd: Reverse engineering a bluetooth controlled blender for better smoothies"
By Edward Farrell and Ryan Mast
Added to the Bluetooth Security Timeline: https://darkmentor.com/bt.html#The%20Perfect%20BLEnd%3A%20Reverse%20engineering%20a%20bluetooth%20controlled%20blender%20for%20better%20smoothies:%5B%5BThe%20Perfect%20BLEnd%3A%20Reverse%20engineering%20a%20bluetooth%20controlled%20blender%20for%20better%20smoothies%5D%5D%20%5B%5BBluetooth%20Security%20Timeline%5D%5D%20%24%3A%2FTagManager
2025-06-17
"nRF54L15 Electromagnetic Fault Injection"
By Matthias Kesenheimer @mkesenheimer@mastodon.social
Added to the Bluetooth Security Timeline: https://darkmentor.com/bt.html#nRF54L15%20Electromagnetic%20Fault%20Injection:%5B%5BnRF54L15%20Electromagnetic%20Fault%20Injection%5D%5D%20%5B%5BBluetooth%20Security%20Timeline%5D%5D%20%24%3A%2FTagManager
2025-03-28
"Is Your Bluetooth Chip Leaking Secrets via RF Signals?"
By Yanning Ji et al.
Added to the Bluetooth Security Timeline: https://darkmentor.com/bt.html#Is%20Your%20Bluetooth%20Chip%20Leaking%20Secrets%20via%20RF%20Signals%3F:%5B%5BIs%20Your%20Bluetooth%20Chip%20Leaking%20Secrets%20via%20RF%20Signals%3F%5D%5D%20%5B%5BBluetooth%20Security%20Timeline%5D%5D%20%24%3A%2FTagManager
2025-01-12
"Detecting BLE Trackers for the price of a Gas Station Hot Dog"
By Bill Swearingen and Larry Pesce
Added to the Bluetooth Security Timeline: https://darkmentor.com/bt.html#Detecting%20BLE%20Trackers%20for%20the%20price%20of%20a%20Gas%20Station%20Hot%20Dog:%5B%5BDetecting%20BLE%20Trackers%20for%20the%20price%20of%20a%20Gas%20Station%20Hot%20Dog%5D%5D%20%5B%5BBluetooth%20Security%20Timeline%5D%5D%20%24%3A%2FTagManager
2024-10-29
"Brightway security revisted: Xiaomi 4 Pro 2nd Gen"
By robocoffee
Added to the Bluetooth Security Timeline: https://darkmentor.com/bt.html#Brightway%20security%20revisted%3A%20Xiaomi%204%20Pro%202nd%20Gen:%5B%5BBrightway%20security%20revisted%3A%20Xiaomi%204%20Pro%202nd%20Gen%5D%5D%20%5B%5BBluetooth%20Security%20Timeline%5D%5D%20%24%3A%2FTagManager
2024-09-26
"LibrePods: AirPods liberated from Apple's ecosystem"
By Kavish Devar
Added to the Bluetooth Security Timeline: https://darkmentor.com/bt.html#LibrePods%3A%20AirPods%20liberated%20from%20Apple's%20ecosystem:%5B%5BLibrePods%3A%20AirPods%20liberated%20from%20Apple's%20ecosystem%5D%5D%20%5B%5BBluetooth%20Security%20Timeline%5D%5D%20%24%3A%2FTagManager
2024-03-28
"ChatTracer: Large Language Model Powered Real-time Bluetooth Device Tracking System"
By Qijun Wang et al.
Added to the Bluetooth Security Timeline: https://darkmentor.com/bt.html#ChatTracer%3A%20Large%20Language%20Model%20Powered%20Real-time%20Bluetooth%20Device%20Tracking%20System:%5B%5BChatTracer%3A%20Large%20Language%20Model%20Powered%20Real-time%20Bluetooth%20Device%20Tracking%20System%5D%5D%20%5B%5BBluetooth%20Security%20Timeline%5D%5D%20%24%3A%2FTagManager
2023-02-22
"Hacking Brightway scooters: A case study"
By robocoffee
Added to the Bluetooth Security Timeline: https://darkmentor.com/bt.html#Hacking%20Brightway%20scooters%3A%20A%20case%20study:%5B%5BHacking%20Brightway%20scooters%3A%20A%20case%20study%5D%5D%20%5B%5BBluetooth%20Security%20Timeline%5D%5D%20%24%3A%2FTagManager
2022-06-27
"BLAP: Bluetooth Link Key Extraction and Page Blocking Attacks"
By Changseok Koh et al.
Added to the Bluetooth Security Timeline: https://darkmentor.com/bt.html#BLAP%3A%20Bluetooth%20Link%20Key%20Extraction%20and%20Page%20Blocking%20Attacks:%5B%5BBLAP%3A%20Bluetooth%20Link%20Key%20Extraction%20and%20Page%20Blocking%20Attacks%5D%5D%20%5B%5BBluetooth%20Security%20Timeline%5D%5D%20%24%3A%2FTagManager
2022-04-18
"Exploring Xiaomi's new firmware security measures"
By robocoffee
Added to the Bluetooth Security Timeline: https://darkmentor.com/bt.html#Exploring%20Xiaomi's%20new%20firmware%20security%20measures:%5B%5BExploring%20Xiaomi's%20new%20firmware%20security%20measures%5D%5D%20%5B%5BBluetooth%20Security%20Timeline%5D%5D%20%24%3A%2FTagManager
That’s it for now. As always, LMK any I missed!
