Black & White Path

May 7, 2026 · Information Security

WhisperPair Vulnerability Enables Remote Hijacking of Millions of Bluetooth Headphones

Security researchers from KU Leuven discovered a critical flaw in Google’s Fast Pair protocol, dubbed WhisperPair, that allows an attacker within 15 seconds and Bluetooth range to silently take over popular headphones such as Sony WH‑1000XM4/5/6, inject audio, eavesdrop, hijack calls, and even track the user’s location.