TECH
Apple patches high‑severity Bluetooth eavesdropping flaw in Beats Studio Buds
Ars Technica reported that Apple released firmware update 1B211 for Beats Studio Buds to fix CVE‑2025‑20701, a high‑severity Bluetooth flaw that let nearby attackers impersonate paired devices and listen through the earbuds’ microphone. The vulnerability, part of a suite of Airoha‑chip flaws disclosed a year ago, has also been patched by Jabra, Bose, JBL and other manufacturers. Researchers warned that, while exploitation requires close proximity, users should disable Bluetooth when not needed.
Microsoft finds new lightweight Crypto Clipper backdoor that steals cryptocurrency
Microsoft reported a new self‑propagating malware, dubbed Crypto Clipper, that spreads via malicious .lnk files on USB drives. The lightweight backdoor watches clipboard content for cryptocurrency seed phrases or wallet addresses, captures a few screenshots, and exfiltrates the data through a built‑in Tor client using a local SOCKS5 proxy. It also replaces stolen addresses with those controlled by the attacker, giving the group ongoing control of compromised machines. Microsoft Defender for Endpoint can flag the activity as suspicious JavaScript, curl‑based exfiltration, or Trojan: Win32/CryptoBandits.A.
NASA launches swift rescue mission to boost aging telescope
NASA awarded Katalyst Space Technologies a $30 million contract to build and launch the Link servicing spacecraft, which will rendezvous with the Swift observatory and raise its decaying orbit. The satellite, equipped with robotic arms and thrusters, is set to launch aboard a Pegasus XL rocket on June 27 after an accelerated development and testing schedule. Ars Technica reports that the fast‑tracked mission aims to preserve Swift’s valuable gamma‑ray burst observations before atmospheric drag forces it to re‑enter.
Waymo recalls nearly 4,000 robotaxis over missed construction zone signs
Waymo announced a recall of 3,871 fifth‑generation robotaxis after the vehicles failed to recognize freeway construction‑zone signage, driving past closure warnings and between lane‑closure cones in Phoenix and the San Francisco Bay Area. The company's Field Safety Committee responded by imposing a temporary ban on freeway driving for the affected fleet while a software fix is developed. Vehicles not capable of driverless freeway operation are not affected, and the recall follows earlier issues such as flooding‑related software updates.
FDA advisors unanimously back Moderna’s mRNA flu vaccine candidate
The FDA’s Vaccines and Related Biological Products Advisory Committee voted 9‑0 to support approval of Moderna’s seasonal mRNA flu vaccine, mRNA‑1010 (mFlusiva), after reviewing phase 3 data showing about 27% higher efficacy than standard flu shots and a solid safety profile. The vote follows earlier controversy in which a Trump‑appointed official blocked the review, a decision later reversed amid criticism. Final FDA approval must still be issued by August 5, and the vaccine’s use will also require a recommendation from the CDC’s advisory panel, which is currently stalled by legal challenges.
NASA picks Eric Schmidt’s Relativity Space for 2028 Mars mission
NASA has chosen Relativity Space, the rocket company led by former Google executive Eric Schmidt, to launch its Aeolus payload to Mars in 2028. The Aeolus instrument suite will deliver daily global data on Martian winds, temperature, dust and clouds to improve entry, descent and landing planning for future crewed missions. The Verge notes the selection follows an earlier TechCrunch report and comes as Relativity prepares its larger Terran R rocket while its first 3D‑printed Terran 1 failed shortly after launch.
Researchers disclose bootrom exploit for A12 and A13 iPhones
Security researchers at Paradigm Shift released a checkm8‑style BootROM vulnerability, dubbed “usbliter8”, that impacts iPhone XS, XR, 11, 11 Pro and other devices powered by Apple’s A12 and A13 chips. The flaw resides in immutable BootROM code tied to the Synopsys DesignWare USB controller, cannot be patched, and requires physical access and DFU mode to run unsigned code and alter the secure boot chain, though it does not compromise the Secure Enclave. The team disclosed the issue to Apple before publishing; Apple has not commented and the only practical mitigation is replacing the affected hardware.
Nothing cancels CMF phone launch due to soaring RAM costs
The Verge reports that Nothing co‑founder Akis Evangelidis announced on X that a successor to the CMF Phone 2 Pro will not be released this year because memory component prices have risen dramatically, making a sensible price point impossible. CEO Carl Pei added that RAM costs have doubled since the device’s design phase and now constitute the most expensive component in a smartphone. The outlet also notes that other manufacturers, such as Apple, are feeling the same pressure, with Tim Cook calling RAM expenses unsustainable and indicating upcoming price hikes.
Hackers leak Knicks and MSG data after championship win
Hackers affiliated with the ShinyHunters group posted a dump of personal information from Madison Square Garden and the New York Knicks, including talent lists, addresses, contact details and internal emails. The data appears to have been stolen before the Knicks’ NBA Finals victory but was released days after the win, drawing heightened attention. 404 Media reviewed a sample that shows former players, coaches and other celebrities labeled as “low risk” or “high risk,” and notes the hackers are demanding payment to delete the information.
Ubisoft co‑founder Claude Guillemot killed in Cessna crash
Engadget reported that 69‑year‑old Claude Guillemot, one of Ubisoft's co‑founders, died in a Cessna 421 crash near La Baule airport on France's western coast on June 19. Ubisoft confirmed his death, noting his roles as co‑founder, board member and chairman of Guillemot Corp., and expressed sorrow for his family. The accident involved two victims and the aircraft was on fire when emergency responders arrived.