Microsoft blocks BLE security keys with known pairing vulnerability

Use Bluetooth devices with your computer? There’s a potential problem which you should be aware of and patch…:

Windows security update will block pairing of certain weak BLE security keys at the OS level.

This security advisory — ADV190016 — is part of Microsoft’s June 2019 Patch Tuesday updates, which the company released just a few hours ago.

This means that after applying today’s security updates, Windows users will be protected at the OS level against any unknown BLE device pairings that may also be vulnerable to this attack.


For Linux and macOS users, it is recommended that they follow Google’s advice on this matter, and only pair BLE security keys with their operating systems in environments where an attacker is not physically near.


Original Article