https://www.cnet.com/news/bluetooth-pairing-has-a-security-hole-get-ready-for-updates/

When you pair a couple of

            Bluetooth
     devices, like your phone and computer, they exchange encryption keys. But it turns out the Bluetooth specification didn't require that both of them completely validate those keys. Well, it does now. 

> This comes after it was revealed Tuesday that an attacker within wireless reach could insert themselves into communications between the two devices if both failed to properly validate the keys. That's according to the Bluetooth SIG and Carnegie Mellon's CERT, with some updates catalogued by ZDNet.