802.11 · BLUETOOTH · 2026
Radios on are reachable.
A nearby operator can reach a phone over Wi-Fi or Bluetooth even when it is not joined to a network and cellular data is off. The bugs live in the radios, not in the SIM.
HARDENING POSTURE
OPEN
0 of 28 controls in place. Checklists live on Defend. They stay on this device.
2026 AT A GLANCE
The doors that still work
- Mar 2026Architectural — no single patch
AirSnitch
A cross-layer identity flaw that bypasses the client isolation WPA2 and WPA3 rely on, then intercepts and rewrites traffic in both directions.
- 2025–2026Firmware update required
WhisperPair
A Fast Pair implementation flaw. Devices answer malicious pairing requests even when they are not in pairing mode, then hand over mic, audio, and Find Hub tracking.
- Jul 2026Remove the app — no root required
RedHook
Android malware that needs no root and no USB cable. It rides Accessibility permission into Wireless Debugging, then takes a shell.
- Aug 2026Relays even with data and Wi-Fi off
Manic trojan
When the infected phone cannot reach the internet, Manic walks stolen data across nearby infected devices over Wi-Fi Direct or Bluetooth — up to four hops.
Watch the LAN
Inventory lives on this device. Score the five classic tells.
Wireless convenience is a two-sided blade. There is no single switch that closes 802.11, Fast Pair, and malware at once. Configuration, monitoring, and updates together — defense in depth — is the whole method.