Some cheap smart glasses are a security disaster

NSB Cyber and Abstract Shield found a dozen flaws in cheap smart glasses, including unauthenticated Bluetooth pairing letting attackers hijack cameras and intercept data.

Researchers tested two low-cost smart glasses models (A$60 and A$110) and found over a dozen flaws across the devices, companion apps, and associated websites. Insecure Bluetooth pairing allows an attacker to connect to unattended glasses without a password, then capture photos and recordings, copy media, and intercept data. A device identifier plus a website weakness could expose users' email addresses and dates of birth, and AI inputs were routed through a Shenzhen server, likely breaching Australian Privacy Principles and Cyber Security Act rules.