https://feed.craftedsignal.io/vendors/ttlock/Trending threats, MITRE ATT&CK coverage, and detection metadata. Fed continuously.Hugoenhello@craftedsignal.iohello@craftedsignal.ioMon, 26 Oct 2026 19:44:32 +0000https://feed.craftedsignal.io/favicon-32x32.pnghttps://feed.craftedsignal.io/3232https://feed.craftedsignal.io/favicon.svghttps://feed.craftedsignal.io/briefs/2026-10-ttlock-ble-vulnerability/Mon, 26 Oct 2026 19:44:32 +0000hello@craftedsignal.iohttps://feed.craftedsignal.io/briefs/2026-10-ttlock-ble-vulnerability/TTLock Android applications before v9.8.260718 and associated smart-lock firmware utilize a hardcoded static AES key, allowing an attacker within Bluetooth range to intercept session keys and forge administrative commands.<p>TTLock Android application versions prior to v9.8.260718 and associated smart-lock firmware contain a hardcoded static AES key. This vulnerability allows an attacker within Bluetooth range to decrypt the per-pairing session key, recover the persistent session key, and forge authenticated BLE requests to unlock the device, add fingerprints or access codes, or perform administrative actions without authentication or user interaction.</p> highadvisory