New Bluetooth vulnerability can hack a phone in 10 seconds