Urgent warning to iPhone users — turn off popular feature and take these steps for safety
Apple's AirPlay feature is beloved by many users — but it can leave you vulnerable to hackers.
Researchers at cybersecurity firm Oligo found major security flaws in Apple AirPlay that allow hackers to hijack compatible devices on the same Wi-Fi network.
AirPlay allows users to seamlessly stream audio, video or photos from their Apple device to another Apple device or third-party gadgets that integrate the protocol.
The 23 vulnerabilities, dubbed 'AirBorne,' were found both in Apple's AirPlay protocol and the AirPlay Software Development Kit (SDK) used by third-party vendors to make devices AirPlay compatible, Wired reported.
Researchers demonstrated in a video how vulnerabilities can be exposed to hackers by accessing an AirPlay-enabled Bose speaker on the same network and remotely executing a Remote Code Execution (RCE) attack, showing the 'AirBorne' logo on the speaker's display.
They claimed that hackers realistically can use a similar strategy to gain access to devices with microphones for espionage.
Oligo CTO Gal Elbaz told Wired that the total number of exposed devices could potentially be in the millions.
'Because AirPlay is supported in such a wide variety of devices, there are a lot that will take years to patch — or they will never be patched,' Elbaz explained. 'And it's all because of vulnerabilities in one piece of software that affects everything.'
Oligo CTO Gal Elbaz told Wired that the total number of exposed devices could potentially be in the millions.
Gorodenkoff – stock.adobe.com
The risks were reported to Apple in the late fall and winter of last year, and Oligo worked with the tech giant for months on fixes before publishing their findings Tuesday.
Apple devices with iOS 18.4, iPadOS 18.4, macOS Ventura 13.7.5, macOS Sonoma 14.7.5, macOS Sequoia 15.4 and visionOS 2.4 had fixes rolled out on March 31.
However, third-party devices that support AirPlay protocol remain vulnerable. The researchers said that manufacturers would need to roll out updates for users to install themselves in order to avoid being exposed to hackers.
AirPlay allows users to seamlessly stream audio, video or photos from their Apple device to another device.
DenPhoto – stock.adobe.com
Apple told Wired that it created patches available for these third-party devices, but it emphasized that there are 'limitations' to the attacks that would be possible on AirPlay-enabled devices due to the bugs.
CarPlay-equipped systems are also at risk, the researchers noted, since hackers can carry out an RCE attack if they are near the unit and 'the device has a default, predictable, or known Wi-Fi hotspot password.'
According to the report, there are several ways to help protect your device from the threat of hackers:
Update your devices: Researchers stressed that devices and other machines that support AirPlay need to be updated immediately to the latest software versions to mitigate potential security risks.
Researchers stressed that devices and other machines that support AirPlay need to be updated immediately to the latest software versions to mitigate potential security risks. Disable AirPlay Receiver: Oligo recommends fully disabling the AirPlay feature when not in use.
Oligo recommends fully disabling the AirPlay feature when not in use. Only AirPlay to trusted devices: Limit AirPlay communication and stream content to only trusted devices.
Limit AirPlay communication and stream content to only trusted devices. Restrict AirPlay Settings: Go to Settings > AirPlay & Continuity (or AirPlay & Handoff) and select Current User for the 'Allow AirPlay for' option. 'While this does not prevent all of the issues mentioned in the report, it does reduce the protocol's attack surface,' researchers noted.
Go to Settings > AirPlay & Continuity (or AirPlay & Handoff) and select Current User for the 'Allow AirPlay for' option. 'While this does not prevent all of the issues mentioned in the report, it does reduce the protocol's attack surface,' researchers noted. Disable on public Wi-Fi: It's best to avoid enabling or using AirPlay when on a public Wi-Fi network.
Hashtags
Try Our AI Features
Explore what Daily8 AI can do for you:
Comments
No comments yet...
Related Articles
Digital Trends
4 hours ago
- Digital Trends
3 big iOS 19 changes that I hope Apple reveals at WWDC 2025
We're less than two days away from Apple's big WWDC 2025 keynote, where the company will reveal new versions of each of its software platforms. One of the biggest changes this year is the expected shift from iOS 19 to iOS 26, with new versions of macOS, iPadOS, tvOS, watchOS, and visionOS also set to follow suit. We're also expecting to see the evolution of Apple Health, including a new AI doctor and Health subscription. iOS 26, if it is to be named that, is expected to introduce one of the biggest evolutions in design for Apple software since the first iPhone was launched. Inspired by visionOS and the Apple Vision Pro, it's expected to be a monumental redesign, but I hope that Apple also takes the time to make a few improvements. Recommended Videos I've used the iPhone for over a decade, which I carry every day along with one of the best Android phones. While iOS is an excellent platform, there are a few key areas where it could improve. Here are the five improvements I'm hoping to see on Monday. 1. True support for third parties It's somewhat antithetical for Apple to embrace third parties, evidenced by its ongoing lawsuit with Fortnite developer Epic Games, but this might be the best time for the company to do exactly this. It may also prevent regulatory challenges, like the Epic Games lawsuit, which resulted in support for third-party app stores on the iPhone, but only in Europe. The success of the iPhone can be largely attributed to its early adoption by third-party developers. These developers built the apps and experiences that enabled the iPhone to have the impact it has had. While this has been great for apps, Apple only enabled third-party solutions to replace certain system functions, and these features don't work anywhere near as well. Third-party keyboards have been supported for over a decade, yet it's still a bit-part installation, which results in the OS often freezing and resorting to the default keyboard. Apple's new Passwords app in iOS 18 also made third-party password managers less stable. This could also help address a significant issue for Apple. The company's troubles with Apple Intelligence and the new Siri could be somewhat solved by enabling third-party assistants to be set as the default, at least in the interim. This would also benefit its partnership with OpenAI and ChatGPT, or allow an assistant like Google Gemini to be set as the default. 2. A rebuilt OS that just works again For Apple to truly allow third-party support, it needs to rebuild iOS. Over the past 19 years, Apple's iPhone software has largely stayed the same under the hood. The result is that while many features have been added over the years, they have directly contributed to the OS's load and instability. Consider iOS 18 and the launch of the theming engine, as well as the more flexible approach to the homescreen layout, and the transformation of widgets. All are great additions to the customizability of iOS 18, but none launched with the same stability and aplomb that made Apple as successful as it has been. Apple products are infamously meant to 'just work', and it's time to return to that era, starting with a rebuild of iOS. The visionOS platform demonstrates that Apple can still design beautiful, first-generation software experiences, and the iPhone needs a next-generation experience. 3. Advanced features from Android There are many features available on Android that aren't available on the iPhone. While iOS 18 brought the iPhone closer to the customizability of an Android phone, there are still a few things that are needed for the iPhone to continue competing with the best phones. Consider the Galaxy S25 Ultra: it features multiple telephoto lenses, the S-Pen stylus, and true multitasking capabilities. Or the Oppo Find N5 and Galaxy Z Fold 7, which feature two screens and advanced stylus input. Then there are phones like the Oppo Find X8 Ultra, Galaxy S25 Ultra, and Vivo X200 Ultra, which all feature multiple telephoto lenses and advanced camera systems that are more capable than the iPhone, at least for still photography. Then there's Apple's approach to the homescreen. Last year, Apple introduced significant improvements to the homescreen, but there are still many ways for Apple to take this further. I'd love to see resizable icons, a choice of grid layouts, and more advanced management of icon positioning and grid. And yes, I hope they fix the current homescreen introduced in iOS 18, so we can put apps wherever we want, and they'll stay in place. The next-generation iPhone experience needs to do more than fix the bugs; it should set the iPhone up to compete with the very best phones. Apple is rumored to launch an iPhone Fold eventually, and iOS 19 should lay the groundwork for this to compete with the best folding phones. I can't wait to see what Apple launches on Monday during the WWDC 2025 livestream. I use an Apple product in each category, and I am genuinely excited to see what the company does next. I suspect we'll see a mix of bug fixes, design changes, and some new features to highlight, but less from Apple Intelligence than we did last year. We'll all find out soon!
New York Times
5 hours ago
- New York Times
Bill Atkinson, Who Made Computers Easier to Use, Is Dead at 74
Bill Atkinson, the Apple Computer designer who created the software that enabled the transformative visual approach pioneered by the company's Lisa and Macintosh computers, making the machines accessible to millions of users without specialized skills, died on Thursday night at his home in Portola Valley, Calif., in the San Francisco Bay Area. He was 74. In a Facebook post, his family said the cause was pancreatic cancer. It was Mr. Atkinson who programmed QuickDraw, a foundational software layer used for both the Lisa and Macintosh computers; composed of a library of small programs, it made it possible to display shapes, text and images on the screen efficiently. The QuickDraw programs were embedded in the computers' hardware, providing a distinctive graphical user interface that presented a simulated 'desktop,' displaying icons of folders, files and application programs. Mr. Atkinson is credited with inventing many of the key aspects of graphical computing, such as 'pull down' menus and the 'double-click' gesture, which allows users to open files, folders and applications by clicking a mouse button twice in succession. Before the Macintosh was introduced in January 1984, most personal computers were text-oriented; graphics were not yet an integrated function of the machines. And computer mice pointing devices were not widely available; software programs were instead controlled by typing arcane commands. The QuickDraw library had originally been designed for Apple's Lisa computer, which was introduced in January 1983. Intended for business users, the Lisa predated many of the Macintosh's easy-to-use features, but priced at $10,000 (almost $33,000 in today's money), it was a commercial failure. Want all of The Times? Subscribe.
Tom's Guide
9 hours ago
- Tom's Guide
iPhone users say Mail app is suddenly freezing with iOS 18.5 — here's a fix you can try
Since Apple rolled out iOS 18.5, a growing number of iPhone users have reported issues with accessing their inbox as the Mail app is getting stuck on a blank white screen. Several comments on Reddit and the Apple Support Community describe being unable to view emails in their inboxes as the app is either glitchy or unresponsive. The underlying cause remains unclear, but the issues don't appear to be tied to any specific iPhone model, suggesting it could be a software-related problem tied to iOS 18.5 or the Mail app itself. Interestingly, reports of this Mail app issue have only been cropping up in the past few days, while iOS 18.5 went live last month. iOS 18.5 added a few notable features like screen time notifications and a new Pride-themed wallpaper, but its updates for the Apple Mail app could be causing the issues. With iOS 18.5, Apple brought back the "All Mail" inbox view and added the option to hide contact photos from the Mail app to make your inbox less distracting. Apple has not officially acknowledged the issue, and the company's System Status page does not indicate any problems with the Mail app. But while there's no official fix yet, some users said restarting their iPhones solved the issue, but only temporarily. Others have had luck with force-closing the app or disabling the keyboard's auto-correction to get it working again. Another affected user with an iPhone XR running iOS 18.5 was told by Apple Support to try resetting the phone's network settings, which seemed to do the trick, PC Mag reports. To do this on your iPhone, head to Settings > General > Transfer or Reset [Device] > Reset > Reset Network Settings. Get instant access to breaking news, the hottest reviews, great deals and helpful tips. Until Apple acknowledges the issue and provides a fix, affected users should contact Apple support for assistance in the meantime.
