Chilling hack warning for over 1 billion iPhone users
Apple users are being warned about potential hacks after cybersecurity experts uncovered a series of concerning security flaws in the tech giant's Airplay feature, allowing attackers to infiltrate and take control of devices.
Oligo Security announced on Tuesday that it had discovered a new set of vulnerabilities affecting Airplay, which allows users to share audio, video, photos, and other content from Apple devices to other Airplay-enabled smart devices.
Researchers have dubbed the vulnerabilities 'AirBorne' as the attacks are transmitted via wireless networks and 'allow attackers to fully take over devices and use that access as a launch pad for further exploitation'.
This could include accessing sensitive data, deploying malware that spreads to devices that connect to the same network or using the device's microphone to listen to conversations.
Oligo, based in Tel Aviv, claimed bugs in the Airplay software development kit allow hackers to infiltrate Airplay-enabled devices, such as speakers or smart TVs if they are connected to the same Wi-Fi network as the hacker.
Other vulnerabilities would have also allowed hackers to exploit Airplay-enabled Apple devices.However, Apple told Olgio these bugs have since been patched in software updates, WIRED reports.
That said, users aren't entirely safe, according to Olgio.
The software company - which reported 23 vulnerabilities to Apple and has been working with the tech giant to address the bugs - said AirBorne vulnerabilities in many third-party devices could still be hackable unless users update them.
As such, a hacker could access the same Wi-Fi as a target – by connecting to the same network at a cafe, shop or airport, or by hacking into another computer at a home – and take over the device.
Oligo's chief technology officer and co-founder, Gal Elbaz, estimated there are tens of millions of potentially vulnerable third-party AirPlay-enabled devices.
'Because Airplay is supported in such a wide variety of devices, there are a lot that will take years to patch — or they will never be patched,' Mr Elbaz told WIRED.
'And it's all because of vulnerabilities in one piece of software that affects everything.'
Apple told news.com.au it has released fixes on its platforms and made software updates available for impacted third-party devices.
It also noted there are limitations to the attacks on Airplay-enabled devices as an attacker must use the same Wi-Fi network as the third-party device and devices such as speakers don't provide meaningful access to a user's private data.
How to protect yourself
In January 2025, Apple reported there were 2.35 billion active Apple devices across the globe.
In 2018, it said there were over 100 million active MacOs users globally.
While every Apple device is vulnerable to AirBorne attacks, Apple users can protect or mitigate against potential security risks by making sure they have downloaded the latest software on their iPhone, Mac and other devices.
Those using Airplay with third-party devices can check with the manufacturer to ensure they have the latest updates.
Oligo also recommended users disable Airplay if they're not using it and restrict it to only 'trusted devices' in the Airplay settings.
Users can also ensure the Airplay setting reading 'Allow Airplay for' is set to 'Current user'.
Oligo noted that while this does not prevent all of the issues, 'it does reduce the protocol's attack surface'.
Apple warns iPhone users to delete commonly used app
The news comes as Apple has warned iPhone users to delete a common app, claiming it's a danger to digital privacy.
Without mentioning the company by name, Apple issued a video warning for users to stop using Google Chrome.
A video titled 'Privacy on iPhone: Flock' parodies Alfred Hitchcock's 1963 film The Birds to demonstrate how browser information isn't really hidden from trackers.
'Flock' is likely a play on the web-tracking tech called FLoC, or Federated Learning of Cohorts, which allows 'advertisers and sites to show relevant ads without tracking individuals across the web'. Google dumped that tracking mechanism for a less privacy-friendly targeted advertising mechanism.
In the video, iPhone users are being followed by surveillance cameras as they browse the internet. The cameras finally explode and leave the users alone when they decide to use Safari as their browser.
The video from Apple is gaining traction after Google announced on Tuesday that it wouldn't remove third-party cookies in Chrome after it promised to do so.
The controversy has led Apple to promote its browser, Safari, as a 'browser that's actually private'.
Chrome allows websites and advertisers to track users' activity in order to serve personalised ads, which is a multibillion-dollar revenue stream for Google. Google initially planned to get rid of third-party cookies and develop a new way to issue targeted ads while still preserving user privacy, but the plan fell apart and the company has chosen to 'maintain our current approach to offering users third-party cookie choice in Chrome'.
Tracking cookies aren't inherently bad, but they can open the door to privacy risks, and sometimes increase the likelihood of your data and sensitive information being leaked or stolen — meaning if you have an iPhone and use Chrome, you likely will continue to be tracked unless you use Incognito Mode or you clear cookies manually. Apple's argument that Safari is safer has been backed up by experts, too.
'When it comes down to your security, Safari is probably your best bet,' Elly Hancock from Private Internet Access said in a blog post.
'Safari is more secure and privacy-friendly than Chrome, but Chrome is faster and offers enhanced performance.'
Try Our AI Features
Explore what Daily8 AI can do for you:
Comments
No comments yet...
Related Articles
AU Financial Review
19 hours ago
- AU Financial Review
Are you ready for the AI boom? Virgin winners
This week on the Chanticleer podcast, James and Anthony try to explain what's coming from the AI revolution, reveal the biggest winners from the float of Virgin, and you'll never guess: Tump and Musk's bromance is over. Listen to the full conversation below, or download the podcast from Apple, Spotify, or wherever you get your podcasts. New episodes of the Chanticleer podcast are available every Friday at 5pm AEDT.
Perth Now
a day ago
- Perth Now
Apple says competition changes could open door to scams
Australians could lose more money to fraudsters, miss out on cutting-edge tech features, and fail to see lower prices under changes proposed to boost competition on digital platforms. US tech giant Apple issued the warnings on Friday, urging the government not to "follow a handful of untested laws" from other countries in its submission to a Digital Competition Regime consultation. But experts say consumers could benefit from greater competition, with the pushback coming as Apple fights regulatory changes in Europe and the US that could force it to allow third-party payments without taking commissions. Changes were proposed to rules governing digital platforms following the Australian Competition and Consumer Commission's Digital Platforms inquiry, with consultation on regulations closing in February. Australian businesses and consumers needed greater rights on digital platforms and up-front rules to govern their conduct, the consultation paper said, as a concentration of power could lead to "higher prices, reduced choice and lower innovation". Apple rejected these outcomes in its submission and, in a separate statement, insisted the company's ecosystem helped developers and security features protected consumers from fraud and scams. "We are concerned the proposed digital competition regime will chill this innovation and threaten user security," the company said in a statement. "We welcome the opportunity to continue engaging with the government on behalf of our Australian customers." In its submission, Apple objected to changes that would allow users to "side-load" third-party apps onto their devices, force the company to accept third-party payments without commissions, and demand interoperability with other platforms. Australian regulators should create their laws rather than use other countries' rules as a template, the submission said. "Apple believes the ultimate framework should be tailored to the needs of Australian consumers and businesses, rather than follow a handful of untested laws in other jurisdictions that could pose significant unintended and negative consequences if implemented in Australia," the submission said. The European Union's Digital Markets Act had delayed the launch of AI features on Apple devices, the company said, and forced it to permit pornographic and torrenting apps on its platform. Both the European Commission and US courts are demanding Apple change its policies and accept third-party in-app payments without commissions following the act and a court case launched by Fortnite creator Epic Games. Changing laws to bring more competition to platforms would benefit Australian consumers, Telsyte managing director Foad Fadaghi said, although he warned many users were unlikely to change their iPhone settings or install unapproved software. "The European experience has shown that most people keep the default settings even as the platform does open up," he said. "Apple users tend to value the security and privacy of the platform." Changes proposed in the Digital Competition Regime included preventing tech companies from prioritising their products, removing payment restrictions, and mandating timely app approval processes.
West Australian
a day ago
- West Australian
Apple says competition changes could open door to scams
Australians could lose more money to fraudsters, miss out on cutting-edge tech features, and fail to see lower prices under changes proposed to boost competition on digital platforms. US tech giant Apple issued the warnings on Friday, urging the government not to "follow a handful of untested laws" from other countries in its submission to a Digital Competition Regime consultation. But experts say consumers could benefit from greater competition, with the pushback coming as Apple fights regulatory changes in Europe and the US that could force it to allow third-party payments without taking commissions. Changes were proposed to rules governing digital platforms following the Australian Competition and Consumer Commission's Digital Platforms inquiry, with consultation on regulations closing in February. Australian businesses and consumers needed greater rights on digital platforms and up-front rules to govern their conduct, the consultation paper said, as a concentration of power could lead to "higher prices, reduced choice and lower innovation". Apple rejected these outcomes in its submission and, in a separate statement, insisted the company's ecosystem helped developers and security features protected consumers from fraud and scams. "We are concerned the proposed digital competition regime will chill this innovation and threaten user security," the company said in a statement. "We welcome the opportunity to continue engaging with the government on behalf of our Australian customers." In its submission, Apple objected to changes that would allow users to "side-load" third-party apps onto their devices, force the company to accept third-party payments without commissions, and demand interoperability with other platforms. Australian regulators should create their laws rather than use other countries' rules as a template, the submission said. "Apple believes the ultimate framework should be tailored to the needs of Australian consumers and businesses, rather than follow a handful of untested laws in other jurisdictions that could pose significant unintended and negative consequences if implemented in Australia," the submission said. The European Union's Digital Markets Act had delayed the launch of AI features on Apple devices, the company said, and forced it to permit pornographic and torrenting apps on its platform. Both the European Commission and US courts are demanding Apple change its policies and accept third-party in-app payments without commissions following the act and a court case launched by Fortnite creator Epic Games. Changing laws to bring more competition to platforms would benefit Australian consumers, Telsyte managing director Foad Fadaghi said, although he warned many users were unlikely to change their iPhone settings or install unapproved software. "The European experience has shown that most people keep the default settings even as the platform does open up," he said. "Apple users tend to value the security and privacy of the platform." Changes proposed in the Digital Competition Regime included preventing tech companies from prioritising their products, removing payment restrictions, and mandating timely app approval processes.
