Urgent warning to iPhone users: Turn off popular feature and take these steps for safety
Researchers at cybersecurity firm Oligo found major security flaws in Apple AirPlay that allow hackers to hijack compatible devices on the same Wi-Fi network.
AirPlay allows users to seamlessly stream audio, video or photos from their Apple device to another Apple device or third-party gadgets that integrate the protocol.
The 23 vulnerabilities, dubbed 'AirBorne,' were found both in Apple's AirPlay protocol and the AirPlay Software Development Kit (SDK) used by third-party vendors to make devices AirPlay compatible, Wired reported.
Researchers demonstrated in a video how vulnerabilities can be exposed to hackers by accessing an AirPlay-enabled Bose speaker on the same network and remotely executing a Remote Code Execution (RCE) attack, showing the 'AirBorne' logo on the speaker's display.
They claimed that hackers realistically can use a similar strategy to gain access to devices with microphones for espionage.
Oligo CTO Gal Elbaz told Wired that the total number of exposed devices could potentially be in the millions.
'Because AirPlay is supported in such a wide variety of devices, there are a lot that will take years to patch — or they will never be patched,' Elbaz explained. 'And it's all because of vulnerabilities in one piece of software that affects everything.'
The risks were reported to Apple in the late fall and winter of last year, and Oligo worked with the tech giant for months on fixes before publishing their findings Tuesday.
Apple devices with iOS 18.4, iPadOS 18.4, macOS Ventura 13.7.5, macOS Sonoma 14.7.5, macOS Sequoia 15.4 and visionOS 2.4 had fixes rolled out on March 31.
However, third-party devices that support AirPlay protocol remain vulnerable. The researchers said that manufacturers would need to roll out updates for users to install themselves in order to avoid being exposed to hackers.
Apple told Wired that it created patches available for these third-party devices, but it emphasized that there are 'limitations' to the attacks that would be possible on AirPlay-enabled devices due to the bugs.
CarPlay-equipped systems are also at risk, the researchers noted, since hackers can carry out an RCE attack if they are near the unit and 'the device has a default, predictable, or known Wi-Fi hotspot password.'
According to the report, there are several ways to help protect your device from the threat of hackers:
Update your devices: Researchers stressed that devices and other machines that support AirPlay need to be updated immediately to the latest software versions to mitigate potential security risks.
Disable AirPlay Receiver: Oligo recommends fully disabling the AirPlay feature when not in use.
Only AirPlay to trusted devices: Limit AirPlay communication and stream content to only trusted devices.
Restrict AirPlay Settings: Go to Settings > AirPlay & Continuity (or AirPlay & Handoff) and select Current User for the 'Allow AirPlay for' option. 'While this does not prevent all of the issues mentioned in the report, it does reduce the protocol's attack surface,' researchers noted.
Disable on public Wi-Fi: It's best to avoid enabling or using AirPlay when on a public Wi-Fi network.
Hashtags
Try Our AI Features
Explore what Daily8 AI can do for you:
Comments
No comments yet...
Related Articles
Washington Post
4 minutes ago
- Washington Post
This is the best smartphone that almost no one buys
It's a Google mystery. One of America's richest and best-known companies has sold its Pixel brand of smartphones for nearly a decade. Pixel devices are on par with the quality and prices of higher-end Apple and Samsung phones, but hardly anyone buys them.
WIRED
4 minutes ago
- WIRED
OpenAI Is Poised To Become The Most Valuable Startup Ever. Should It Be?
Aug 19, 2025 12:00 PM The AI startup is chasing a $500 billion valuation, with backers betting it can become the next Apple or Google. There are reasons for skepticism. Photo-illustration: WIRED Staff; Getty Images OpenAI is reportedly on the verge of a roughly $500 billion valuation, a figure that would make it the most valuable private company in the world—bigger than SpaceX, TikTok's parent company Bytedance, and even public giants like Palantir. It's a staggering number for a company with an 'astronomical burn rate.' How is this even possible? As Axios reports, there are actually two deals in play: a SoftBank-led round valuing the company at $300 billion, which won't close until year's end, and a secondary sale of employee shares at a far steeper $500 billion valuation. Most of the cheaper shares have already been snapped up, leaving investors to fight over the pricier ones. One OpenAI investor—who spoke on the condition of anonymity, citing an NDA—compared it to the dawn of the internet. 'We're in one of the biggest technology shifts [in history],' the investor tells me. 'The outcomes continue to get bigger than people think.' The investor argues the math for investing at the $500 billion valuation is straightforward: Hypothetically, if ChatGPT hits two billion users and monetizes at $5 per user per month—"half the rate of things like Google or Facebook'—that's $120 billion in annual revenue. 'That alone would support a trillion and a half dollar company, which is a pretty good return, just thinking about ChatGPT,' the investor says. 'it doesn't include all the rest of stuff they're working on, all the enterprise stuff, all the agentic stuff, all of the work they're doing on hardware.' Trillions of Dollars The $5 figure is, admittedly, back of the envelope math. Today, ChatGPT has 700 million weekly active users—and fewer than 10 percent pay (OpenAI declined to comment on this figure). The investor's projections are ambitious, and seem to discount the threat of major players like Google and Meta eating OpenAI's lunch. 'The half a trillion dollar question now is, to what extent will OpenAI be able to retain the customers that it has acquired, and simultaneously be able to bring its costs to a point where it can, in fact, monetize at [hypothetically] $5 per user per month,' says Arun Sundararajan, a professor at New York University's Stern School of Business. The bet here is that OpenAI is the next Facebook or Google. For investors buying in at $500 billion, 'they're expecting an IPO above a trillion in two to three years, otherwise the rate of return does not justify the investment,' says Glenn Okun, who's also a business professor at NYU. That would mean leaping into the top ten most valuable public companies in the world almost overnight. The investor says they have a longer time horizon than that, but 'of course an IPO is the most sensible path given the scale of the company.' Though the investor admits, yes, the company would need to be valued at more than $1 trillion to make the investment worthwhile. Stranger things have happened—particularly to OpenAI. In the first seven months of 2025, the company doubled its projected annual revenue to $12 billion, which would estimate OpenAI is bringing in about $1 billion per month. Enterprise adoption has surged too, reaching 5 million paying business users this month. Not to mention what potential advertising revenue could do to its bottom line. To the investor, these are signs of a company with the momentum to win: 'People don't like unprecedented things, because most people like to pattern match,' the investor says. 'Everything this company has done has been unprecedented from the pace of its revenue growth to the AI technology.' It's a nice dream. But OpenAI's spending is ballooning alongside its revenue. It's reportedly expecting a cash burn of $8 billion this year, and Altman said at a recent dinner in San Francisco that much of OpenAI's infrastructure costs are for inference—and he expects the startup to spend trillions of dollars on datacenters in the 'not very distant future.' That means in the fantastical future where ChatGPT may have billions of users, it would cost trillions of dollars to serve them. It's extraordinarily expensive to scale such a power hungry technology. Even if the chips get faster and cheaper, the overall costs grow as the company works to train even bigger models and serve them to a growing user base sending off billions of queries, Sundararajan tells me. The investor, however, brushes off profitability concerns, saying OpenAI can spread those massive costs across its entire user base. 'It is not cheap, and it's not for the faint of heart in terms of investment,' they add. Okun takes a more skeptical approach. 'What we're looking at here is major capital investment with the sorts of valuations that may be very hard to to actually reach,' he says. A New Bubble The $500 billion headline also has caveats. Private-market pricing reflects what a small number of investors are willing to pay for a small number of shares. In other words, the feeding frenzy is factored into the share price. 'In all likelihood, it's an approximation,' Okun says of the valuation. He adds that the number reflects both firm value and the competition between investors to get a slice of the pie. 'We really can't accurately disentangle those two streams of value in order to isolate firm value.' Right now, investors appear to have a nearly insatiable appetite for AI startups. According to recent PitchBook data, a third of all venture dollars in the second quarter of this year went to five companies—all in the AI space—which is more than double the spending in 2024. Is that a bubble? Altman admitted as much at the dinner. But in classic Altman fashion, he reminded attendees that's actually a good thing: 'When bubbles happen, smart people get overexcited about a kernel of truth,' he said. 'If you look at most of the bubbles in history [like] the tech bubble, there was a real thing. Tech was really important, the internet was a really big deal.' Startup valuations have always reflected how well the CEO can sell a vision. At OpenAI, Altman cranks it up to eleven, and it's seemingly paying off. Meanwhile, investors are betting that ChatGPT becomes as indispensable as Google, that billions of people happily pay to use it, and competitors quietly fade into irrelevance. Whether any of that actually happens almost doesn't matter. For now, the story is worth half a trillion all on its own. 'There's definitely risk in it,' the investor tells me. 'The story is not fully written.' This is an edition of Kylie Robison's Model Behavior newsletter . Read previous newsletters here.
Yahoo
5 minutes ago
- Yahoo
Trump to put tariffs on steel and semiconductor chips
President Donald Trump said he plans to put tariffs on imported steel and semiconductor chips as soon as next week, a report said. "I'll be setting tariffs next week and the week after on steel and on, I would say, chips," the president said on Friday to reporters aboard Air Force One as he travels to Alaska to meet with Russian President Vladimir Putin, Reuters reported. "I'm going to have a rate that is going to be lower at the beginning — that gives them a chance to come in and build — and very high after a certain period of time," Trump said according to the report. At the beginning of June, the president placed a 50% tariff rate on imported steel and aluminum. And just last week, he said he would put a 100% tariff on chips , adding that if companies build in the U.S. then 'there is no charge.' Trump made the announcement during a press conference in the Oval Office with Apple CEO Tim Cook. During the conference, Cook said the iPhone maker is investing an extra $100 billion in the U.S., bringing the total of its planned corporate domestic spending to $600 billion over four years. 'But the good news for companies like Apple is if you're building in the United States or have committed to build, without question, committed to build in the United States, there will be no charge,' the president added. 'The higher you go, the more likely it is they build a plant here,' President Trump said in mid-June at the White House in regards to a possible tariff rate hike on imported autos. The policy, part of Trump's 'America First' agenda, aims to bolster domestic manufacturing by penalizing companies that rely on overseas chip production. For AI companies, the stakes are particularly high. Semiconductors are the backbone of AI infrastructure, powering everything from data centers to autonomous vehicles. Yet while Trump's semiconductor tariffs threaten global supply chains, years of U.S. buildout plans have left AI's biggest firms largely insulated . — Joseph Zeballos-Roig and Shannon Carroll contributed to this article. Error in retrieving data Sign in to access your portfolio Error in retrieving data Error in retrieving data Error in retrieving data Error in retrieving data
