Researchers from security company Oligo have discovered a serious security vulnerable in AirPlay, the system with which you can stream wireless audio and video between Apple devices and other compatible products.
The vulnerability with the name ‘Airborne’ makes it possible for attackers to get control over a device remotely and to spread malware. It would even be possible to steal personal data or to listen to conversations with devices connected to the same Wi -Fi network. Fortunately, the problem can be solved with a software update.
Security shed in AirPlay
Millions of AirPlay devices are affected by the Airborne protection leak. Cyber ​​security company Oligo Security discovered a total of 23 vulnerabilities in the AirPlay protocol and the corresponding developer kit (SDK). The Lek not only affects Apple products, but also devices that support the AirPlay protocol, such as TVs and speakers.
Unseen access to devices
The vulnerability makes it possible for attackers to get control over devices that support AirPlay. As soon as an attacker has access to a vulnerable device, it can be used to, for example, spread malware to other devices within the same network. A condition for this is that the attacker is connected to the same WiFine network as the target, which increases the risk in particular on public or large networks where many users are simultaneously connected.
Software updates released
Apple has since released various security updates for iPhones, iPads, Macs, Apple TV and the AirPlay SDK, so that devices are better protected against these attacks. Yet the problems have not yet been fully resolved.
Because there are a huge number of airplay devices worldwide, it is still estimated that tens of millions of devices are still vulnerable, especially if they have not yet received an update or if they no longer receive updates. Oligo warns that this vulnerability is therefore still a high risk for a considerable part of the AirPlay ecosystem.
It is therefore advisable to update all your AirPlay devices as quickly as possible to the most recent version. Not only your Apple products, but also TVs and speakers that support AirPlay. Manufacturers who support the AirPlay protocol are encouraged to offer the updates as soon as possible.
Limit AirPlay
It is advisable to limit AirPlay, so that malicious people cannot simply connect to a device using AirPlay. This way you can protect AirPlay on an Apple TV with a password or limit access to the wireless protocol in the home app. Below we explain how you can set this.
- HomePod: Manage AirPlay access and possibly secure with password
- Apple TV: Secure AirPlay with an access code or password
- Protect AirPlay with a password on a Mac