This week9 Moons cybersecurity researchers with Oligo say they identified 23 vulnerabilities related to Apple AirPlay, leading Apple to issue over a dozen fixes.
Dubbed "AirBorne" by the researchers, the security vulnerabilities affect the Apple AirPlay network and could compromise various devices. According to an Oligo blog post, the researchers say the vulnerabilities "enable an array of attack vectors" that could allow "attackers to potentially take control of devices that support AirPlay — including both Apple devices and third-party devices that leverage the AirPlay [Software Development Kit]."
The Oligo blog outlines a number of potential attacks, including Zero-Click RCE, Man-in-the-Middle, and Denial of Service (DOS) attacks. But if you don't know what any of that means, that's OK — the solution for Apple users is fairly straightforward.
Essentially, as long as you update your devices to the latest versions of macOS, iOS, and iPadOS, your devices should be safe. In addition, some cybersecurity experts recommend disabling the AirPlay feature entirely unless you're actively using it.
The "AirBorne" vulnerabilities would allow hackers to infect Apple devices with malware or seize control of the device, whether that's a MacBook or iPhone. They could then deploy malware or steal sensitive information. AirBorne also affected third-party devices connected to AirPlay, leaving smart Internet-of-things (IOT) devices at risk.
SEE ALSO: Apple sends out spyware attack notifications to targeted usersThe researchers say they worked with Apple to "identify and address" the flaws, and that Apple issued 17 CVEs in response to the research.
In the cybersecurity world, CVE stands for Common Vulnerabilities and Exposures, and it refers to a specific identifying number associated with a publicly disclosed cybersecurity problem. In a national CVE database hosted by the National Institute of Standards and Technology, users can find a number of new CVEs published by Apple on April 28, 2025, such as CVE-2025-24252 and CVE-2025-24206.
The CVE description states that Apple fixed these bugs in "in macOS Sequoia 15.4, tvOS 18.4, macOS Ventura 13.7.5, iPadOS 17.7.6, macOS Sonoma 14.7.5, iOS 18.4 and iPadOS 18.4, visionOS 2.4."
Topics Apple Cybersecurity
All the hilarious things that happened during Jimmy Fallon's 5th anniversary specialEmma Thompson letter explains why she won't work with John LasseterHTC Exodus 1 hands11 things to watch instead of the final presidential debateWall of taco trucks wages delicious protest outside of Trump's Vegas hotelThe hamster recreation of 'Great British Bake Off' you didn't know you needXiaomi has a 48Porsche's luxury Macan SUV gets an electric makeoverXiaomi has a 48TCL's foldable phone concept bends in half like a stack of cashLady Gaga politely extinguishes the Chainsmokers' dissHow nature can significantly improve our mental healthWhite nationalist Trump fans spew anti'Fearless Girl' statue gets another replica, this time in AustraliaFacebook responds to devastating story about content moderatorsWhite nationalist Trump fans spew antiEnergizer's 18,000mAh battery phone is as thick as 3 normal phonesAwesome single lady on Tinder is coming to steal your organsLady Gaga politely extinguishes the Chainsmokers' diss'Derry Girls' portrayal of Northern Irish women is a breath of fresh air Last War: Survival Game boosts FirstFun to fifth in Chinese mobile game publishers · TechNode Li Auto scales back EV ambitions with “more validation work”: CEO · TechNode Google announces new Chromebooks and Chromebook Plus laptops Best Memorial Day deals: Amazon Memorial Day Sale China’s online video market shines with expanding short video capabilities · TechNode Amazon deals of the day: Apple Watch Series 9, M2 iPad Air, Roomba j9+, Garmin Enduro 2 PDD’s Colin Huang becomes China’s second John Oliver's 'Last Week Tonight' Season 2 is streaming for free Viral YouTube video lambasts Disney's Star Wars hotel via 4 Best Memorial Day laptop deals still live: Up to $1,600 off HP, Lenovo, Acer, and more Tencent acquires two ByteDance gaming studios · TechNode Display panel maker BOE launches $8.72 billion production line construction · TechNode BYD aims to sell 500,000 EVs overseas this year: report · TechNode The cicadas aren't invading the U.S. Endangered California condors invade a woman's home New Fitbit smartwatch has gaming and privacy features Shop Memorial Day deals that are still live on robot vacuums at top retailers Are Bored Apes still a thing in 2024? An investigation. Is it a bird? Is it a meteor? No, it's SpaceX space junk over the Pacific Northwest! Alibaba denies exit from offline retail assets, including Freshippo and RT
2.6954s , 10133.5 kb
Copyright © 2025 Powered by 【99 Moons】,Wisdom Convergence Information Network