New iPhone flaw: Billions of users at risk of dangerous malware - warning issued

AirPlay’s “AirBorne” flaw lets cybercriminals infiltrate devices on the same network

Last updated:
3 MIN READ
Apple's AirPlay vulnerabilities: Millions of iPhones at risk on public Wi-Fi
Apple's AirPlay vulnerabilities: Millions of iPhones at risk on public Wi-Fi
Bloomberg

Dubai: Apple’s AirPlay is widely favorued by iPhone users for its ability to seamlessly stream music, photos, and videos across Apple devices, as well as compatible speakers and smart TVs. However, recent research has revealed that this very feature could expose users to potential cybersecurity risks, particularly when connected to public Wi-Fi networks.

To utilise AirPlay, all devices must be on the same Wi-Fi network, which introduces a significant vulnerability.

What is AirPlay—and What’s the Danger?

AirPlay, Apple’s wireless sharing feature, enables seamless streaming of music, photos, and videos between Apple devices and third-party gadgets. However, recent research has revealed serious security vulnerabilities within the system, referred to as “AirBorne,” which could allow cybercriminals to infiltrate devices on the same Wi-Fi network.

Risks exposed by AirBorne

According to the New York Post, AirBorne “allows hackers to deploy malware, snoop on your private data, or even eavesdrop on your conversations when connected to the same Wi-Fi network as your devices, which includes public places like airports, coffee shops, or even your work office.”

The research, conducted by Oligo Security, uncovered 23 vulnerabilities in AirPlay’s software. Two of these flaws were particularly dangerous, as they allowed attackers to weaponize iPhones and spread malware to other devices on the same local network.

Cybersecurity threats from AirPlay flaws

“The team warned that cybercriminals can exploit the AirPlay bugs to execute malicious code, steal your personal information, cause the device to crash, and listen to conversations,” as reported by The New York Post.

While Apple released security updates on March 31 for its iPhones, iPads, Macs, and Apple Vision Pro devices, there is still concern over third-party devices that use AirPlay, which are not directly controlled by Apple.

Vulnerability of non-Apple devices

An Apple spokesperson told DailyMail.com that “attackers can only exploit these flaws if they are on the same Wi-Fi network as the device they are targeting.” However, the larger issue lies with third-party products such as smart TVs, set-top boxes, and in-car systems that support AirPlay. These devices may not receive timely updates, or in some cases, no updates at all.

As Gal Elbaz, CTO and co-founder of Oligo, explained to Wired, “Because AirPlay is supported in such a wide variety of devices, there are a lot that will take years to patch—or they will never be patched. And it's all because of vulnerabilities in one piece of software that affects everything.”

Millions of devices still at risk

Oligo estimates that tens of millions of third-party devices remain vulnerable.

Even if your iPhone is fully up to date, a neglected Bluetooth speaker or smart TV connected to the same network could act as a backdoor for hackers.

Cybersecurity expert Patrick Wardle, CEO of Apple-focused security firm DoubleYou, explained to Wired:
“When third-party manufacturers integrate Apple technologies like AirPlay via an SDK, obviously Apple no longer has direct control over the hardware or the patching process.”

Wardle added that slow or skipped updates by third-party vendors “could leave users exposed and might chip away at consumer trust in the entire ‘Apple ecosystem.’”

How to stay safe

To protect your devices:

  • Install the latest updates on all Apple products, including iPhones, iPads, and Macs.

  • Update third-party devices like smart TVs and speakers—check with manufacturers for firmware updates.

  • Disable AirPlay when not in use, especially on public or unsecured Wi-Fi networks.

  • Be cautious of idle devices like rarely used speakers or displays—they could still serve as hacker entry points.

As the New York Post warns, “devices you’re not actively using—like that Bluetooth speaker collecting dust—could be another gateway for hackers.”

Apple’s latest fix

Apple addressed the AirPlay flaws in its iOS 18.4.1 update, released last month.
To update your Apple device:

  1. Open Settings

  2. Tap General

  3. Select Software Update

  4. Tap Update Now