Feed: Slashdot
Feed Link: https://slashdot.org/
---

Title: Millions of AirPlay Devices Can Be Hacked Over Wi-Fi

Link: https://it.slashdot.org/story/25/04/30/211525...

A newly revealed set of vulnerabilities dubbed AirBorne in Apple's AirPlay
SDK could allow attackers on the same Wi-Fi network to hijack tens of
millions of third-party devices like smart TVs and speakers. While Apple has
patched its own products, many third-party devices remain at risk, with the
most severe (though unproven) threat being potential microphone access.
9to5Mac reports: Wired reports that a vulnerability in Apple's software
development kit (SDK) means that tens of millions of those devices could be
compromised by an attacker: "On Tuesday, researchers from the cybersecurity
firm Oligo revealed what they're calling AirBorne, a collection of
vulnerabilities affecting AirPlay, Apple's proprietary radio-based protocol
for local wireless communication. Bugs in Apple's AirPlay software
development kit (SDK) for third-party devices would allow hackers to hijack
gadgets like speakers, receivers, set-top boxes, or smart TVs if they're on
the same Wi-Fi network as the hacker's machine [...] Oligo's chief technology
officer and cofounder, Gal Elbaz, estimates that potentially vulnerable third-
party AirPlay-enabled devices number in the tens of millions. 'Because
AirPlay is supported in such a wide variety of devices, there are a lot that
will take years to patch -- or they will never be patched,' Elbaz says. 'And
it's all because of vulnerabilities in one piece of software that affects
everything.'" For consumers, an attacker would first need to gain access to
your home Wi-Fi network. The risk of this depends on the security of your
router: millions of wireless routers also have serious security flaws, but
access would be limited to the range of your Wi-Fi. AirPlay devices on public
networks, like those used everywhere from coffee shops to airports, would
allow direct access. The researchers say the worst-case scenario would be an
attacker gaining access to the microphones in an AirPlay device, such as
those in smart speakers. However, they have not demonstrated this capability,
meaning it remains theoretical for now.

Read more of this story at Slashdot.

---
VRSS v2.1.180528