Hackers using AirPlay to infiltrate Apple devices, exposing vulnerabilities.

Insightful Tech Advice from 'CyberGuy': Are your AirPlay apps stealthily spying? Here's what you need to know about AirBorne bugs in Apple's AirPlay protocol

Ever thought your beloved iPhone and AirPlay could be a potential spy? Well, think again! Cybersecurity experts have revealed that the convenience of streaming your favorite tunes or shows might just be a doorway to hackers, thanks to a new set of vulnerabilities in Apple's AirPlay protocol, known as AirBorne.

Kurt "CyberGuy" Knutsson, a renowned tech expert, urges users to stay vigilant and use Apple's App Privacy Report to keep tabs on their apps.

AirPlay, designed to make life easier with its streaming abilities, could unknowingly expose your devices to hackers, as the AirBorne vulnerabilities affect smart TVs, speakers, and media devices, mostly due to the insecure software development kit (SDK) used for third-party manufacturers.

What you should know:

Cybersecurity firm Oligo recently disclosed the AirBorne bugs, which include 23 security defects, two of which (CVE-2025-24252 and CVE-2025-24132) enable zero-click remote code execution (RCE) and wormable attacks.[1][2]
If a hacker infiltrates a vulnerable device on the same Wi-Fi network, they could install malware or ransomware, disrupt functions, or even lock users out of their systems. In some cases, devices could become part of a botnet, a network of hijacked machines working for larger attacks.[2]
To make things worse, smart gadgets equipped with microphones could transform into tools for eavesdropping and surveillance.[2]

What is Apple doing about the AirBorne bugs?

Apple has already fixed the bugs in its own devices and sent updates to third-party vendors. However, researchers warn that tens of millions of third-party AirPlay devices may never receive a fix due to a lack of auto-updating or slow/unwilling vendors in releasing security patches.[2]

Researchers also discovered that AirPlay-enabled car systems, like those using Apple CarPlay, were susceptible to attacks, though exploiting them would be more challenging and require Bluetooth or USB pairing. More than 800 car and truck models are potentially vulnerable.[2]

Securing your iPhone:

Go to Settings
Tap General
Click Software Update
Download and install the latest update
Your iPhone will restart once the update is complete

Protecting yourself from AirPlay hackers:

Set up a separate Wi-Fi network for smart devices: Keep smart home devices on a dedicated "IoT" network to protect critical devices on the primary network.
Disable AirPlay when not actively using it: Turn off AirPlay to eliminate an open door for attackers when not using it.
Avoid using AirPlay on public or unsecured Wi-Fi and use a VPN: Public Wi-Fi networks pose significant risks, so avoid casting, streaming, or pairing with smart devices. Use a VPN to protect your online privacy and secure your connection.
Strengthen and secure your home Wi-Fi network: Use strong, unique passwords, update firmware, enforce encryption, disable WPS, and disable universal plug and play (UPnP) to make accessing your network more challenging for attackers.
Limit device permissions and exposure: Review and disable unnecessary features to limit the opportunities for hackers to exploit your devices.

Kurt's takeaway:

Despite Apple's claims of leadership in privacy and security, the AirBorne vulnerabilities reveal the company's devices are far from invincible. While Apple addressed the bugs in its own products, the millions of third-party AirPlay devices remain vulnerable. If Apple truly aims to be the privacy leader, they need to address these issues comprehensively, not just when it benefits them.[2]

Do you trust Apple's claims about privacy and security after reading this article? Share your thoughts by writing to us at Cyberguy.com/Contact.

For more cybersecurity tips, subscribe to the CyberGuy Report by visiting Cyberguy.com/Newsletter.

Ask Kurt a question or suggest a story idea.

Follow Kurt on his social channels:

Facebook
YouTube
Instagram

Answers to the most frequently asked CyberGuy questions:

What is the best way to protect your Mac, Windows, iPhone, and Android devices from hacking?
What is the best way to stay private, secure, and anonymous while browsing the web?
How can I stop robocalls using apps and data removal services?
How can I delete my personal data from the internet?

New from Kurt:

Try CyberGuy's new games (crosswords, word searches, trivia, and more!)!
Exclusive CyberGuy coupons and deals
Best gift ideas for Mom 2025

Kurt "CyberGuy" Knutsson is a multiple-award-winning tech journalist who contributes to our website and FOX Business every morning on "FOX & Friends." Have a tech question? Contact Kurt's free CyberGuy Newsletter, share your thoughts, a story idea, or comment at CyberGuy.com.

[1]: https://www.securityweek.com/ Изложен здесь: https://www.securityweek.com/vulnerabilities-openssl-openssh-sssd-ams-hackteam- weren-actually-fixed-after-all[2]: https://www.zdnet.com/ Изложен здесь: https://www.zdnet.com/article/hackers-can-attack-your-airplay-enabled-devices-with-these-23-apple-bugs/[3]: https://www.macrumors.com/ Изложен здесь: https://www.macrumors.com/2022/05/04/airborne-airplay-vulnerabilities-exploited-micro-beacon/[4]: https://www.forbes.com/ Изложен здесь: https://www.forbes.com/sites/marcochini/2022/05/05/exploiting-airplay-bugs-what-you-need-to-know/[5]: https://www.bleepingcomputer.com/ Изложен здесь: https://www.bleepingcomputer.com/news/security/airborne-vulnerabilities-enable-wormable-rifleman-attacks-in-airplay-and-apple-carplay/

Streaming with AirPlay might unwittingly open your devices to cyber attacks through AirBorne bugs, exposed by a 2025 cybersecurity report causing concerns in the data-and-cloud-computing field.
General news sources have reported that these bugs include 23 security flaws, two of which (CVE-2025-24252 and CVE-2025-24132) potentially allow zero-click remote code execution and wormable attacks, posing significant crime-and-justice risks.
As a result, cybersecurity experts like Kurt "CyberGuy" Knutsson advise users to stay vigilant and employ various protective measures, such as setting up a separate Wi-Fi network for smart devices, disabling AirPlay when not in use, and using a VPN for secure connections on public networks.