Apple’s AirPlay vulnerability "AirBorne" risks iPhones, Macs, and more

AirPlay’s 23 vulnerabilities, including critical flaws, allow malware, data theft, and eavesdropping, researchers warn

Listen to article

Apple’s popular AirPlay feature, which allows seamless streaming of music, photos, and videos between devices, has been flagged for a serious vulnerability, putting millions of users at risk.

The flaw, identified by cybersecurity researchers as "AirBorne," could allow hackers to infiltrate iPhones, iPads, Macs, and third-party devices connected to the same Wi-Fi network, particularly in public places such as airports and coffee shops.

AirPlay, which enables wireless sharing between Apple devices and compatible third-party products, now presents a significant security risk. Researchers at Oligo Security have uncovered 23 vulnerabilities within AirPlay's software, with two particularly alarming flaws allowing cybercriminals to deploy malware, intercept personal data, and even eavesdrop on private conversations.

The AirBorne flaw affects not only Apple devices but also third-party gadgets like smart TVs, set-top boxes, and Bluetooth speakers that support AirPlay. While Apple released security updates for its devices in March 2025, third-party products often lag behind with updates, leaving millions of devices still exposed.

Experts warn that hackers can exploit these vulnerabilities to execute malicious code, steal sensitive information, and cause device malfunctions. Cybersecurity expert Patrick Wardle pointed out that the lack of timely updates from third-party manufacturers could undermine user trust in Apple’s ecosystem, as vulnerabilities remain unpatched in devices beyond Apple's control.

To mitigate the risks posed by the AirPlay flaw, users are advised to take immediate action:

Update all Apple devices to the latest software, including iPhones, iPads, and Macs.

Update third-party devices like smart TVs and Bluetooth speakers to ensure they are patched with the latest security fixes.

Disable AirPlay when not in use, especially on public or unsecured Wi-Fi networks.

Be cautious of idle devices, which may still serve as entry points for hackers.

Apple has already addressed the vulnerability in its iOS 18.4.1 update, which was released last month. To update your Apple device, simply navigate to Settings > General > Software Update and tap Update Now.

With millions of devices still vulnerable to the flaw, experts stress the importance of securing not only Apple products but also the third-party devices that use AirPlay. As the threat persists, users are encouraged to remain vigilant and take proactive steps to safeguard their privacy and data.