AirPlay hacked?

[BigEndian]

At work we are able to have MacBooks as an alternative to PCs.
These are managed with InTune/Company Portal.
Our IT department blocks AirPlay so we are unable to wirelessly share the display to for instance the large TV screens in our meeting rooms.
The explanation for this is that there are vulnerabilities in AirPlay so leaving it open risks our corp environment.

I can’t find any references to AirPlay vulnerabilities anywhere but they must exist and be quite dangerous as qI am sure our IT department wouldn’t make things up.

Is anyone aware of what these vulnerabilities in AirPlay are and should I be worried at home and also avoid using this on my iPhone? Is apple keeping this secret?

 

[iStorm]

Could potentially be referring to this:

Security Flaws in Apple’s AWDL Protocol Could Lead to Tracking, MITM & Other Types of Attacks

Security researchers have been dissecting Apple's AWDL protocol and uncovered the possiblity for tracking, DoS, MITM, and other types of attacks.

www.technadu.com

Or perhaps they just don't want to risk employees accidentally/unknowingly AirPlaying their screen to the wrong TV at work or elsewhere.

 

[chabig]

I think they are making excuses.

 

[cybersecPat]

This is excuses big time. Business needs shouldn't be shunted for "security" that is just security theatre. They need to get a real security professional who knows what they're talking about.

 

[bogdanw]

2024
"Failing to act: Apple's AirDrop leaves activists vulnerable
Flaw in file-sharing system still exposes contact details"
https://www.tu-darmstadt.de/informa...i/news_events_ii/newsdetails_ii_436352.en.jsp
"Apple AirDrop leaks user data like a sieve. Chinese authorities say they’re scooping it up."
https://arstechnica.com/security/20...rs-chinese-authorities-claim-to-do-just-that/

 

[chabig]

Neither of those cited references have anything to do with the topic of this thread, AirPlay.

And even if AirPlay were vulnerable as described, all that would mean in the scenario under discussion is that the company would be able to figure out who is airplaying to their TV.

 

[NT1440]

At work we are able to have MacBooks as an alternative to PCs.
These are managed with InTune/Company Portal.
Our IT department blocks AirPlay so we are unable to wirelessly share the display to for instance the large TV screens in our meeting rooms.
The explanation for this is that there are vulnerabilities in AirPlay so leaving it open risks our corp environment.

I can’t find any references to AirPlay vulnerabilities anywhere but they must exist and be quite dangerous as qI am sure our IT department wouldn’t make things up.

Is anyone aware of what these vulnerabilities in AirPlay are and should I be worried at home and also avoid using this on my iPhone? Is apple keeping this secret?

IT worker here. They don’t want some idiot taking over the screen during a meeting, that’s all.

 

[bogdanw]

Neither of those cited references have anything to do with the topic of this thread, AirPlay.

The vulnerability is in the protocol, Apple Wireless Direct Link (AWDL), used by AirDrop and AirPlay.

 

[tabula_rasa_337]

The security research firm Oligo found multiple wormable RCEs in Apple AirPlay protocol including the Apple AirPlay SDK.

This is the most significant hack of Apple products ever discovered. Full stop.

Any device that supports Apple AirPlay requires a firmware update. But the vast majority of cars, smart TVs and Bluetooth speakers WILL NEVER RECEIVE an update to their Apple AirPlay SDK implementations.

All of these devices not running 18.4.1 are rootable by anyone with TCP 7000 access indefinitely in the future.

This is a 5 alarm fire. The catastrophic implications of the severity of this vulnerability can not be overstated.

Who knows how long state sponsored hackers have been exploiting this and now horrifyingly script kiddies are going to be able to exploit this for decades to come.

Millions of Apple Airplay-Enabled Devices Can Be Hacked via Wi-Fi

Researchers reveal a collection of bugs known as AirBorne that would allow any hacker on the same Wi-Fi network as a third-party AirPlay-enabled device to surreptitiously run their own code on it.

www.wired.com

Millions of Apple Airplay-enabled devices can be hacked via Wi-Fi

Hackers can run their code on AirPlay devices thanks to a collection of bugs known as AirBorne.

arstechnica.com

AirBorne: Wormable Zero-Click RCE in Apple AirPlay Puts Billions of Devices at Risk | Oligo Security | Oligo Security

Oligo Security reveals AirBorne, a new set of vulnerabilities in Apple’s AirPlay protocol and SDK. Learn how zero-click RCEs, ACL bypasses, and wormable exploits could endanger Apple and IoT devices worldwide — and how to protect yourself.

www.oligo.security

 

[chown33]

MacRumors article on the AirBorne flaws:

https://forums.macrumors.com/threads/airplay-security-flaws-impact-third-party-devices-and-unpatched-apple-products.2456204/

Please use that thread for discussion of AirBorne.