Experts warn: This iPhone setting can expose you to hackers, check it immediately
Translated from Croatian, summarized and contextualized by DistantNews.
At a glance
- Experts warn that a specific iPhone setting, "Automatic AirPlay," could expose users to hackers.
- Viral social media posts highlighted the risk, claiming hackers could steal data instantly if nearby.
- Security experts advise disabling unnecessary settings, though they caution that the risk of complete data theft solely from AirPlay is exaggerated.
Security experts are urging iPhone users to review their settings, particularly the "Automatic AirPlay" option, which they warn could make devices vulnerable to hackers.
Every additional connectivity carries some risk.
The concern gained traction through viral posts on platforms like TikTok and Instagram, which claimed that enabling "Automatic AirPlay" could allow hackers to steal all data from a phone within seconds, provided they were in close proximity. Many users expressed alarm, with some discovering the setting was active on their devices without their knowledge.
However, Tackett stressed that claims that a hacker can simply steal all the data of an iPhone user just because AirPlay is enabled are 'a big exaggeration.'
Kevin Tackett, CEO of security consultancy Secure Ideas, emphasized that while "any additional connectivity carries some risk," the claims of immediate, complete data theft are largely overstated. He explained that while past vulnerabilities have existed, simply having AirPlay enabled does not grant a hacker such extensive access.
Although vulnerabilities related to Apple and AirPlay devices have been resolved, the whole case emphasizes why 'automatic connections, although practical, can be a very bad idea.'
Dave Chronister, CEO of Parameter Security, added that although past AirPlay-related vulnerabilities have been addressed by Apple, the incident underscores the potential dangers of "automatic connections." He illustrated a scenario where a hacker could exploit the setting by broadcasting an AirPlay signal, potentially compromising a vulnerable device with malicious code without user interaction, depending on the specific vulnerabilities present.
If I, as a hacker, wanted to exploit this, I could set up a device that broadcasts an AirPlay signal. If a vulnerable system connects, I can send malicious code and, without any user interaction, their device would be compromised.
Originally published by Veฤernji List in Croatian. Translated, summarized, and contextualized by our editorial team with added local perspective. Read our editorial standards.