Three AirDrop vulnerabilities have been discovered by security researchers, affecting both iPhone and Mac, with similar ones found in Android’s Quick Share.
An attacker could easily exploit the vulnerabilities to cause AirDrop, AirPlay, Handoff, Universal Clipboard, and Continuity Camera to crash and remain unavailable for as long as the attack continues …
HelpNetSecurity reports that it is a simple attack to initiate.
The good news is that no data can be obtained. The bad news is that a number of related Apple services on both iPhone and Mac can be remotely disabled.
Security researcher Arash Ebrahim said that it’s hard to completely avoid such vulnerabilities, pointing to the fact that they exist on more than one platform despite very little shared code.
Ebrahim followed standard responsible disclosure practice in withholding specific details until both Apple and Google have had the chance to fix the issues. He says Apple has fixed one of the vulnerabilities and is still working on the other two.
- Official Apple Store on Amazon
- Discounted AirPods Pro 3
- Wireless CarPlay adapter
- AirTag holders and accessories
- Mac Pro-style Mac mini casing
- NordVPN – privacy-first VPN with no logs and independent audits to verify
