A major cybersecurity alert has been issued to all Apple users after 23 serious vulnerabilities were discovered in the AirPlay feature, potentially exposing 1.8 billion iPhones and millions of other Apple devices to remote hacking threats.
The flaws, dubbed ‘Airborne’ by the researchers at Oligo Security, allow hackers to exploit AirPlay without any user interaction through zero-click attacks. This means devices can be compromised silently, simply by being on the same Wi-Fi network as the attacker.
Oligo’s team identified 17 separate methods hackers can use to exploit these flaws, potentially gaining access to data, installing malware, or spreading viruses across connected networks — including smart home speakers, Mac computers, and CarPlay systems.
Although Apple issued patches in iOS 18.4, macOS Sequoia 15.4, and tvOS 18.4 on March 31, many third-party AirPlay-compatible devices remain unpatched, leaving millions of users exposed.
In a worst-case scenario, hackers could even use an infected iPhone as a launchpad to target other nearby devices on shared Wi-Fi, acting like a network worm.
To minimize risk, experts recommend immediately disabling AirPlay.
Here’s how:
Go to Settings > General > AirPlay & Continuity > Automatically AirPlay and select ‘Never’.
Turning off this feature halts the constant background broadcasting that makes devices more vulnerable to attacks.
While Apple maintains that attacks require being on the same network, Oligo warns that slow update rollouts from third-party manufacturers make it difficult to fully secure all devices.
Experts urge Apple users to stay vigilant, install the latest updates, and disable unnecessary wireless features to reduce exposure to ongoing threats.
With over 2.35 billion active Apple devices worldwide, the scale of the AirBorne threat is significant, and taking action now could prevent serious consequences.
