IOS HomeKit Zero Day Lets Attackers Remotely Access Your Smart Home

HomeKit Hero

The bug requires at least one iPhone or iPad running iOS 11.2, connected to a person's iCloud account. That means, presumably, that the flaw was live for several weeks in current versions of iOS and watchOS before being addressed.

Details on how the vulnerability can be exploited were not released as the bug is still potentially exploitable.

Last time we described Apple's approach to security to be the same as leaving your door unlocked in a quiet area - OK until some-one nefarious comes along and actually tries the door. Other issues in this category were fixed server-side from Apple so end users needed to take no action.

Apple says it's issued a fix for an iOS security flaw that left key connect home hardware open to unauthorized third-party access. "The issue affecting HomeKit users running iOS 11.2 has been fixed", an Apple spokesperson said in a statement. The fix temporarily disables remote access to shared users, which will be restored in a software update early next week. Just be sure to install the iOS update when it's released in order to regain the reduced functionality.

A zero-day Apple HomeKit vulnerability has been discovered that allows unauthorized remote access to smart accessories.

The tvOS and watchOS updates were released on December 4 and 5, respectively, and contain the same fixes: for the aforementioned kernel bugs and a memory corruption issue in IOSurface, which could have allowed a malicious application to execute arbitrary code with kernel privileges.

The existence of the vulnerability isn't necessarily damning for HomeKit as a product, but it does raise questions for users as to how much they should trust to the application.

Related News:



Most liked

Delhi International Film Festival Pays Tribute To Stalwarts Of The Entertainment Industry
Egyptian Wahid Hamid, who has been producing script for Arab TV and cinema for more than 40 years, was also rewarded. The festival was honoured by the presence of His Highness Sheikh Mansoor bin Mohammed bin Rashid Al Maktoum.

Coutinho gives an update on his future that will worry Liverpool fans
The Brazilian wants to depart Anfield, and it will be the best option for both the player and the club to part ways happily. I think he'll only go in January if Liverpool feel they can use the money and that's a lot to do with recruitment again.

Champions League: United, Juve into Last 16; as Bayern Beat PSG
It's normal - first match of the season for him. "And he's going to get more because the performance was really positive". But Shaw took his chance last night, playing the full 90 minutes of United's 2-1 win over CSKA Moscow .

Fallen Kingdom' Trailer Is Here Because Life Finds A Way
With a figure like that, it's hardly suprirrisng that a sequel, which we now know as Jurassic World: Fallen Kingdom , was ordered. There's also a nod to the original movie, with a quick shot revealing an old truck emblazoned with the Jurassic Park logo.

Charlotte vigil and others to mark Sandy Hook tragedy
On December 14, 2012, a 20-year-old man shot his way into Sandy Hook Elementary School in Newton, Connecticut, and opened fire. Many people have argued that right-to-carry laws deter crime, since there are more armed people around to stop a criminal.

Acepta Aurelio Nuño coordinar precampaña de José Antonio Meade
A través de su cuenta de Twitter , Meade mostró una fotografía en la que se le ve al volante y a su lado a un sonriente Nuño. Ha sido pieza fundamental para que todos los logros en educación se hayan hecho realidad", aseveró.

Bigg Boss 11: Divya Agarwal's Entry Makes Priyank Sharma Teary Eyed
She wanted to scold him, but after seeing him, she is not able to! "You don't need anyone, you are enough for yourself", she adds. In a sharp contrast, Hina has sportsmanship and in the last episode, too, she congratulated Arshi on becoming the captain.

Uber's future in Sheffield in jeopardy after suspension of license
Private hire firm Uber has had their licence suspended in Sheffield throwing the future of the city operation into doubt. . A spokesman for the council said: 'If it decides against an appeal the suspension will come into force'.

Destination Wealth Management Lowers Position in Stryker Corporation (NYSE:SYK)
The medical technology company reported $1.52 EPS for the quarter, beating analysts' consensus estimates of $1.50 by $0.02. Stryker has agreed to pay $24 per share for Entellus , a premium of about 50 percent from Wednesday's closing price.

Wenger declares Walcott has Arsenal future
The England worldwide has been impressive when given the opportunity, but Gareth Southgate is keen for him to play every week in the league.

Short Interest in Canadian Solar Inc. (NASDAQ:CSIQ) Decreases By 38.1%
Several large investors have recently modified their holdings of CSIQ. 67 funds opened positions while 102 raised stakes. The solar cell manufacturer reported $1.95 EPS for the quarter, topping the consensus estimate of $0.84 by $1.11.

Pfizer Inc. (PFE)'s Stock Formed A Several Months Double Top Pattern
The Comgest Global Investors Sas holds 30,400 shares with $1.89M value, up from 24,400 last quarter. (NYSE:PFE) for 18.69M shares. Korea Investment Corp decreased Liberty Ppty Tr (NYSE:LPT) stake by 68,500 shares to 129,000 valued at $5.25 million in 2017Q2.

Elderly man dies after a carbon monoxide release in San Francisco
Firefighters noticed that there was a lower unit and heard the television, but got no answer when they knocked on the door. Baxter credited the upstairs neighbors for having a carbon monoxide alarm and for saving the life of the elderly woman.

Iranian teenager comes clean about her surgeries to look like Angelina Jolie
It comes as new "before" pictures of Sahar have emerged which show just how dramatic her transformation has been. While this bait went on the Internet for a week, Sahar has come forward reacting to the issue.

Blackrock New York Muni Trust (BQH): SuperTrend Above Stock Price
The last close places the company's stock about $6.55 off its 52 week high of $30.49 and $3.6 above the 52 week low of $20.34. Technical analysts may be interested in how Invesco Muni Income Trust (OIA) is trading in relation to some moving averages.