IOS HomeKit Zero Day Lets Attackers Remotely Access Your Smart Home

HomeKit Hero

The bug requires at least one iPhone or iPad running iOS 11.2, connected to a person's iCloud account. That means, presumably, that the flaw was live for several weeks in current versions of iOS and watchOS before being addressed.

Details on how the vulnerability can be exploited were not released as the bug is still potentially exploitable.

Last time we described Apple's approach to security to be the same as leaving your door unlocked in a quiet area - OK until some-one nefarious comes along and actually tries the door. Other issues in this category were fixed server-side from Apple so end users needed to take no action.

Apple says it's issued a fix for an iOS security flaw that left key connect home hardware open to unauthorized third-party access. "The issue affecting HomeKit users running iOS 11.2 has been fixed", an Apple spokesperson said in a statement. The fix temporarily disables remote access to shared users, which will be restored in a software update early next week. Just be sure to install the iOS update when it's released in order to regain the reduced functionality.

A zero-day Apple HomeKit vulnerability has been discovered that allows unauthorized remote access to smart accessories.

The tvOS and watchOS updates were released on December 4 and 5, respectively, and contain the same fixes: for the aforementioned kernel bugs and a memory corruption issue in IOSurface, which could have allowed a malicious application to execute arbitrary code with kernel privileges.

The existence of the vulnerability isn't necessarily damning for HomeKit as a product, but it does raise questions for users as to how much they should trust to the application.

Related News:

  • Bigg Boss 11: Divya Agarwal's Entry Makes Priyank Sharma Teary Eyed

    Bigg Boss 11: Divya Agarwal's Entry Makes Priyank Sharma Teary Eyed

    She wanted to scold him, but after seeing him, she is not able to! "You don't need anyone, you are enough for yourself", she adds. In a sharp contrast, Hina has sportsmanship and in the last episode, too, she congratulated Arshi on becoming the captain.

    Swiss National Bank Decreases Holdings in Bed Bath & Beyond Inc. (NASDAQ:BBBY)

    Bed Bath & Beyond Inc Com now has $3.34 billion valuation. (NNY) has declined 1.30% since December 6, 2016 and is downtrending. ValuEngine downgraded shares of Bed Bath & Beyond from a "buy" rating to a "hold" rating in a research note on Friday.
    Geoff Keighley Teases Major New Announcement at The Game Awards

    Geoff Keighley Teases Major New Announcement at The Game Awards

    Games like Persona 5 , Super Mario Odyssey , and Horizon Zero Dawn jostle for awards such as Game of the Year. At 8:30 PM EST, the awards ceremony will begin, but you still have time to vote for your favorite games.
  • Coutinho gives an update on his future that will worry Liverpool fans

    Coutinho gives an update on his future that will worry Liverpool fans

    The Brazilian wants to depart Anfield, and it will be the best option for both the player and the club to part ways happily. I think he'll only go in January if Liverpool feel they can use the money and that's a lot to do with recruitment again.

    Hess Corporation (HES) Formed Bullish Inverse Head & Shoulders; Buyers Could Thrive

    The oil and gas producer reported ($1.07) EPS for the quarter, beating the Zacks' consensus estimate of ($1.29) by $0.22. The fund owned 538,416 shares of the oil and gas producer's stock after selling 66,260 shares during the period.
    Analyst's Predictions on Harley-Davidson, Inc. (HOG), QUALCOMM Incorporated (QCOM)

    Analyst's Predictions on Harley-Davidson, Inc. (HOG), QUALCOMM Incorporated (QCOM)

    The stock of Oxford Industries, Inc. (NYSE:HOG) has "Underperform" rating given on Wednesday, October 19 by RBC Capital Markets. Ameritas Partners holds 0.01% in Harley-Davidson, Inc. (NYSE:HOG) on Wednesday, April 19 with "Sector Perform" rating.
  • Johnson & Johnson (JNJ) Shares Bought by IFM Investors Pty Ltd

    Johnson & Johnson (JNJ) Shares Bought by IFM Investors Pty Ltd

    The company reported $1.83 earnings per share for the quarter, topping analysts' consensus estimates of $1.77 by $0.06. The Pennsylvania-based Conestoga Cap Advsrs Ltd Liability Corp has invested 0.03% in Johnson & Johnson (NYSE:JNJ).
    BMO Capital Markets Reiterates Outperform Rating for Sage Therapeutics (SAGE)

    BMO Capital Markets Reiterates Outperform Rating for Sage Therapeutics (SAGE)

    The rating was upgraded by Chardan Capital Markets to "Buy" on Friday, November 10. (NASDAQ: SAGE ) earned "Hold" rating by H.C. Sage's shares crumbled in September when its lead drug failed to outperform a placebo in treating a rare form of seizures.
    Oklahoma's offense will get test from Georgia's defense in Rose Bowl

    Oklahoma's offense will get test from Georgia's defense in Rose Bowl

    Three national seeds went down as No. 3 Jacksonville State, No. 4 Central Arkansas and No. 8 Southern Utah all lost at home. Riley is in his first year as head coach with the Sooners and Smart in his second year with Georgia.
  • Georges St-Pierre On Defending His Middleweight Belt: 'I Don't Think So'

    Georges St-Pierre On Defending His Middleweight Belt: 'I Don't Think So'

    Rockhold (16-3-0) is a former UFC Middleweight Champion, defeating Chris Weidman by fourth round TKO at UFC 194 to become champ. As a result, there are reports that a possible showdown between Rockhold and Whittaker could take place in early 2018.
    Ex-banker Mateusz Morawiecki proposed as Poland's new PM

    Ex-banker Mateusz Morawiecki proposed as Poland's new PM

    Finance Minister Mateusz Morawiecki to become new PM? Deputy Culture Minister Jaroslaw Sellin said the vote will take place on Tuesday.

    Technicals in The Spotlight For Goodyear Tire Rubber (GT)

    Tudor Corp Et Al owns 11,051 shares or 0.01% of their U.S. portfolio. 1St Global Advisors Incorporated reported 0.08% stake. The stock of The Goodyear Tire & Rubber Company (NASDAQ:GT) earned "Neutral" rating by Guggenheim on Wednesday, November 1.


Most liked

California wind, fire danger hit unprecedented high
Los Angeles Mayor Eric Garcetti declared a state of emergency while 11 Los Angeles Unified schools canceled Wednesday classes. The fire was burning in the Hollywood Hills near the exclusive Bel Air neighborhood, home to many celebrities.

Delhi International Film Festival Pays Tribute To Stalwarts Of The Entertainment Industry
Egyptian Wahid Hamid, who has been producing script for Arab TV and cinema for more than 40 years, was also rewarded. The festival was honoured by the presence of His Highness Sheikh Mansoor bin Mohammed bin Rashid Al Maktoum.

Livestreaming, New Games Coming to Facebook Messenger
Video chats are a great way for people to connect, discuss and share moments with each other when text just isn't enough. Facebook said it will start testing the feature soon and will introduce the video chat tool early next year.

Safety tips to help prevent Christmas tree fires this holiday season
This is the 13th year for Trees for Troops and they have achieved a milestone by reaching over 2 hundred thousand trees delivered. Her latest tree was decorated for the Pathways Center in Greensboro - a family shelter operated by Greensboro Urban Ministry.

Market player: CenterPoint Energy, Inc. (CNP) ,Crown Castle International Corp. (REIT) (CCI)
It turned negative, as 46 investors sold CCI shares while 195 reduced holdings. 80 funds opened positions while 235 raised stakes. CCI traded at an unexpectedly high level on 06/12/2017 when the stock experienced a 0.34% gain to a closing price of $109.18.

Diehard Bargain Hunter: Mondelez International, Inc. (MDLZ), Dell Technologies Inc. (DVMT)
Shares of MDLZ have uptrended 5.79% in the past three months, while the S&P 500 has moved -1.34% in that time. When investing in a volatile security, the risk of success is increased just as much as the risk of failure.

Charlotte vigil and others to mark Sandy Hook tragedy
On December 14, 2012, a 20-year-old man shot his way into Sandy Hook Elementary School in Newton, Connecticut, and opened fire. Many people have argued that right-to-carry laws deter crime, since there are more armed people around to stop a criminal.

HWL Final: India knock out Belgium via penalty shootout, enter semi-finals
Four minutes later, it was doubled, thanks to a ferocious penalty corner flick from Harmanpreet Singh. It was again Gurjant-Sunil combination that produced the opportunity in the 18th minute.

Stephens Reports That They Have Downgraded PNC Financial (NYSE:PNC) Shares
Following the completion of the transaction, the insider now owns 20,449 shares of the company's stock, valued at $2,801,104.02. Typically, the higher the current ratio the better, as the company may be more capable of paying back its obligations.

Meek Mill Working Multiple Jobs in Prison for Little Pay
After another failed attempt to appeal Meek Mill's prison sentence, news leaked about the rapper's job life behind bars. Outside of the kitchen, Meek has access to electrical and carpentry shops and is on the waitlist for therapy classes.

Are You Familiar with Analyst's Recommendation?: Exxon Mobil Corporation (XOM)
Exxon Mobil makes up about 1.0% of Dowling & Yahnke LLC's investment portfolio, making the stock its 18th biggest position. NewSquare Capital LLC's holdings in Exxon Mobil were worth $1,166,000 at the end of the most recent reporting period.

Iranian teenager comes clean about her surgeries to look like Angelina Jolie
It comes as new "before" pictures of Sahar have emerged which show just how dramatic her transformation has been. While this bait went on the Internet for a week, Sahar has come forward reacting to the issue.

SeaWorld Entertainment, Inc. (SEAS)
Poplar Forest Capital Llc increased Aecom (NYSE:ACM) stake by 65,169 shares to 1.41 million valued at $45.53 million in 2017Q2. In a transaction dated August 24, 2017, the shares were bought at an average price of $13.32, giving away a sum of $4,488,840.

Alaska Air Group, Inc. (ALK) Shares Sold by Anchor Bolt Capital LP
Alaska Air Group makes up about 2.2% of Lateef Investment Management L.P.'s portfolio, making the stock its 23rd biggest position. State of New Jersey Common Pension Fund D grew its position in shares of Alaska Air Group by 900.0% during the 2nd quarter.

Blackrock New York Muni Trust (BQH): SuperTrend Above Stock Price
The last close places the company's stock about $6.55 off its 52 week high of $30.49 and $3.6 above the 52 week low of $20.34. Technical analysts may be interested in how Invesco Muni Income Trust (OIA) is trading in relation to some moving averages.