IOS HomeKit Zero Day Lets Attackers Remotely Access Your Smart Home

HomeKit Hero

The bug requires at least one iPhone or iPad running iOS 11.2, connected to a person's iCloud account. That means, presumably, that the flaw was live for several weeks in current versions of iOS and watchOS before being addressed.

Details on how the vulnerability can be exploited were not released as the bug is still potentially exploitable.

Last time we described Apple's approach to security to be the same as leaving your door unlocked in a quiet area - OK until some-one nefarious comes along and actually tries the door. Other issues in this category were fixed server-side from Apple so end users needed to take no action.

Apple says it's issued a fix for an iOS security flaw that left key connect home hardware open to unauthorized third-party access. "The issue affecting HomeKit users running iOS 11.2 has been fixed", an Apple spokesperson said in a statement. The fix temporarily disables remote access to shared users, which will be restored in a software update early next week. Just be sure to install the iOS update when it's released in order to regain the reduced functionality.

A zero-day Apple HomeKit vulnerability has been discovered that allows unauthorized remote access to smart accessories.

The tvOS and watchOS updates were released on December 4 and 5, respectively, and contain the same fixes: for the aforementioned kernel bugs and a memory corruption issue in IOSurface, which could have allowed a malicious application to execute arbitrary code with kernel privileges.

The existence of the vulnerability isn't necessarily damning for HomeKit as a product, but it does raise questions for users as to how much they should trust to the application.

Related News:



Most liked

California wind, fire danger hit unprecedented high
Los Angeles Mayor Eric Garcetti declared a state of emergency while 11 Los Angeles Unified schools canceled Wednesday classes. The fire was burning in the Hollywood Hills near the exclusive Bel Air neighborhood, home to many celebrities.

Johnson & Johnson (JNJ) Shares Bought by IFM Investors Pty Ltd
The company reported $1.83 earnings per share for the quarter, topping analysts' consensus estimates of $1.77 by $0.06. The Pennsylvania-based Conestoga Cap Advsrs Ltd Liability Corp has invested 0.03% in Johnson & Johnson (NYSE:JNJ).

Georges St-Pierre On Defending His Middleweight Belt: 'I Don't Think So'
Rockhold (16-3-0) is a former UFC Middleweight Champion, defeating Chris Weidman by fourth round TKO at UFC 194 to become champ. As a result, there are reports that a possible showdown between Rockhold and Whittaker could take place in early 2018.

Livestreaming, New Games Coming to Facebook Messenger
Video chats are a great way for people to connect, discuss and share moments with each other when text just isn't enough. Facebook said it will start testing the feature soon and will introduce the video chat tool early next year.

Diehard Bargain Hunter: Mondelez International, Inc. (MDLZ), Dell Technologies Inc. (DVMT)
Shares of MDLZ have uptrended 5.79% in the past three months, while the S&P 500 has moved -1.34% in that time. When investing in a volatile security, the risk of success is increased just as much as the risk of failure.

Champions League: United, Juve into Last 16; as Bayern Beat PSG
It's normal - first match of the season for him. "And he's going to get more because the performance was really positive". But Shaw took his chance last night, playing the full 90 minutes of United's 2-1 win over CSKA Moscow .

Fallen Kingdom' Trailer Is Here Because Life Finds A Way
With a figure like that, it's hardly suprirrisng that a sequel, which we now know as Jurassic World: Fallen Kingdom , was ordered. There's also a nod to the original movie, with a quick shot revealing an old truck emblazoned with the Jurassic Park logo.

Time to Reconsider Aerovironment Incorporated (NASDAQ:AVAV) After Less Short Sellers?
Announces Fiscal 2018 Second Quarter Results" published on December 05, 2017, Businesswire.com published: " AeroVironment, Inc . The firm owned 35,046 shares of the aerospace company's stock after acquiring an additional 19,136 shares during the period.

Hess Corporation (HES) Formed Bullish Inverse Head & Shoulders; Buyers Could Thrive
The oil and gas producer reported ($1.07) EPS for the quarter, beating the Zacks' consensus estimate of ($1.29) by $0.22. The fund owned 538,416 shares of the oil and gas producer's stock after selling 66,260 shares during the period.

BMO Capital Markets Reiterates Outperform Rating for Sage Therapeutics (SAGE)
The rating was upgraded by Chardan Capital Markets to "Buy" on Friday, November 10. (NASDAQ: SAGE ) earned "Hold" rating by H.C. Sage's shares crumbled in September when its lead drug failed to outperform a placebo in treating a rare form of seizures.

Uber's future in Sheffield in jeopardy after suspension of license
Private hire firm Uber has had their licence suspended in Sheffield throwing the future of the city operation into doubt. . A spokesman for the council said: 'If it decides against an appeal the suspension will come into force'.

Meek Mill Working Multiple Jobs in Prison for Little Pay
After another failed attempt to appeal Meek Mill's prison sentence, news leaked about the rapper's job life behind bars. Outside of the kitchen, Meek has access to electrical and carpentry shops and is on the waitlist for therapy classes.

Remains positively ID'd as missing North Carolina girl Mariah Woods
On November 27, Kristy said she woke up, noticed her daughter missing, and immediately reported the disappearance to the police. In documents provided by the children's biological father, Alex Woods, Kirsty allegedly knew Kimrey was sexually abusing Mariah.

Blackrock New York Muni Trust (BQH): SuperTrend Above Stock Price
The last close places the company's stock about $6.55 off its 52 week high of $30.49 and $3.6 above the 52 week low of $20.34. Technical analysts may be interested in how Invesco Muni Income Trust (OIA) is trading in relation to some moving averages.

Geoff Keighley Teases Major New Announcement at The Game Awards
Games like Persona 5 , Super Mario Odyssey , and Horizon Zero Dawn jostle for awards such as Game of the Year. At 8:30 PM EST, the awards ceremony will begin, but you still have time to vote for your favorite games.