IOS HomeKit Zero Day Lets Attackers Remotely Access Your Smart Home

IOS HomeKit Zero Day Lets Attackers Remotely Access Your Smart Home

9to5Mac reports on an iOS 11.2 flaw which affected HomeKit, allowing unauthorized remote access to devices, as shown to the publication. The bug, which was initially spotted by 9to5Mac, reportedly made it possible for an outside party to access things like smart locks and garage doors. The exploit required an iPhone or iPad iOS 11.2, while connected to a user's iCloud account.

The implications of the vulnerability are extremely worrying, with the obvious concern being the ability for attackers to remotely open a smart lock or garage door and gain access to someone's house without a physical key.

The iOS update was rushed out on Saturday because of a critical need to fix a bug in iOS 11 that caused some iPhones to crash when the calendar changed to December 2.

The fix appears to be server side update, meaning that the end-user doesn't have to update anything for it to take effect.

Apple will be pushing a more permanent fix with iOS 11.2 next week which should restore full functionality and correct the issue.

The tvOS and watchOS updates were released on December 4 and 5, respectively, and contain the same fixes: for the aforementioned kernel bugs and a memory corruption issue in IOSurface, which could have allowed a malicious application to execute arbitrary code with kernel privileges. The problem isn't with any individual smart home device, but with the HomeKit protocol itself. Getting that functionality back will require updating to the latest version of iOS.

Related Articles

  • Dubai International Film Festival lights up silver screens across the city

    Dubai International Film Festival lights up silver screens across the city

    During the opening ceremony, worldwide actors won awards that recognised achievements for outstanding contributions to cinema. Egyptian screenwriter Wahid Hamed was given a standing ovation for his contribution to the field of cinema.
    Angry Birds and Sonic will soon be playable in Facebook Messenger

    Angry Birds and Sonic will soon be playable in Facebook Messenger

    That Disney Tsum Tsum game looks to be a puzzle title that will allow "players to collect, content and pop Tsum Tsum ". It's easy to get started: while playing a game, tap the camera icon located in the upper right corner of the game.
    Accused murder suspect in Hamilton Good Samaritan homicide arrested

    Accused murder suspect in Hamilton Good Samaritan homicide arrested

    James Mattheson, 20, was arrested Monday in connection with the shooting was also charged with accessory after the fact. Al-Hasnawi was a first-year medical science student at Brock University who had dreams of becoming a doctor one day.
  • CSKA Moscow and Qarabag out of UEFA Champions League

    CSKA Moscow and Qarabag out of UEFA Champions League

    It was no surprise that in 80 minutes he's feeling the consequences of that intensity; it's normal as it's the first match of the season for him.
    Local experts discuss holiday lighting and tree safety

    Local experts discuss holiday lighting and tree safety

    One trend has seen upside-down trees start to take off, but that's far from the only modern spin on the historical tradition. These ornaments are available in It's a Wonderful Pine , Christmas Time Spruce , White Winter Fir , and O Christmas Tree .
    The Game Awards 2017 Livestream

    The Game Awards 2017 Livestream

    We have the YouTube stream embedded below, but you can also watch live on Twitter, Facebook, Steam, Twitch and even Mixer. Capcom: Infinite , Injustice 2 and Arms will be duking it out for Best Fighting Game.
  • Bayonetta 3 Coming to Switch, Along with Bayoneta 1&2

    Bayonetta 3 Coming to Switch, Along with Bayoneta 1&2

    To help fans wait patiently for the third game, both Bayonetta and Bayonetta 2 will be released for the Nintendo Switch console. Anyway, we're always down for more Bayonetta , and happy she's become an unofficial Nintendo mascot.

    PNC Financial Services Group (NYSE:PNC) Given Media Sentiment Score of 0.42

    After a recent check, the current stock price divided by the 52-week high for shares of The PNC Financial Services Group, Inc. The PNC Financial Services Group , Inc. grasps an EPS value of 8.21 * displaying an EPS growth of -1.70% * for this year.
    This Biotech Vaults More Than 75% On Depression Drug Results

    This Biotech Vaults More Than 75% On Depression Drug Results

    The company engages in the development and commercialization of novel medicines to treat central nervous system disorders. Chardan Capital Markets upgraded Sage Therapeutics , Inc. (NASDAQ: SAGE ) rating on Friday, August 4.
  • George St-Pierre Not Sure If He Will Defend UFC Middleweight Title

    George St-Pierre Not Sure If He Will Defend UFC Middleweight Title

    Rockhold faced top Middleweight and former World Series of Fighting Middleweight and Light Heavyweight champion, David Branch . But St-Pierre has yet to commit to departing the division as of right now and is still mulling over his future.
    Lawsuit Accuses Bryan Singer of Sexually Assaulting 17-Year-Old Boy

    Lawsuit Accuses Bryan Singer of Sexually Assaulting 17-Year-Old Boy

    Singer later promised he would help Sanchez-Guzman in Hollywood if he didn't tell anyone what had happened, the suit says. Besides those two cases, Singer has been the subject of various other sexual misconduct allegations over the years.
    Fallen Kingdom' Gives us a New Dino, More Explosions & Goldblum

    Fallen Kingdom' Gives us a New Dino, More Explosions & Goldblum

    The trailer gives us our first insight into what Fallen Kingdom will be about; up until now, neither the studio nor director J.A. Jeff Goldblum , plus BD Wong , Toby Jones , Ted Levine , James Cromwell , Geraldine Chaplin , and Rafe Spall .