IOS HomeKit Zero Day Lets Attackers Remotely Access Your Smart Home

IOS HomeKit Zero Day Lets Attackers Remotely Access Your Smart Home

9to5Mac reports on an iOS 11.2 flaw which affected HomeKit, allowing unauthorized remote access to devices, as shown to the publication. The bug, which was initially spotted by 9to5Mac, reportedly made it possible for an outside party to access things like smart locks and garage doors. The exploit required an iPhone or iPad iOS 11.2, while connected to a user's iCloud account.

The implications of the vulnerability are extremely worrying, with the obvious concern being the ability for attackers to remotely open a smart lock or garage door and gain access to someone's house without a physical key.

The iOS update was rushed out on Saturday because of a critical need to fix a bug in iOS 11 that caused some iPhones to crash when the calendar changed to December 2.

The fix appears to be server side update, meaning that the end-user doesn't have to update anything for it to take effect.

Apple will be pushing a more permanent fix with iOS 11.2 next week which should restore full functionality and correct the issue.

The tvOS and watchOS updates were released on December 4 and 5, respectively, and contain the same fixes: for the aforementioned kernel bugs and a memory corruption issue in IOSurface, which could have allowed a malicious application to execute arbitrary code with kernel privileges. The problem isn't with any individual smart home device, but with the HomeKit protocol itself. Getting that functionality back will require updating to the latest version of iOS.

Related Articles

  • George St-Pierre Not Sure If He Will Defend UFC Middleweight Title

    George St-Pierre Not Sure If He Will Defend UFC Middleweight Title

    Rockhold faced top Middleweight and former World Series of Fighting Middleweight and Light Heavyweight champion, David Branch . But St-Pierre has yet to commit to departing the division as of right now and is still mulling over his future.
    THQ Nordic is working on a new Jagged Alliance game

    THQ Nordic is working on a new Jagged Alliance game

    Much of your survival will depend on how well you read weather patterns and whether you decide to seek shelter or press on. The plan is for approximately eight months of early access release followed by a final release in August 2018.
    This Biotech Vaults More Than 75% On Depression Drug Results

    This Biotech Vaults More Than 75% On Depression Drug Results

    The company engages in the development and commercialization of novel medicines to treat central nervous system disorders. Chardan Capital Markets upgraded Sage Therapeutics , Inc. (NASDAQ: SAGE ) rating on Friday, August 4.
  • Lawsuit Accuses Bryan Singer of Sexually Assaulting 17-Year-Old Boy

    Lawsuit Accuses Bryan Singer of Sexually Assaulting 17-Year-Old Boy

    Singer later promised he would help Sanchez-Guzman in Hollywood if he didn't tell anyone what had happened, the suit says. Besides those two cases, Singer has been the subject of various other sexual misconduct allegations over the years.
    Zardari demands resignations of Shehbaz Sharif, Rana Sana after Tahirul Qadri meeting

    Zardari demands resignations of Shehbaz Sharif, Rana Sana after Tahirul Qadri meeting

    Meanwhile, Rana Sanaullah shunned the call for Shehbaz Sharif's resignation saying such demands were made every other day. "The barriers [around Minhajul Quran Secretariat] were lawful and no one had objected to them for three years".
    Local experts discuss holiday lighting and tree safety

    Local experts discuss holiday lighting and tree safety

    One trend has seen upside-down trees start to take off, but that's far from the only modern spin on the historical tradition. These ornaments are available in It's a Wonderful Pine , Christmas Time Spruce , White Winter Fir , and O Christmas Tree .
  • Bayonetta 3 Coming to Switch, Along with Bayoneta 1&2

    Bayonetta 3 Coming to Switch, Along with Bayoneta 1&2

    To help fans wait patiently for the third game, both Bayonetta and Bayonetta 2 will be released for the Nintendo Switch console. Anyway, we're always down for more Bayonetta , and happy she's become an unofficial Nintendo mascot.
    The Champions' Ballad DLC to release tonight for Breath of the Wild

    The Champions' Ballad DLC to release tonight for Breath of the Wild

    The much-anticipated second DLC expansion for The Legend of Zelda: Breath of the Wild finally has a release date. Aonuma also added that Toon Link's lobster shirt from The Legend of Zelda: The Wind Waker would make a comeback.
    Fallen Kingdom' Gives us a New Dino, More Explosions & Goldblum

    Fallen Kingdom' Gives us a New Dino, More Explosions & Goldblum

    The trailer gives us our first insight into what Fallen Kingdom will be about; up until now, neither the studio nor director J.A. Jeff Goldblum , plus BD Wong , Toby Jones , Ted Levine , James Cromwell , Geraldine Chaplin , and Rafe Spall .
  • A Look At Recent Insider Trades For Brandywine Realty Trust (BDN)

    State Of New Jersey Common Pension Fund D has invested 0.04% of its portfolio in Brandywine Realty Trust (NYSE:BDN). Century Management Limited Liability Co has 0.23% invested in Brandywine Realty Trust (NYSE:BDN) for 76,233 shares.
    Dubai International Film Festival lights up silver screens across the city

    Dubai International Film Festival lights up silver screens across the city

    During the opening ceremony, worldwide actors won awards that recognised achievements for outstanding contributions to cinema. Egyptian screenwriter Wahid Hamed was given a standing ovation for his contribution to the field of cinema.
    The Game Awards 2017 Livestream

    The Game Awards 2017 Livestream

    We have the YouTube stream embedded below, but you can also watch live on Twitter, Facebook, Steam, Twitch and even Mixer. Capcom: Infinite , Injustice 2 and Arms will be duking it out for Best Fighting Game.