Apple AirPlay SDK devices at risk of takeover—make sure you update

Researchers disclosed 23 vulnerabilities in Apple’s AirPlay SDK (resulting in 17 CVEs), including critical zero-click remote code execution and authentication bypass flaws that could allow attackers on the same network to take over AirPlay-enabled devices or intercept data; Apple released patches (iOS/iPadOS 18.4.1 and updates for MFi partners) and guidance to update devices, disable AirPlay when unused, and restrict AirPlay settings.