# Risky Business #789 -- Apple's AirPlay Vulnerabilities: A Surprisingly Awful Threat to Billions of Devices

The latest threat to the security of billions of devices has come in the form of a vulnerability in Apple's AirPlay feature. This weakness, known as Wormable Zero-Click RCE (Remote Code Execution), allows hackers to execute malicious code on affected devices without any user interaction.

The impact of this vulnerability is substantial, with millions of devices potentially at risk. The good news is that Apple has already issued a patch for the issue, which can be installed to protect against the attack.

But what makes this vulnerability so concerning? For years, researchers have been warning about the ease with which hackers can bypass security defenses on iOS and Android devices. The Wormable Zero-Click RCE in AirPlay is just the latest example of how these vulnerabilities can be exploited.

The vulnerability was discovered by a security researcher, who reported it to Apple and the wider cybersecurity community. Fortunately, Apple has already released an update to address the issue, which can be installed to protect against the attack.

But this highlights a broader problem in the way that security defenses are designed. For years, researchers have been warning about the ease with which hackers can bypass security defenses on iOS and Android devices. The Wormable Zero-Click RCE in AirPlay is just the latest example of how these vulnerabilities can be exploited.

So what can users do to protect themselves from this vulnerability? First and foremost, they should ensure that their device is running the latest version of iOS or Android, which includes the patch for the Wormable Zero-Click RCE. They should also be cautious when using public Wi-Fi networks, as these are often the most vulnerable to hacking attempts.

Additionally, users can take steps to protect themselves from other types of cyber threats by being more mindful of their online behavior. This includes using strong passwords, keeping their device software up-to-date, and avoiding suspicious emails or attachments.

In conclusion, the Wormable Zero-Click RCE in AirPlay is a serious vulnerability that highlights the need for greater vigilance when it comes to cybersecurity. By staying informed about the latest threats and taking steps to protect themselves, users can reduce their risk of falling victim to these types of attacks.

# Recent Cybersecurity News

In other news, several major retailers have confirmed being hit by a "cyber incident" amid store delays. British retailer M&S has confirmed that it was targeted by a hacking group known as Scattered Spider.

The cyberattack on M&S is believed to have been carried out using phishing tactics, where hackers sent fake emails to employees with the intention of gaining access to sensitive information.

M&S has not disclosed further details about the attack, but it is clear that the company's cybersecurity defenses were breached. This highlights the ongoing threat posed by cyber attacks and the need for companies to have robust security measures in place.

# Other Cybersecurity News

Meanwhile, Japan's financial regulator has warned of hundreds of millions of dollars in unauthorized trades from hacked accounts.

The warning was issued after hackers gained access to several major banks' systems, allowing them to execute large numbers of unauthorized trades.

The incident highlights the growing threat posed by cyber attacks on financial institutions. It also serves as a reminder that even seemingly secure systems can be breached if adequate security measures are not in place.

# Cybersecurity News from Around the World

In other news, Iran has confirmed that it successfully repelled a major cyberattack on its infrastructure.

The attack was reportedly launched by hackers using advanced malware and phishing tactics.

Russia has also reported a significant increase in the number of reported cases of NFC card malware, which highlights the ongoing threat posed by cyber attacks in the region.

# Top Stories from Risky Business Media

In other news, former CISA director Chris Krebs has left his position at SentinelOne following pressure from the Trump administration.

Krebs was a vocal critic of the Trump administration's cybersecurity policies and had spoken out against the cuts to digital defense funding. His departure is seen as a significant blow to the agency's efforts to protect American critical infrastructure.

# What's Next in Cybersecurity?

As the threat landscape continues to evolve, it's essential to stay informed about the latest developments in cybersecurity.

Here are some key takeaways from recent research and news:

* The Wormable Zero-Click RCE vulnerability highlights the ongoing threat posed by remote code execution attacks. * Japan's financial regulator has warned of hundreds of millions of dollars in unauthorized trades from hacked accounts. * Iran has successfully repelled a major cyberattack on its infrastructure.

Stay informed about the latest cybersecurity news and threats by following our blog.