Cybersecurity researchers have discovered a set of critical vulnerabilities in Apple’s AirPlay feature, prompting an urgent warning for all iPhone, Mac, and Apple TV users to disable the automatic AirPlay setting.

The flaws, collectively dubbed “AirBorne,” were identified by Oligo Security and involve 23 vulnerabilities in Apple’s wireless streaming protocol.

The team demonstrated 17 distinct methods by which hackers could exploit these vulnerabilities to perform zero-click attacks, including remotely hijacking devices, deploying malware, and stealing data, without any user interaction.

The flaws impact not only iPhones and Macs but also smart speakers and CarPlay-enabled vehicles.

In the worst-case scenario, compromised devices could spread malware like a network worm across shared Wi-Fi connections, especially in public networks.

Apple addressed the flaws in recent updates, including iOS 18.4, macOS Sequoia 15.4, and tvOS 18.4, released on March 31.

However, millions of third-party AirPlay-enabled devices remain at risk due to a lack of timely updates from manufacturers.

Cybersecurity experts advise users to immediately disable AirPlay’s automatic feature to reduce exposure.

To do so, users should go to Settings > General > AirPlay & Continuity > Automatically AirPlay, and select ‘Never‘.

While Apple has stated that attackers must be on the same Wi-Fi network to exploit the vulnerabilities, Oligo warns that many third-party devices may remain vulnerable indefinitely.

The persistent background broadcasting of AirPlay-enabled devices makes them attractive targets for network-based attacks.

With over 2.35 billion Apple devices active globally, including 1.8 billion iPhones, the potential reach of “AirBorne” is vast.

Users are urged to combine software updates, restrictive settings, and additional security tools to protect against this newly discovered threat.