Page 4 - Positive Security News Today : Breaking News, Live Updates & Top Stories | Vimarsana

Geeky Gadgets 9:26 am We previously heard that the new Apple AirTag had been hacked and now it looks like a security researcher may be able to exploit Apple’s Find My network. According to Security researcher Fabian Bräunlein he has been able to use Apple’s Find My network to send messages. With the recent release of Apple’s AirTags, I was curious whether Find My’s Offline Finding network could be (ab)used to upload arbitrary data to the Internet, from devices that are not connected to WiFi or mobile internet. The data would be broadcasted via Bluetooth Low Energy and picked up by ne...

The ‘Send My’ exploit can use Apple's locator service to collect and send information from nearby devices for later upload to iCloud servers.

By Ionut Arghire on May 13, 2021 Security researchers have discovered a way to leverage Apple’s Find My's Offline Finding network to upload data from devices, even those that do not have a Wi-Fi or mobile network connection. Using Bluetooth Low Energy, the data is being sent to nearby Apple devices that do connect to the Internet, and then sent to Apple’s servers, from where it can be retrieved at a later date. The technique could be used to avoid the costs and power usage associated with mobile Internet, or to exfiltrate data from Faraday-shielded sites visited by iPhone users, researc...

Apple’s Find My Network Function Is Faulty May 13, 2021 09:10 GMT   ·  Comment      Find My Network Apple's Find My Network used to monitor iOS and macOS devices, as well as more recently AirTags and other products, turns out to be a spying tool.   Apple devices can be used to send data over the air from one location to another, such as a computer on the other side of the planet, without the need for any other network connection. This can be achieved using Bluetooth Low Energy (BLE) broadcasts and a microcontroller designed to act as a modem. Fabian Bräunlein, the co-founde...

  Security researchers investigating the Find My network used by Apple's AirTags, have been able to piggyback on the system to send data that Apple can neither monitor nor, apparently, prevent. It's not something that can be easily replicated, nor is it something that could mean AirTags users face any issues of malware. However, it is reportedly possible for the Find My network to be subverted to send encoded messages between devices, albeit very short messages. According to Berlin-based IT security consultancy Positive Security, "it's possible to upload arbitrary data from non-internet-conn...