Apple Fixes iOS 11.2 Homekit Vulnerability

iOS HomeKit Zero Day Lets Attackers Remotely Access Your Smart Home

iOS HomeKit Zero Day Lets Attackers Remotely Access Your Smart Home

The list of products compatible with Apple HomeKit includes light switches, thermostats, doorbells and cameras, in addition to garage door openers and smart locks. The serious security issues have already been fixed via a server-side patch by Apple, and an update to iOS 11.2 is coming in the near future to fix any broken functionality.

9to5Mac reports on an iOS 11.2 flaw which affected HomeKit, allowing unauthorized remote access to devices, as shown to the publication.

Apple usually pushes out security updates for its various devices and software on the same day, but not this time. Clearly, in the wrong hands such a flaw would put a household at risk of burglary.

Apple has been forced to fix a security hole within its HomeKit smart home system that could have allowed hackers to unlock users' smart locks or other devices. The flaw was shut down when Apple made changes to the operation of its HomeKit servers, which has reduced functionality for now - this will be restored with the next iOS update.


As a side note: this latest watchOS upgrade also provides peer-to-peer payment capability through Apple Pay, but it will only work on Apple Watch when the wearable is paired with an iPhone running iOS 11.2.

Needing access to the victim's iCloud account already puts any potential attacker on the back foot, but such attacks have proved to be successful in the past, by stealing passwords and taking advantage of the victim not using two factor authentication. Earlier iOS versions are free of the bug.

The issue affecting HomeKit users running iOS 11.2 has been fixed.

Users won't have to install anything, but they will notice the "remote access to shared users" feature for their HomeKit devices has been temporarily disabled.

Recommended News

  • Solo set to run for head of US Soccer

    Solo set to run for head of US Soccer

    Later, Nichols was pushed out by the USWNT players, who went on to sign a new collective bargaining agreement with U.S. She recorded 103 shutouts in 202 worldwide matches, making her the greatest women's goalkeeper of all time.
    Federal Bureau of Investigation  chief Wray rejects Trump criticism

    Federal Bureau of Investigation chief Wray rejects Trump criticism

    But he conceded that agents do make mistakes, adding that there are processes in place to hold them accountable. "We've seen the attacks on legislative oversight, intelligence agencies, the judiciary, journalists".
    Lonzo Ball helps Lakers beat 76ers 107-104

    Lonzo Ball helps Lakers beat 76ers 107-104

    Embiid led the way for Philadelphia with 33 points on 11-for-17 shooting, seven rebounds, six assists, five blocks and a steal. Agent Harrison Gaines represents all three of Ball's sons, including Los Angeles Lakers rookie Lonzo.
  • Selfie-style answers let celebs respond to frequently asked questions on Google

    Selfie-style answers let celebs respond to frequently asked questions on Google

    While the questions were not exactly the same, we assumed they would be close enough to both elicit a selfie-style answer. However, if you search "Can Tracee Ellis Ross Sing?" the top result will be a video response from Ross.
    Barkley victor  of Silver Football

    Barkley victor of Silver Football

    He did score a league-high 21 touchdowns but finished fourth in the Big Ten in rushing yards, with 1,134, behind a suspect line. Oklahoma quarterback Baker Mayfield and Stanford running back Bryce Love took home the Maxwell and Doak Walker, respectively.
    Facebook Adds Livestreaming To 'Instant Games' Feature Within Messenger

    Facebook Adds Livestreaming To 'Instant Games' Feature Within Messenger

    While playing a Instant Game in the Messenger app tap the camera icon located in the upper right corner of the game. Facebook said it will start testing the feature soon and will introduce the video chat tool early next year.
  • Fires menace Los Angeles

    Fires menace Los Angeles

    Propane tanks under several houses exploded from the heat, sounding like bombs, according to a Reuters photographer at the scene. Six fires burning out of control amid hurricanes in California have claimed the life of a woman as well as hundreds of homes.

    The Bear Case for Rite Aid Corporation (RAD)

    During last three month period, the net percent changes held by Institutional Investors has observed a changes of 0.80%. Avnet, Inc. (NYSE:AVT) reduced of -1.13% and First Industrial Realty Trust, Inc. (NASDAQ:CSCO) for 71,140 shares.
    Queensland election result looms

    Queensland election result looms

    Mr Nicholls has stood down as LNP leader and a party room meeting will be held on Tuesday to determine who will lead the party. Treasurer Curtis Pitt is expected to be on the chopping block, amid reports he could be moved into the Speaker's role.
  • Michael Owen states his prediction for West Ham v Chelsea

    Michael Owen states his prediction for West Ham v Chelsea

    With Pep Guardiola's side showing no sign of faltering, Chelsea midfielder Willian is well aware the pressure is on Conte's team to avoid any slip-ups.
    National Basketball Association  roundup: Nets rally from 16 down to beat Thunder

    National Basketball Association roundup: Nets rally from 16 down to beat Thunder

    We knew it was going to take a little time. "I definitely want to stay away from that one", Atkinson said. The Nets will play two regular-season games in the Mexican capital this week.
    'In the Valley of Gods' Announced - Screens & Trailer

    'In the Valley of Gods' Announced - Screens & Trailer

    In its fourth year running, The Game Awards has continued to deliver just as many video game announcements as actual awards. The first major reveal of The Game Awards is the next game from Campo Santo, the makers of Firewatch .

We are pleased to provide this opportunity to share information, experiences and observations about what's in the news.
Some of the comments may be reprinted elsewhere in the site or in the newspaper.
Thank you for taking the time to offer your thoughts.