Apple Fixes Bug That Let Hackers Wrest Control of Smart Home Devices

Chelsea West
December 9, 2017

Despite being considerably hard to reproduce, the vulnerability did allow some users to bypass security checks and take control of a wide range of HomeKit connected accessories such as wall plugs, smart lights and thermostats.

Apple has fixed a vulnerability in its HomeKit internet-of-things platform that allowed a hacker to take remote control of users' gadgets, including smart locks. Apple has said that it has fixed the bug temporarily.

However this is only temporary as Apple does plan on fixing the vulnerability permanently in future software updates, but in the meantime hopefully the temporary fix will prevent any unwanted consequences.

More news: Taylor Swift & Kim Kardashian Are Apparently Feuding Again

The flaw is present in the current version of iOS 11.2 and was demonstrated to 9to5Mac. 9to5Mac said that "the vulnerability required at least one iPhone or iPad on iOS 11.2, the latest version of Apple's mobile operating system, connected to the HomeKit user's iCloud account", which isn't exactly easy.

The flaw in iOS software exposed key connected home hardware for unauthorized access. While the publication hasn't shared any specific details, it said that the "issue was not with smart home products individually but instead with the HomeKit framework itself that connects products from various companies".

The company has been criticised recently after some of its other software releases were found to contain serious bugs. Another update to iOS next week should eliminate the vulnerability and restore full functionality. In the coming days, Apple plans to also issue a software update to users to ensure the software doesn't allow hacking on the user side.

Other reports by TheSundaySentinel

Discuss This Article

FOLLOW OUR NEWSPAPER