Critical AirPlay Vulnerabilities Enable Zero-Click Remote Code Execution

Oligo Security Research has uncovered critical vulnerabilities (AirBorne) in Apple's AirPlay protocol and SDK, allowing zero-click or one-click remote code execution (RCE). Attackers can bypass access control lists (ACLs) and user interaction, potentially enabling worm-like spread. These affect macOS, AirPlay SDK-enabled devices, and CarPlay, with consequences ranging from sensitive data theft to ransomware deployment. Apple has released patches; users should immediately update and consider disabling or restricting AirPlay access.