Free tools Windows power users keep installed
One-click scans. No signup required.
“Airborne hackers” is not one Apple vulnerability. It can refer to attacks involving nearby wireless features such as AirDrop, or to AirBorne, a 2025 disclosure about vulnerabilities in AirPlay and its software development kit. Those are different technologies, with different conditions and fixes; neither disclosure means every Apple device is vulnerable or that a stranger can automatically take files from your iPhone.
AirDrop and AirBorne are different security issues
AirDrop is Apple’s nearby sharing feature. It uses Bluetooth Low Energy (BLE) to advertise and discover devices, then Apple peer-to-peer Wi-Fi to make a direct connection. The peer connection is encrypted with TLS and does not need an internet connection or Wi-Fi access point. Discovery is not the same as a completed transfer: the person receiving a share can accept or decline it.
As an Amazon Associate I earn from qualifying purchases.
AirBorne is the name Oligo Security gave to a set of vulnerabilities it disclosed in the AirPlay protocol and the AirPlay SDK used by third-party manufacturers. AirPlay sends or streams content to compatible receivers; it is not AirDrop under another name. The reported attack conditions and outcomes vary by implementation, device settings and network access.
| Case | What is involved | Conditions and reported impact | Evidence and date |
|---|---|---|---|
| AirDrop operation | BLE discovery and an Apple peer-to-peer Wi-Fi connection | Nearby devices; receiving behavior depends on the AirDrop setting. A transfer is a separate action the recipient can accept or decline. | Apple Platform Security and AirDrop & Privacy documentation |
| AirBorne disclosure | AirPlay protocol and AirPlay SDK implementations | Oligo reported outcomes ranging from denial of service and information disclosure to remote code execution in specified configurations. Exposure depends on the receiver, implementation, settings and access conditions. | Oligo Security disclosure, April 29, 2025; Apple’s iOS 18.3/iPadOS 18.3 security page lists CVE-2025-24126 |
| Newer AirDrop findings | AirDrop behavior in macOS and iOS | A preprint reports three pre-authentication denial-of-service issues. The reported effect is service disruption, not a demonstrated ability to take files. | “Protocol Prying” preprint, June 2026; Jamaica Cyber Incident Response Team advisory, July 1, 2026 |
| Earlier wireless research | Apple Wireless Direct Link (AWDL), used by services including AirDrop | A 2019 study described man-in-the-middle, denial-of-service and privacy/tracking attack classes. It is historical research, not a list of current vulnerabilities. | USENIX Security paper, 2019 |
What AirDrop’s settings change
Apple’s Platform Security description says AirDrop-capable devices advertise a short identity hash over BLE. When another nearby, awake Apple device has AirDrop enabled, the devices may discover and respond to one another over peer-to-peer Wi-Fi. The receiving setting affects whether the device responds to an unfamiliar sender.
#1 Best Overall
- FIND YOUR ITEMS ON FIND MY — AirTag (2nd generation) helps you keep track of what matters. Attach one to an item you want to keep track of using the Find My app.*
- EXPANDED PRECISION FINDING ON IPHONE AND APPLE WATCH — Get step-by-step directions to your lost item on iPhone and, now, Apple Watch.*
- ENHANCED SPEAKER — With a 50% louder speaker and a new, distinctive chime, it’s easier than ever to hear and find AirTag.*
- PING FROM FAR AND WIDE — Upgraded Ultra Wideband and Bluetooth chips allow you to find your items from even farther away than ever before.*
- SHARE ITEM LOCATION — Share AirTag location access temporarily and securely with trusted contacts, third parties, or over 50 airline partners if you lose something important.
Contacts Only
With Contacts Only, the receiving device compares the sender’s received short identity hash with hashes corresponding to the receiver’s contacts. If there is no match, the receiver does not respond. This limits discovery by people who are not recognized in Contacts; it does not make the wireless feature cease to exist.
Everyone
With Everyone, the device responds even when there is no contact match. That makes it easier for nearby people to find the device for sharing. It does not mean that anyone who detects the device can silently browse its files: a proposed transfer still requires a recipient decision.
Rank #2
- FIND YOUR ITEMS ON FIND MY — AirTag (2nd generation) helps you keep track of what matters. Attach one to an item you want to keep track of using the Find My app.*
- EXPANDED PRECISION FINDING ON IPHONE AND APPLE WATCH — Get step-by-step directions to your lost item on iPhone and, now, Apple Watch.*
- ENHANCED SPEAKER — With a 50% louder speaker and a new, distinctive chime, it’s easier than ever to hear and find AirTag.*
- PING FROM FAR AND WIDE — Upgraded Ultra Wideband and Bluetooth chips allow you to find your items from even farther away than ever before.*
- SHARE ITEM LOCATION — Share AirTag location access temporarily and securely with trusted contacts, third parties, or over 50 airline partners if you lose something important.
Off
Apple says AirDrop can be turned off. Use Contacts Only or turn AirDrop off when you do not need to receive nearby shares. Apple’s AirDrop & Privacy guidance says both devices need Bluetooth and Wi-Fi turned on and must be in close proximity to start a transfer. Do not assume that changing a general Bluetooth or Wi-Fi control is equivalent to changing AirDrop’s receiving setting.
What Oligo reported about AirBorne
On April 29, 2025, Oligo Security disclosed vulnerabilities in AirPlay and the AirPlay SDK used by third-party manufacturers. Its report describes possible outcomes including zero-click and one-click remote code execution, access-control or interaction bypass, local file reading, information disclosure, man-in-the-middle attacks and denial of service. These are reported possibilities across varying scenarios, not a claim that every outcome applies to every AirPlay device.
Rank #3
- Smart Finder:The luggage GPS tracker makes it easy to manage your valuables. Working with the Find My app(IOS ONLY), you can quickly locate your items. It comes with one case, allowing you to attach the tag to your keys, wallet, backpack etc.
- Find Nearby:Use the Find My app to ring your luggage tracker when it's within Bluetooth range,or ask your Siri to find it for you.Click the 'Play Sound' Button, the tag tracker will make a sound 'di di di'. You can according to the sound find your items
- Find Far Away: When outside of Bluetooth range, use the Find My app to view your 'Item Locator's most recent location on a map. You can use the network and GPS of millions of Apple devices to locate it anywhere in the world.Reduce the loss of your items
- Share Your Items and Privacy Protection:The item finders tag lets your family view the location of your items (a feature for iOS 17).The chip in this Bluetooth tracker is MFi certified,guaranteeing that your location data is encrypted and protected
- Water Resistant & Replaceable Battery: Designed for outdoor adventures, this tracker can withstand rain, ensuring you can use it confidently in various weather conditions. Plus, it features a replaceable CR2032 battery that lasts up to a year
Oligo discusses Mac receiver configurations as well as third-party speakers and receivers built with the SDK. It also qualifies some iPhone scenarios: for example, some require the AirPlay receiver to be enabled. The applicable exposure therefore depends on the specific device, its software or firmware, receiver configuration and the attacker’s access to it. A broad claim that hackers can take over every iPhone “over the air” is not supported by the disclosure.
Apple’s iOS 18.3 and iPadOS 18.3 security content lists an AirPlay issue, CVE-2025-24126, confirming an official Apple fix record for at least one relevant issue. That entry should not be read as proof that it covers every AirBorne finding or every third-party implementation. Apple software updates address Apple’s own supported software; owners of AirPlay-enabled televisions, speakers, receivers or vehicle systems should also look for firmware updates from the product maker.
Rank #4
- Works with Apple Find My (iOS Only): Connect easily through the Apple Find My app—no extra app or subscription needed. Simply add the tracker to the “Items” section, then use your iPhone to find your valuables right away.
- Smart Location Trackers: Never lose track of your luggage, keys, bags or personal items again. These trackers work perfectly with the Find My app (iOS Only), giving you the ability to quickly find your Cyberdot items wherever they may be.
- Find Nearby: When your tracker is within Bluetooth range, you can use the Find My app to play a sound, or simply ask Siri to locate it for you. Tap the “Play Sound” button, and the tracker will emit a clear beep to help you quickly find your items by following the sound.
- Find Far Away: Once your tracker is beyond Bluetooth range, you can still check its last recorded position in the Find My app. Supported by Apple’s worldwide network and GPS, you can locate your items across the globe and effectively avoid losing them.
- Waterproof Design & Replaceable Battery: This sturdy tracking tag is water-resistant and ideal for outdoor use. It comes with a user-replaceable CR2032 battery that delivers up to one year of dependable performance.
What the 2026 AirDrop findings do—and do not—establish
The June 2026 preprint “Protocol Prying” reports six vulnerabilities across AirDrop and Google/Samsung Quick Share. Its abstract identifies three pre-authentication denial-of-service issues in macOS and iOS AirDrop: a Swift fatal error in an HTTP path router, unbounded XML property-list recursion, and a NULL dereference in Network.framework’s HTTP parser. The stated class of these three AirDrop issues is denial of service, not remote code execution.
A July 1, 2026 advisory from Jamaica’s Cyber Incident Response Team summarizes the reported risk as repeated crashes of the AirDrop sharing daemon, potentially disrupting AirDrop, AirPlay, Handoff, Universal Clipboard and related wireless features. That is a reported service-availability risk; it does not establish that an attacker can extract personal files.
Best Value
- [Compatibility]: Compatible with Apple AirTag 2nd Generation (2026) and AirTag 1st Generation (2021) GPS Item Finder for a perfect fit. GPS Item Finder Air Tag holder for kids case was designed especially, which Released a perfect fit. The AirTags 4 pack has 4 different color combinations compatible with the Air Tags 2nd generation to make your life more colorful,Air Tagholder makes your travel more convenient. NOTE: The AirTag 2nd & 1st Generation is NOT included.
- [Anti-lost with AirTag Keychain Design]: This AirTag keychain case comes with a fashionable metal carabiner is offered, so that you can easily hang the Air Tags everywhere, the enclosure fits tightly around for Apple AirTag holder to ensure that it stays put,so you can keep track of whatever it’s attached to. you can attach an Air Tag holder for kids case to a dog /cat pet collar, your car keyring, your bag,your Child's schoolbag,the valuables, and more.
- [Shockproof Silicone Materia]: The AirTag holder cover bumper is compatible with your delicate for Apple AirTag 2nd & 1st Generation. case for AirTag holder is made of waterproof silicone material, Air Tagholder can also resist scratches,which could provide a stronger buffer when bumps or drops to fully protect your Air Tag 2nd & 1st Generation.This Air Tag accessories is the perfect complement to your Air Tag.
- [Easy Installation]: The Air Tag holder features rexposed hole design is very conducive to signal transmission and humanized installation. Just put your Air Tagholder label in the silicone sleeve. A precise cut-out shows the original logo of the brand.Make your Air Tags 2nd & 1st generation more recognizable.
- [Warm Gifts]: Spoil Your Loved Ones With A Great Gift: Brighten your wife's, girlfriend's, husband's, boyfriend's, or kid's day with premium silicone for Apple AirTags 4 pack GPS items finder case holder keychain. package includes for AirTag 2nd & 1st case holder,AirTag keychain 4 pack,NOTE: The Apple Air Tag 2nd & 1st Generation is NOT included.
As of October 4, 2026, the sources cited here do not establish whether Apple fixed each of these particular reported issues in a specific currently supported operating-system release. The paper is a preprint, not an Apple-confirmed vulnerability bulletin. Install the latest security update offered for each Apple device, and consult current Apple security notices for applicable release details rather than assuming a patch status from the report alone.
Practical steps to reduce exposure
- Update Apple devices. Install the latest security updates offered by Apple for each iPhone, iPad, Mac or other Apple device you use.
- Limit AirDrop receiving. Choose Contacts Only, or turn AirDrop off when you do not need to receive shares from nearby devices.
- Update third-party AirPlay products. Check the manufacturer’s support or firmware-update channel for an AirPlay-enabled speaker, TV, receiver or vehicle system; Apple’s OS updates do not establish that a third-party product’s SDK or firmware is fixed.
- Restrict AirPlay receiver access. Where the product’s settings allow it, turn off an unused receiver or limit access to the current user or trusted devices.
These steps reduce exposure; they do not guarantee immunity from every wireless vulnerability. For third-party products, the maker’s firmware and security notices are the relevant place to confirm whether a fix is available.
Why older Apple wireless research still matters
A 2019 USENIX Security paper examined Apple Wireless Direct Link, or AWDL, and reported man-in-the-middle, denial-of-service and privacy/tracking attack classes affecting services that include AirDrop. The researchers reported that Apple had fixed one denial-of-service flaw after responsible disclosure, while other described privacy and security issues required service redesign. This work is useful context for understanding how complex wireless services can create security challenges, but it should not be treated as a current vulnerability inventory or evidence that those historical issues remain exploitable today.
Do these 3 things before closing this tab:
1Fix the driver behind crashes, sound loss and screen glitches2Repair Windows errors before they cause bigger problems3Scan for outdated or missing drivers - takes under a minuteQuick Recap
Product prices and availability are accurate as of the date/time indicated and are subject to change. Any price and availability information displayed on Amazon at the time of purchase will apply.
