[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$fDgzGwjW3D7JWHAQ4q5yBoCKCYsARgbR2fOG_6WmDn8M":3},{"article":4,"iocs":49,"watch_terms":81,"solutions":82,"lesson":159},{"id":5,"title":6,"slug":7,"summary":8,"ai_summary":9,"brief":10,"url":11,"image_url":12,"published_at":13,"ingested_at":14,"relevance_score":15,"entities":16,"category_id":31,"category":32,"article_tags":36},"6ea4138f-854b-47a9-a5ea-cd0a6caf0c19","Bluetooth, AirPlay Pairing Vulnerabilities Patched Across Apple Platforms","bluetooth-airplay-pairing-vulnerabilities-patched-across-apple-platforms-84d5f3","Apple has patched Bluetooth and AirPlay pairing flaws, iMessage vulnerabilities, and an exploited Brotli bug across its platforms. The post Bluetooth, AirPlay Pairing Vulnerabilities Patched Across Apple Platforms appeared first on SecurityWeek.","Apple has released security updates for iOS, iPadOS, macOS, watchOS, and visionOS to address 10 vulnerabilities. Five of these flaws are related to Bluetooth and AirPlay pairing, with some allowing attackers in Bluetooth range to bypass pairing code limits or establish connections without user interaction. Additionally, two iMessage vulnerabilities and a Brotli bug, known as Node2Shell and previously targeted by threat actors, were patched.","Apple patched 10 vulnerabilities across its platforms, including Bluetooth and AirPlay pairing flaws.","https:\u002F\u002Fwww.securityweek.com\u002Fbluetooth-airplay-pairing-vulnerabilities-patched-across-apple-platforms\u002F","https:\u002F\u002Fwww.securityweek.com\u002Fwp-content\u002Fuploads\u002F2026\u002F11\u002FApple-iphone-bluetooth-airplay.jpeg","2026-11-11T07:00:17+00:00","2026-11-11T08:00:18.872553+00:00",7,[17,20,23,25,27,29],{"name":18,"type":19},"Apple","vendor",{"name":21,"type":22},"iOS","product",{"name":24,"type":22},"iPadOS",{"name":26,"type":22},"macOS",{"name":28,"type":22},"watchOS",{"name":30,"type":22},"visionOS","80544778-fabb-4dcd-aa35-17492e5dcf4f",{"id":31,"icon":33,"name":34,"slug":35},null,"Vulnerabilities","vulnerabilities",[37,39,44],{"category":38},{"id":31,"icon":33,"name":34,"slug":35},{"category":40},{"id":41,"icon":33,"name":42,"slug":43},"d6f63bb8-0801-486a-be7f-171400700454","IoT\u002FOT","iot-ot",{"category":45},{"id":46,"icon":33,"name":47,"slug":48},"e7b231c8-5f79-4465-8d38-1ef13aea5a14","Threat Intelligence","threat-intelligence",[50,54,57,60,63,66,69,72,75,78],{"type":51,"value":52,"context":53},"cve","CVE-2026-113968","AirPlay bug exploitable from Bluetooth range.",{"type":51,"value":55,"context":56},"CVE-2026-113969","AirPlay pairing code vulnerability in rapportd component.",{"type":51,"value":58,"context":59},"CVE-2026-113964","CoreUtils vulnerability related to pairing code bypass.",{"type":51,"value":61,"context":62},"CVE-2026-113965","CoreUtils issue allowing pairing without user interaction.",{"type":51,"value":64,"context":65},"CVE-2026-113970","Use-after-free vulnerability in Bluetooth.",{"type":51,"value":67,"context":68},"CVE-2026-113961","iMessage vulnerability allowing remote attacker to join group chats.",{"type":51,"value":70,"context":71},"CVE-2026-113960","iMessage vulnerability exposing earlier conversation.",{"type":51,"value":73,"context":74},"CVE-2026-111497","Brotli vulnerability (Node2Shell).",{"type":51,"value":76,"context":77},"CVE-2026-113963","App Intents authorization issue.",{"type":51,"value":79,"context":80},"CVE-2026-113971","Vulnerability allowing AirPlay receiver pairing from lock screen.",[18,21,24],{"controls":83,"vendors":153},[84,113,139],{"slug":85,"name":86,"problem":87,"products":88},"phishing-resistant-mfa","Phishing-resistant MFA","A stolen password, or a user who taps Approve on a push prompt, is no longer enough to log in.",[89,97,105],{"vendor_slug":90,"vendor_name":91,"vendor_logo":92,"product_slug":93,"product_name":94,"url":95,"description":96},"cisco","Cisco","\u002Fvendor-logos\u002Fcisco.png","duo","Cisco Duo","https:\u002F\u002Fduo.com\u002F","MFA and device trust, with support for passkeys and security keys.",{"vendor_slug":98,"vendor_name":99,"vendor_logo":100,"product_slug":101,"product_name":102,"url":103,"description":104},"okta","Okta","\u002Fvendor-logos\u002Fokta.png","workforce-identity","Okta Workforce Identity","https:\u002F\u002Fwww.okta.com\u002Fproducts\u002Fworkforce-identity\u002F","Single sign-on, adaptive MFA including phishing-resistant methods, and lifecycle management for employees.",{"vendor_slug":106,"vendor_name":107,"vendor_logo":108,"product_slug":109,"product_name":110,"url":111,"description":112},"microsoft","Microsoft","\u002Fvendor-logos\u002Fmicrosoft.png","entra-id","Microsoft Entra ID","https:\u002F\u002Fwww.microsoft.com\u002Fen-us\u002Fsecurity\u002Fbusiness\u002Fidentity-access\u002Fmicrosoft-entra-id","Cloud identity and access management with single sign-on, conditional access, passkeys and identity governance.",{"slug":114,"name":115,"problem":116,"products":117},"patch-management","Automated patch management","Known holes get closed in days, not months.",[118,126,134],{"vendor_slug":119,"vendor_name":120,"vendor_logo":121,"product_slug":122,"product_name":123,"url":124,"description":125},"ivanti","Ivanti","\u002Fvendor-logos\u002Fivanti.png","neurons-patch-management","Ivanti Neurons for Patch Management","https:\u002F\u002Fwww.ivanti.com\u002Fproducts\u002Fivanti-neurons-for-patch-management","Risk-based patch management for operating systems and third-party applications.",{"vendor_slug":127,"vendor_name":128,"vendor_logo":129,"product_slug":130,"product_name":131,"url":132,"description":133},"manageengine","ManageEngine","\u002Fvendor-logos\u002Fmanageengine.png","patch-manager-plus","ManageEngine Patch Manager Plus","https:\u002F\u002Fwww.manageengine.com\u002Fpatch-management\u002F","Patch management for operating systems and third-party applications, on premises or in the cloud.",{"vendor_slug":106,"vendor_name":107,"vendor_logo":108,"product_slug":135,"product_name":136,"url":137,"description":138},"intune","Microsoft Intune","https:\u002F\u002Fwww.microsoft.com\u002Fen-us\u002Fsecurity\u002Fbusiness\u002Fmicrosoft-intune","Device management for Windows, macOS, iOS and Android, including update rings and compliance policies.",{"slug":140,"name":141,"problem":142,"products":143},"endpoint-management","Device management (MDM and UEM)","Every company laptop and phone is known, encrypted, locked down and up to date.",[144,145],{"vendor_slug":106,"vendor_name":107,"vendor_logo":108,"product_slug":135,"product_name":136,"url":137,"description":138},{"vendor_slug":146,"vendor_name":147,"vendor_logo":148,"product_slug":149,"product_name":150,"url":151,"description":152},"ninjaone","NinjaOne","\u002Fvendor-logos\u002Fninjaone.png","ninjaone-patch-management","NinjaOne Patch Management","https:\u002F\u002Fwww.ninjaone.com\u002Fpatch-management\u002F","Automated patching of operating systems and third-party applications from the cloud.",[154],{"slug":155,"name":18,"logo_path":156,"roles":157},"apple","\u002Fvendor-logos\u002Fapple.png",[158],"affected",{"slug":160,"title":161,"body":162,"framework_refs":163,"framework_notes":169},"apple-patches-bluetooth-and-airplay-flaws-enabling-proximity-based-unauthorized-access","Apple Patches Bluetooth and AirPlay Flaws Enabling Proximity-Based Unauthorized Access","Apple released critical security updates addressing 10 vulnerabilities across its entire product ecosystem, including five Bluetooth and AirPlay pairing flaws that could allow attackers within Bluetooth range to bypass pairing code limits or establish unauthorized connections without any user interaction. This class of vulnerability is particularly dangerous because it requires no authentication from the victim and can be exploited silently in public spaces such as airports, cafes, or offices. The inclusion of a known-exploited Brotli bug (Node2Shell) further underscores that some of these flaws were actively targeted in the wild before the patch was available. Organizations and individuals who delay applying these updates remain exposed to silent device compromise simply by being in physical proximity to an attacker. Timely patching across all supported platforms — including wearables and mixed-reality devices — is essential as the attack surface for personal device ecosystems continues to grow.",[164,165,166,167,168],"CIS Control 7: Continuous Vulnerability Management (v8)","CIS Control 4: Secure Configuration of Enterprise Assets and Software (v8)","NIST SP 800-53 SI-2: Flaw Remediation","NIST CSF 2.0 RS.MI-3: Newly identified vulnerabilities are mitigated or documented as accepted risks","NIS2 Article 21(2)(e)",{"NIS2 Article 21(2)(e)":170,"NIST SP 800-53 SI-2: Flaw Remediation":171,"CIS Control 7: Continuous Vulnerability Management (v8)":172,"CIS Control 4: Secure Configuration of Enterprise Assets and Software (v8)":173,"NIST CSF 2.0 RS.MI-3: Newly identified vulnerabilities are mitigated or documented as accepted risks":174},"NIS2 Article 21(2)(e) requires security in acquisition, development, and maintenance including vulnerability handling, making timely patching of these actively exploited Apple flaws a direct compliance obligation for in-scope entities.","SI-2 requires organizations to identify, report, and correct information system flaws within defined time frames, directly applying to the need to patch these Apple Bluetooth, AirPlay, and Node2Shell vulnerabilities promptly.","CIS Control 7 requires organizations to continuously assess and remediate vulnerabilities; applying these Apple patches promptly across all platforms is precisely the remediation cadence this control mandates.","CIS Control 4 calls for disabling unnecessary services and protocols; turning off Bluetooth and AirPlay when not needed would have reduced the attack surface exposed by these pairing vulnerabilities.","The presence of an actively exploited vulnerability (Node2Shell) in this patch batch means organizations must immediately mitigate or formally accept the risk, as this CSF category requires."]