Still Not Fixed

Security Flaw in Apple's Find My Network

A serious security vulnerability in Apple's Find My network allows tracking of Bluetooth devices.

Researchers at George Mason University have revealed a critical vulnerability in Apple's Find My network - the service used, among other things, to track the company's well-known Airtag. The security flaw involves tricking the network into thinking any Bluetooth device is an Airtag - regardless of what the item actually is - to then be able to track it. 

In extensive tests, the research group managed to track devices with 90 percent accuracy, and in practice, they could locate an item in five minutes. Among the devices that could be tracked as if they were Airtags were a desktop computer, a bicycle that the researchers followed during a ride in town, and a gaming console identified on board an aeroplane. 

The researchers reported the security flaw to Apple in July 2024, and the company has confirmed the vulnerability, but so far no fix has been released. Experts have also warned that a complete update of the Find My network may take several years.