{"id":816,"date":"2026-09-22T10:00:00","date_gmt":"2026-09-22T15:00:00","guid":{"rendered":"https:\/\/cmitsolutions.com\/chicago-il-1221\/blog\/apples-find-my-network-hijacked-to-share-data\/"},"modified":"2026-09-22T10:00:00","modified_gmt":"2026-09-22T15:00:00","slug":"apples-find-my-network-hijacked-to-share-data","status":"publish","type":"post","link":"https:\/\/cmitsolutions.com\/chicago-il-1221\/blog\/apples-find-my-network-hijacked-to-share-data\/","title":{"rendered":"Apple\u2019s Find My Network \u201cHijacked\u201d To Share Data"},"content":{"rendered":"

Could your company’s connected devices expose more information than expected? A recent demonstration showed how a hijacked Apple Find My network setup could enroll a Linux device and access location data from an Apple account. Learn more about it here.<\/span><\/p>\n

A Trusted Device Isn’t Always What It Seems<\/b><\/p>\n

Apple designed Find My to work closely with its own hardware and approved third-party accessories. This trust model makes it easier for users to locate devices or share their locations with others, but it may also pose security challenges.<\/span><\/p>\n

A 22-year-old security researcher, who goes by “Zerotistic,” recently documented a way to make a non-Apple machine appear trusted enough to receive that shared information.<\/span><\/p>\n

How Did the Workaround Function?<\/b><\/p>\n

Zerotistic spent less than a week reverse-engineering Apple’s protocols and figuring out how to register a Linux-based machine with an Apple account. The process involved obtaining an Apple Identity Services certificate and meeting Find My’s registration requirements.<\/span><\/p>\n

Once enrolled, the machine could communicate with Apple’s push notification infrastructure and receive location information. The researcher then developed code to decrypt and interpret location reports containing coordinates, timestamps, and accuracy information.<\/span><\/p>\n

Don’t Mistake This for Universal Tracking<\/b><\/p>\n

It’s important to understand that the demonstration had clear limitations. It couldn’t locate arbitrary Apple users, and the account needed an existing location-sharing relationship to provide the data. The technique also required substantial reverse engineering and knowledge of Apple’s internal protocols.<\/span><\/p>\n

That’s an important distinction when evaluating the risk. Bluetooth tracking and Find My’s location-sharing features serve different purposes, and the hijacked network demonstration didn’t turn Find My into an open tracking system.<\/span><\/p>\n

Why This Still Matters to Your Business<\/b><\/p>\n

Your team might not use Find My to manage company assets, but the underlying issue applies to many connected services. Your business relies on systems that determine which devices and accounts deserve access.<\/span><\/p>\n

That makes unauthorized device enrollment a security concern worth watching. A trusted device can receive information that an untrusted one cannot. If someone finds a way to make an unfamiliar machine look legitimate, that security boundary becomes less reliable.<\/span><\/p>\n

The risk grows the more your business handles location data. Company phones, laptops, trackers, and other connected equipment can reveal where people or assets are.<\/span><\/p>\n

Review What Your Devices Can Access<\/b><\/p>\n

You don’t need to abandon location services because of this finding. Consider the following steps and take a closer look at your connected devices and accounts:<\/span><\/p>\n