Blog Layout

New Apple M1 Chip Might Have A Security Flaw

sccomputerguys • Jun 17, 2021

There's good news and bad news in the Apple ecosystem, specifically with regards to the company's M1 chip. The bad news is that researchers have discovered a security flaw in the chip's design that cannot be fixed without redesigning the chip itself.

This flaw allows two malicious apps on a machine utilizing an M1 chip to set up a covert communications channel and communicate with each other.

As bad as it sounds, the significant silver lining in the equation is that unless your machine has been compromised by two separate forms of malware by other means, the exploit is completely useless.

Although harmless on its own, the exploit is still a big deal. It is especially important to Apple engineers, who said outright that the concept of covert communications on any level is a violation of the company's OS security model. Unfortunately, even given that, the company has not come right out and said whether a redesign of the M1 is in the works, or when that process might be completed.

In any case, if your M1-based machine has been infected by two different pieces of malware, you've got bigger problems than worrying about whether or not they're communicating with each other. So this flaw is almost certainly not reason enough, on its own, to prompt potential buyers to steer clear of the M1.

It is something of a black eye to Apple though. All through its development cycle, the company claimed that when released, the M1 would be the most advanced and secure chip on the market. A flaw like this that's baked into the silicone itself is an undeniably clear refutation of those claims. In light of that, it's almost certain that one way or another, the company will address the issue, even if they haven't yet released a timetable for doing so.

By sccomputerguys 22 Jul, 2022
Do you own one or more of the following products made by Cisco? The RV110W Wireless-N VPN Firewall The RV130 VPN Router The RV130W Wireless-N Multifunction VPN Router The RV215W Wireless-N VPN ...
By sccomputerguys 21 Jul, 2022
Do you use Microsoft Teams?  If so, you'll be thrilled to know that the Redmond Giant is continuing to pour resources into improving the software with a specific focus on audio and ...
By sccomputerguys 20 Jul, 2022
Corporate branding can be worth its weight in gold and certain images are absolutely iconic.  The Golden Arches, the Nike "swoosh," and Apple's Apple all come to mind. Logo images give companies ...
By sccomputerguys 19 Jul, 2022
Remember the Heartbleed scare we had a couple years back?  It was a nasty side-channel attack that was somewhat exotic and difficult to pull off, and it was absolutely devastating and sent ...
By sccomputerguys 18 Jul, 2022
Microsoft Exchange servers are once more in the crosshairs of hackers around the world.  Most recently, hacking groups have been specifically targeting them to deploy BlackCat ransomware. As is common among ransomware ...
By sccomputerguys 16 Jul, 2022
If you grew up in the days before the internet, it's absolutely staggering to think of all the ways that mobile technology has changed our lives (and mostly for the better). Remember ...
By sccomputerguys 15 Jul, 2022
It may seem as though Internet Explorer is the browser that will not die, but according to Microsoft, it is now a step closer to breathing its last virtual breath. Microsoft has ...
By sccomputerguys 14 Jul, 2022
If you're involved with IT Security at any level and if your network includes Linux servers, keep a watchful eye out for the new Panchan botnet. It first appeared in the wilds ...
By sccomputerguys 13 Jul, 2022
These days, companies spend significant sums of money to protect themselves from cyber criminals.  The threat matrix is vast, and attacks can come from almost any quarter. That is why many companies ...
By sccomputerguys 12 Jul, 2022
Do you receive healthcare of any kind from Kaiser Permanente?  If so, be aware that they recently published a data breach notification indicating that an unidentified attacker accessed an email account that ...
More Posts
Share by: