Unpatchable Security Flaw On Apple’s: M1 Chips Leaves its Last level of defense Vulnerable!

Read Time:1 Min, 4 Sec

Apple’s Arm-based M1 silicon vulnerability allows threat actors capability to gain arbitrary code execution on macOS systems. This was recently discovered by researchers at MIT’s Computer Science & Artificial Intelligence Laboratory.

It correlates to the hardware-level pointer authentication codes (PAC), which Apple uses to ensure programs attempting to execute code are safe.

ADVERTISEMENT

Is it game over for M1-based MacBook owners, though?

Not necessarily… just yet. There are reports that physical access to a machine is needed, though a remote attack is possible as well.

While this type of attack would lead to a kernel panic, crashing the entire system, PACMAN ensures that no system crashes occur and leaves no traces in logs. Threat actors first need to find a memory bug affecting software on the targeted Mac that would be blocked by PAC and that can be escalated into a more severe security issue after bypassing PAC defenses. Reference

ADVERTISEMENT: Content resumes below

You can find more technical details about this novel hardware attack on the dedicated site and in the “PACMAN: Attacking ARM Pointer Authentication with Speculative Execution” paper [PDF] that will be presented at the International Symposium on Computer Architecture on June 18.

Nevertheless, the researchers say their findings have important implications for designers considering implementing Pointer Authentication in future products.

Last Updated on 06/11/2022 by Emmanuel Motelin

EXPLORE MORE ACROSS THE WEB

Tagged : # # # # # # # # #

ADVERTISEMENT: Learn more

MOTELIN.ORG – Emmanuel Motelin (Official Website)

Emmanuel Motelin primarily focuses on new innovation in computational technology & security.


ADVERTISEMENT


bitcoin
Bitcoin (BTC) $ 21,431.00 0.09%
ethereum
Ethereum (ETH) $ 1,229.17 1.13%
tether
Tether (USDT) $ 1.00 0.08%
usd-coin
USD Coin (USDC) $ 1.00 0.06%
bnb
BNB (BNB) $ 240.25 0.04%
xrp
XRP (XRP) $ 0.364396 1.45%
binance-usd
Binance USD (BUSD) $ 1.00 0.05%
cardano
Cardano (ADA) $ 0.505814 2.41%
solana
Solana (SOL) $ 41.03 0.90%
dogecoin
Dogecoin (DOGE) $ 0.077159 9.25%
polkadot
Polkadot (DOT) $ 8.15 1.57%
shiba-inu
Shiba Inu (SHIB) $ 0.000012 1.98%
tron
TRON (TRX) $ 0.068651 5.46%
dai
Dai (DAI) $ 1.00 0.00%
avalanche-2
Avalanche (AVAX) $ 21.10 0.28%
wrapped-bitcoin
Wrapped Bitcoin (WBTC) $ 21,401.00 0.08%
leo-token
LEO Token (LEO) $ 5.88 0.99%
staked-ether
Lido Staked Ether (STETH) $ 1,189.11 0.59%
matic-network
Polygon (MATIC) $ 0.587756 2.12%
litecoin
Litecoin (LTC) $ 58.37 0.78%
ftx-token
FTX (FTT) $ 27.81 0.88%
okb
OKB (OKB) $ 12.75 2.48%
chainlink
Chainlink (LINK) $ 6.94 4.03%
crypto-com-chain
Cronos (CRO) $ 0.127872 1.29%
stellar
Stellar (XLM) $ 0.123273 3.20%
near
NEAR Protocol (NEAR) $ 3.98 4.18%
uniswap
Uniswap (UNI) $ 5.87 4.47%
cosmos
Cosmos Hub (ATOM) $ 8.45 0.77%
algorand
Algorand (ALGO) $ 0.344916 2.21%
ethereum-classic
Ethereum Classic (ETC) $ 17.33 4.76%
monero
Monero (XMR) $ 128.55 1.28%
bitcoin-cash
Bitcoin Cash (BCH) $ 116.26 1.27%
theta-fuel
Theta Fuel (TFUEL) $ 0.053894 4.99%
chain-2
Chain (XCN) $ 0.085382 3.67%
vechain
VeChain (VET) $ 0.025278 3.36%
flow
Flow (FLOW) $ 1.75 0.93%
the-sandbox
The Sandbox (SAND) $ 1.24 6.20%
hedera-hashgraph
Hedera (HBAR) $ 0.071881 2.61%
apecoin
ApeCoin (APE) $ 4.92 5.09%
decentraland
Decentraland (MANA) $ 0.977908 5.20%
internet-computer
Internet Computer (ICP) $ 5.98 3.05%
frax
Frax (FRAX) $ 1.01 0.22%
theta-token
Theta Network (THETA) $ 1.40 4.61%
axie-infinity
Axie Infinity (AXS) $ 16.91 3.11%
filecoin
Filecoin (FIL) $ 6.08 1.11%
tezos
Tezos (XTZ) $ 1.52 1.61%
elrond-erd-2
Elrond (EGLD) $ 58.28 5.31%
true-usd
TrueUSD (TUSD) $ 1.00 0.05%
bitcoin-sv
Bitcoin SV (BSV) $ 62.08 2.50%
helium
Helium (HNT) $ 11.12 3.56%
%d bloggers like this: