Unpatchable Security Flaw On Apple’s: M1 Chips Leaves its Last level of defense Vulnerable!

Read Time:1 Min, 4 Sec

Apple’s Arm-based M1 silicon vulnerability allows threat actors capability to gain arbitrary code execution on macOS systems. This was recently discovered by researchers at MIT’s Computer Science & Artificial Intelligence Laboratory.

It correlates to the hardware-level pointer authentication codes (PAC), which Apple uses to ensure programs attempting to execute code are safe.

Advertisement

Is it game over for M1-based MacBook owners, though?

Not necessarily… just yet. There are reports that physical access to a machine is needed, though a remote attack is possible as well.

Advertisement

While this type of attack would lead to a kernel panic, crashing the entire system, PACMAN ensures that no system crashes occur and leaves no traces in logs. Threat actors first need to find a memory bug affecting software on the targeted Mac that would be blocked by PAC and that can be escalated into a more severe security issue after bypassing PAC defenses. Reference

You can find more technical details about this novel hardware attack on the dedicated site and in the “PACMAN: Attacking ARM Pointer Authentication with Speculative Execution” paper [PDF] that will be presented at the International Symposium on Computer Architecture on June 18.

Nevertheless, the researchers say their findings have important implications for designers considering implementing Pointer Authentication in future products.

Last Updated on 06/11/2022 by Emmanuel Motelin

EXPLORE MORE ACROSS THE WEB
Tagged : # # # # # # # # #
Advertisement
bitcoin
Bitcoin (BTC) $ 26,603.13 2.13%
ethereum
Ethereum (ETH) $ 1,591.08 2.57%
tether
Tether (USDT) $ 0.999947 0.02%
bnb
BNB (BNB) $ 210.79 2.46%
xrp
XRP (XRP) $ 0.510485 2.01%
usd-coin
USD Coin (USDC) $ 0.999957 0.05%
staked-ether
Lido Staked Ether (STETH) $ 1,588.81 2.70%
cardano
Cardano (ADA) $ 0.247823 3.09%
dogecoin
Dogecoin (DOGE) $ 0.06157 1.63%
the-open-network
Toncoin (TON) $ 2.37 1.57%
solana
Solana (SOL) $ 19.69 2.89%
tron
TRON (TRX) $ 0.083306 1.62%
polkadot
Polkadot (DOT) $ 4.03 2.79%
matic-network
Polygon (MATIC) $ 0.526554 3.34%
litecoin
Litecoin (LTC) $ 64.76 0.55%
wrapped-bitcoin
Wrapped Bitcoin (WBTC) $ 26,599.13 2.14%
shiba-inu
Shiba Inu (SHIB) $ 0.000007 1.94%
bitcoin-cash
Bitcoin Cash (BCH) $ 207.85 4.41%
dai
Dai (DAI) $ 0.999566 0.08%
chainlink
Chainlink (LINK) $ 6.75 2.75%
leo-token
LEO Token (LEO) $ 3.81 0.15%
true-usd
TrueUSD (TUSD) $ 0.997764 0.19%
uniswap
Uniswap (UNI) $ 4.25 3.44%
stellar
Stellar (XLM) $ 0.113683 3.86%
avalanche-2
Avalanche (AVAX) $ 8.90 1.74%
monero
Monero (XMR) $ 146.81 0.75%
okb
OKB (OKB) $ 43.01 0.95%
binance-usd
Binance USD (BUSD) $ 1.00 0.01%
ethereum-classic
Ethereum Classic (ETC) $ 15.27 2.39%
cosmos
Cosmos Hub (ATOM) $ 7.26 0.71%
hedera-hashgraph
Hedera (HBAR) $ 0.050401 0.40%
filecoin
Filecoin (FIL) $ 3.24 4.41%
crypto-com-chain
Cronos (CRO) $ 0.050822 0.68%
lido-dao
Lido DAO (LDO) $ 1.50 4.99%
quant-network
Quant (QNT) $ 89.92 0.92%
internet-computer
Internet Computer (ICP) $ 2.90 3.39%
mantle
Mantle (MNT) $ 0.394499 1.88%
vechain
VeChain (VET) $ 0.0172 2.59%
aptos
Aptos (APT) $ 5.11 1.23%
maker
Maker (MKR) $ 1,315.59 2.00%
near
NEAR Protocol (NEAR) $ 1.13 1.04%
arbitrum
Arbitrum (ARB) $ 0.827391 2.91%
optimism
Optimism (OP) $ 1.30 6.36%
kaspa
Kaspa (KAS) $ 0.048037 3.92%
aave
Aave (AAVE) $ 63.34 2.07%
rocket-pool-eth
Rocket Pool ETH (RETH) $ 1,726.28 2.62%
the-graph
The Graph (GRT) $ 0.088217 3.00%
whitebit
WhiteBIT Coin (WBT) $ 5.32 0.29%
algorand
Algorand (ALGO) $ 0.097694 1.24%
immutable-x
ImmutableX (IMX) $ 0.658235 20.52%
%d bloggers like this: