Published: Fri, January 05, 2018
Finance | By Kristine Clayton

All Macs, iOS devices affected by chip security flaws - Apple warns

All Macs, iOS devices affected by chip security flaws - Apple warns

The microchip flaw affects device running the company's iOS and macOS operating systems, as well as the Apple TV.

Following the revelation that serious security flaws have been discovered in processors designed by Intel, AMD, and ARM, Apple has confirmed that all of its iPhones, iPads, and Macs are affected.

According to media reports and statements issued by cybersecurity experts, the hardware bugs could allow malicious software installed on the devices to get access to the information without responding to the operating systems that should prevent such software from doing this. Guess what! Apple has already released mitigations in iOS 11.2, macOS 10.13.2, and tvOS 11.2 to help defend against Meltdown.

Patches against Spectre, in the form of an update to web browser Safari, will be released "in the coming days".

Apple's statement also said there are no known exploits now impacting customers. It said that Apple Watch is not affected.

An update from Apple on what is needed for its Mac computers and iOS devices is expected. "We continue to develop and test further mitigations for these issues and will release them in upcoming updates of iOS, macOS, tvOS and watchOS", Apple added.

This flaw is more difficult to take advantage of than Meltdown, but is also a lot harder to fix.

The Meltdown and Spectre exploitation techniques abuse speculative execution to access privileged memory such as passwords, encryption keys, or sensitive information, including that of the kernel-from a less-privileged user process such as a malicious app running on a device.

The company advised millions of customers to download software only from trusted sources after the security vulnerabilities, known as Meltdown and Spectre, were revealed on Wednesday.

"Intel has already issued updates for the majority of processor products introduced within the past five years", an Intel spokesperson said.

The company has said that it will release a patch to protect its browser, Safari, against Spectre.

As far as it matters for its, Intel said in an announcement on Thursday that it "has created and is quickly issuing refreshes for a wide range of Intel-based PC frameworks-including PCs and servers-that render those frameworks invulnerable from the two endeavors... detailed by Google Project Zero", whose specialists helped unobtrusively find the defects a year ago.

Like this: