A new security analysis has revealed a hardware vulnerability in Apple’s M-Series chips, known as the GoFetch attack. This vulnerability, discovered by researchers, allows for the theft of secret keys through a malicious app called GoFetch. The alarming aspect is that this vulnerability cannot be patched, leaving many Macs vulnerable to attacks.
The vulnerability specifically affects the ‘DMP’ functionality in Apple M1 and M2 silicon, highlighting concerns about the microprocessor architectures. It enables the bypass of cryptography, compromising various cryptographic protocols.
While a workaround has been provided, it is important to note that only the M3 chips support it. This leaves a large number of Macs at risk. The GoFetch attack raises significant security concerns, as it exposes sensitive information and compromises the integrity of the affected systems.
Apple users are urged to implement the workaround and take necessary precautions to protect their devices. As there is no patch available for this vulnerability, remaining vigilant and staying updated with the latest security recommendations is crucial.

Collections

A hardware vulnerability in Apple's M-Series chips, known as the GoFetch attack, exposes Macs to cryptographic bypass, allowing for the theft of secret keys. The vulnerability cannot be patched, leaving many Macs vulnerable to attacks. A workaround is available for M3 chips, but a large number of Macs are still at risk. Apple users should implement the workaround and stay updated with the latest security recommendations.

Understanding the GoFetch Attack: Apple's M-Series Chip Vulnerabilities