MIT Uncovers Security Flaws in Apple M1 Chip

MIT researchers have identified critical security flaws in Apple's M1 chip, previously thought secure. The team created a custom operating system named Fractal to investigate the chip's architecture. They discovered a gap in Apple's CSV2 protection that allows data to be fetched into cache, posing a potential attack vector. Additionally, they found a class of exploit called 'Phantom speculation' within the M1, which tricks the processor into executing unauthorized speculative work. This flaw was previously unreported on Apple Silicon and contradicts earlier safety assessments. The researchers plan to present their findings at the IEEE Symposium on Security and Privacy in San Francisco. Apple has been informed of these vulnerabilities and is reviewing the findings.

Key Points: • MIT researchers found critical flaws in Apple's M1 chip using a new OS called Fractal. • The vulnerabilities include a gap in the CSV2 protection and a new exploit called 'Phantom speculation.' • Apple has been briefed on the findings and is currently reviewing the implications.