Audio By Carbonatix
Since 2015, Apple has tried to protect its Mac line of computers from a form of hacking that is extremely hard to detect, but it has not been entirely successful in getting the fixes to its customers, according to research released on Friday by Duo Security.
Duo examined what is known as firmware in the Mac computers. Firmware is an in-built kind of software that is even more basic than an operating system like Microsoft Windows or macOS.
When a computer is first powered on -- before the operating system has even booted up -- firmware checks to make sure that basic components like a hard disk and processor are present and tells them what to do. That makes malicious code hiding in it hard to spot.
In most cases, firmware is a hassle to update with the latest security patches. Updates have to be carried out separately from the operating system updates that are more commonplace.
In 2015, Apple started bundling firmware updates along with operating system updates for Mac machines in an effort to ensure firmware on them stayed up to date.
But Duo surveyed 73,000 Mac computers operating in the real world and found that 4.2 percent of them were not running the firmware they should have been based on their operating system. In some models - such as the 21.5-inch iMac released in late 2015 - 43 percent of machines had out-of-date firmware.
That left many Macs open to hacks like the “Thunderstrike” attack, where hackers can control a Mac after plugging an Ethernet adapter into the machine’s so-called thunderbolt port.
Paradoxically, it was only possible to find the potentially vulnerable machines because Apple is the only computer maker that has sought to make firmware updates part of its regular software updates, making it both more trackable and the best in the industry for firmware updates, Rich Smith, director of research and development at Duo, told Reuters in an interview.
Duo said that it had informed Apple of its findings before making them public on Friday. In a statement, Apple said it was aware of the issue and is moving to address it.
”Apple continues to work diligently in the area of firmware security, and we’re always exploring ways to make our systems even more secure,“ the company said in a statement. ”In order to provide a safer and more secure experience in this area, macOS High Sierra automatically validates Mac firmware weekly.”
Latest Stories
-
GTA sensitises taxi drivers in ‘Know Ghana’ tourism campaign
55 minutes -
Archbishop Agyinasare calls for responsible speech amid growing social media abuse
60 minutes -
‘It will be inexcusable for gov’t not to honour payment of teachers’ arrears by 30th October’ – Haruna Iddrisu
1 hour -
Forbes’ World’s Best Employers 2026: No Ghanaian firm ranked among 900 companies
1 hour -
Electronic processing of teachers’ data: ‘The decision is the Controller’s’ – GES boss
1 hour -
Teachers’ Strike: Haruna Iddrisu questions paper-based processing of promoted teachers’ data
1 hour -
Savannah Region: Kunfusi bridge collapses again, leaving nearly 4,000 residents cut off
2 hours -
Teachers’ strike: GES targets Monday deadline to submit promotion data to Controller
2 hours -
Inflation to average 11.3% in 2027 – Fitch Solutions
2 hours -
I didn’t campaign for NDC to come and do this nonsense – Kpebu on EOCO
2 hours -
Fitch Solutions maintains policy rate forecast of 14% by December 2026
2 hours -
Diaspora Nasara Caucus congratulates Mohammed Ali Suraj, new NPP executives
4 hours -
Dr Antwi-Boasiako’s cybersecurity book showcased at UN crime prevention congress
4 hours -
We will empower the grassroots and protect every vote – NPP’s 1st Vice Chair Kojo Bamba
4 hours -
I do not see myself as better than anyone – NPP’s 1st Vice Chair Kojo Bamba
5 hours