Skip to main content

Report reveals vulnerabilities in Mac firmware affecting thousands of computers

refurbished apple product deals Refurbished 13.3 inch MacBook Air
Image used with permission by copyright holder
A team of researchers at Duo Security revealed that there are some issues with Apple’s application of firmware updates, which has resulted in some users being left with out of date EFI firmware.

The researchers analyzed 73,000 Mac devices and found that Apple’s security updating process was not working as the company intended. They found that a little over four percent of those computers were running with outdated Apple firmware, despite having received recent updates. Duo’s report didn’t give the exact cause of the problem, but simply noted that for “some reason” the EFI firmware was not being updated when the computers in question received security or OS updates.

Firmware is the software which runs underneath the OS and controls the computer when it is booting up. Security issues within firmware can be difficult to notice, which often makes it a target for more advanced hackers. Duo noted that average home users have little reason for concern, due to the fact that the complexity of firmware attacks usually relegates hackers to target enterprises and other valuable entities.

“If you’re a home user with a Mac that falls into one of the above categories as their personal computing device, then the sky isn’t falling for you, in our opinion,” Duo said. “Attacks against EFI have so far been part of the toolkit used by sophisticated adversaries who have specific high value targets in their sights.”

Duo did caution that enterprise users should take some extra precautions. In addition to ensuring that all their Macs ran the latest version of Mac OS, the security company advised phasing out, or at least isolating, those computers which were not eligible for the most recent security updates.

For its part, Apple has worked to improve its firmware and patch security vulnerabilities as they arise.

“We appreciate Duo’s work on this industry-wide issue and noting Apple’s leading approach to this challenge,” an Apple spokesperson told Gizmodo. “Apple continues to work diligently in the area of firmware security and we’re always exploring ways to make our systems even more secure. In order to provide a safer and more secure experience in this area, macOS High Sierra automatically validates Mac firmware weekly.”

Editors' Recommendations

Eric Brackett
Former Digital Trends Contributor
Apple may have just enabled thousands of Windows games on Mac
Gaming on Apple's Macs being presented at WWDC 2023.

Apple really wants developers to port their games to Mac, going as far as to book Hideo Kojima for a cameo during WWDC 2023 and announcing the Game Porting Toolkit. However, the most significant related development didn't come during the keynote. It came afterwards, during the Platform State of the Union.

In showing off the Game Porting Toolkit, Apple detailed the process for developers wanting to port their games. It breaks down into three stages:

Read more
This devious scam app proves that Macs aren’t bulletproof
A close-up of a MacBook illuminated under neon lights.

Pirated software can cause all kinds of headaches, but Mac users might have thought themselves largely immune thanks to Apple’s reputation for solid security. Yet, that complacency could prove quite problematic, as a new strain of nearly undetectable malware has shown.

According to research from security firm Jamf Threat Labs, pirated versions of Apple’s Final Cut Pro moviemaking app have been modified to contain cryptojacking payloads. When installed, the app starts using your Mac to mine the Monero cryptocurrency behind your back, potentially slowing down your machine as system resources are illegitimately gobbled up.

Read more
Want an OLED MacBook? Apple may finally reveal it next year
An Apple MacBook Pro 14 sits open on a table.

Apple could launch its first OLED MacBook in 2024 in a move that will fuel a “surge” in OLED laptop sales. It will mark the first time Apple will adopt the tech in its portable computers and could significantly ramp up their display capabilities.

The news comes from Ming-Chi Kuo, an Apple analyst who has a strong reputation for accuracy. Posting on Twitter, Kuo explained that there were numerous factors that have convinced Apple to switch away from mini-LED panels, which are currently used in the 14-inch and 16-inch MacBook Pro laptops.

Read more