Topics Tools Books & Guides Talk to Securafy

Knowledge Hub / IT Operations

IT Operations

New Apple M1 Chip Might Have A Security Flaw

New Apple M1 Chip Might Have A Security Flaw

Randy Hall By Randy Hall Updated Jul 2024 2 min read Share

There's good news and bad news in the Apple ecosystem, specifically with regards to the company's M1 chip. The bad news is that researchers have discovered a security flaw in the chip's design that cannot be fixed without redesigning the chip itself.

This flaw allows two malicious apps on a machine utilizing an M1 chip to set up a covert communications channel and communicate with each other.

As bad as it sounds, the significant silver lining in the equation is that unless your machine has been compromised by two separate forms of malware by other means, the exploit is completely useless.

Although harmless on its own, the exploit is still a big deal. It is especially important to Apple engineers, who said outright that the concept of covert communications on any level is a violation of the company's OS security model. Unfortunately, even given that, the company has not come right out and said whether a redesign of the M1 is in the works, or when that process might be completed.

In any case, if your M1-based machine has been infected by two different pieces of malware, you've got bigger problems than worrying about whether or not they're communicating with each other. So this flaw is almost certainly not reason enough, on its own, to prompt potential buyers to steer clear of the M1.

It is something of a black eye to Apple though. All through its development cycle, the company claimed that when released, the M1 would be the most advanced and secure chip on the market. A flaw like this that's baked into the silicone itself is an undeniably clear refutation of those claims. In light of that, it's almost certain that one way or another, the company will address the issue, even if they haven't yet released a timetable for doing so.

Join The Conversation

Have a question or perspective on this topic? Add it below.

Randy Hall

About The Author

Randy Hall · CEO & Founder

Randy Hall is the CEO and Founder of Securafy, with decades of experience helping organizations make smarter, safer decisions about technology.

A frequent speaker and instructor at national IT events, Randy has advised thousands of organizations, from startups and SMBs to large enterprises and U.S. government entities, on secure, practical technology adoption. He writes about the decisions business leaders are often expected to make without enough context, including cybersecurity, compliance, AI, cyber insurance, IT strategy, and business resilience.

Outside the office, you’ll often find Randy on Lake Erie enjoying time on his 38-foot Chris-Craft.

Writes about: Cybersecurity strategy, compliance, AI security, business resilience, cyber insurance, SMB risk, IT leadership

More From This Author →

Get Practical Cybersecurity Field Notes

Monthly cybersecurity, compliance, and IT strategy updates from Securafy, written for business owners who need clear next steps.

  • Practical security tips from our Cyber Security Drip series
  • The Securafy Times, our monthly roundup on compliance and IT strategy
  • Occasional updates on new tools, guides, and research
  • No spam — unsubscribe anytime