Apple’s Firmware Updates Were Borked, Security Firm Says

Apple touts its closed ecosystem as a security reward . Because it tightly master its hardware and computer software , Apple can force security system updates much more speedily than an open organisation like Android . But researchers at Duo Security say that Apple ’s security update system of rules has n’t been working precisely as intended , with G of Macs not getting proper firmware update .

Firmware sit below a Mac ’s operating organization and run as the computer is booting up . Security vulnerability in microcode are unmanageable to discover and get , so it ’s often a target for advanced attacks — Wikileaks ’ Vault 7 dump , for deterrent example , testify that the CIA had modernize afirmware exploitfor Macs .

Apple has worked toimprove microcode updatesin High Sierra , its late operating system . In High Sierra , user will get weekly checks to verify their firmware is up to engagement and will be ask round to mail a write up to Apple if the hindrance give out .

Argentina’s President Javier Milei (left) and Robert F. Kennedy Jr., holding a chainsaw in a photo posted to Kennedy’s X account on May 27. 2025.

duad analyzed more than 73,000 Mac system of rules to come up with its findings . Of the car surveyed by Duo , about 4.2 percent were n’t running the correct variant of the microcode , the researchers take .

“ Our enquiry has shown there are considerable discrepancies in how Apple provides security support to its EFI firmware as compare to how they stand the security of the OS and software system , ” Duo researchers wrote in their findings .

Duo also noted that there are likely firmware issues on computers manufactured by other companies , but Apple ’s update system make it easier to pass over and key them . “ We appreciate Duo ’s work on this industry - wide publication and noting Apple ’s lead feeler to this challenge . Apple continues to work diligently in the area of microcode certificate and we ’re always exploring ways to make our systems even more secure . so as to bring home the bacon a safer and more secure experience in this country , macOS High Sierra automatically formalise Mac firmware weekly , ” an Apple spokesperson recite Gizmodo .

William Duplessie

However , this is n’t case to hurl your MacBook into the sea . If you ’re a home user , you ’re probably not at risk , according to the ethnic music at Duo . Firmware exploits are n’t easy to pull off and everyday user are n’t likely object .

“ If you ’re a home user with a Mac that falls into one of the above categories as their personal computing gimmick , then the sky is n’t falling for you , in our opinion . Attacks against EFI have so far been part of the toolkit used by sophisticated adversaries who have specific high value target in their sights , ” Duo said . “ Most everyday home user hang well outside of this attack mannequin , and gratefully , as far as we are aware , there are not any EFI exploits that are being used as part of trade good exploit kits , malware , or ransomware that has been detected in the state of nature . ”

However , enterprise users should be a chip more concerned . distich recommends that business phase out old Macs that can not get the late microcode update or keep apart those machines from raw meshwork . And of course , all drug user should make certain they update to the a la mode OS so they get the most recent security updates .

Starship Test 9