TechFlow news, according to IT Home, security experts have recently discovered a vulnerability in Apple's Apple Silicon chips that could allow hackers to steal user data. The flaw lies within the Data Memory-Dependent Prefetcher (DMP), which attackers can exploit to obtain encryption keys and thereby access user data.
This type of attack is known as "GoFetch," where hackers manipulate existing access patterns to influence prefetched data and extract sensitive user information. Notably, this attack does not require root access, making it relatively easy to carry out.
Research testing has shown that 2048-bit RSA and 2048-bit Diffie-Hellman keys can be extracted within a short period. Since the vulnerability resides in the core part of the chip, Apple will find it difficult to fully patch in the short term, and any mitigation measures may impact performance.
