Vulnerabilities in Apple Chips Allow Hackers to Access Sensitive Data and Credentials

Recent vulnerabilities in Apple chips, specifically in the M2, A15, M3, and A17 models, expose sensitive user data such as credit card details and location history through side channel attacks named SLAP and FLOP. These attacks exploit speculative execution techniques, where the SLAP attack targets the Load Address Predictor, allowing unauthorized access to out-of-bounds data, while the FLOP attack focuses on the Load Value Predictor, potentially bypassing memory safety checks. Affected devices include a wide range of Apple products like Mac laptops and desktops from 2022 onward, iPad models released since September 2021, and all iPhones from the iPhone 13 series onward. Researchers have demonstrated successful attacks on browsers like Safari and Chrome, prompting Apple to develop patches to mitigate these threats. Suggested measures for enhancing security involve improving browser safeguards and implementing robust Identity and Access Management solutions, such as Single Sign-On and Multi-Factor Authentication, to protect against these and similar vulnerabilities.