Apple's new security chip kills access to microphone

The company says that the T2 chip will completely cut off access to a MacBook's microphone when the lid is shut.

The security community isn’t usually one to fawn over Apple’s product rollouts, but the computer giant gave it reason to issue some praise on Tuesday.

Apple released more details about its T2 security chip, which handles a number of security processes. The chip houses a device’s Secure Enclave, which protects encryption keys, fingerprint data and secure boot.

In a security pamphlet released after Apple’s press event on Tuesday, the company revealed that the chip will completely cut off access to the device’s microphone when the MacBook lid is shut.

“This disconnect is implemented in hardware alone, and therefore prevents any software, even with root or kernel privileges in macOS, and even the software on the T2 chip, from engaging the microphone when the lid is closed,” the pamphlet reads.

The power cut is only limited to the microphone, and not the camera, since the latter would be useless when a computer is shut.

The T2 chips are in the latest line of MacBook Pros, and will be in included in the new MacBook Airs and Mac Minis.

While Macs are generally considered to be among the more secure devices in the market, there have been instances of malware that allow people to take over Mac users’ webcams. Earlier this year, the Department of Justice charged an Ohio man for creating Fruitfly, malware that can take complete control of a computer, including secretly turning on cameras and microphones to record video and audio.

You can read more about the T2 chip in Apple’s pamphlet.

Government

• FBI officials say AI is bolstering adversaries, emphasizing need to focus on cyber basics, patching

• Feds accuse China of ‘systematic’ distillation of U.S. AI models

• CIA’s Michael Ellis says cyber intelligence is changing how the agency operates

• Jail time for Maine child in 764 marks turning point in federal law enforcement

Technology

• FCC proposes public scorecard to rate telecoms on anti-robocall efforts

• Pegasus, NoviSpy variant spyware found on devices of Serbian activists

• The Collective Cyber Defense letter wrote your next vendor questionnaire

• Former sexual abuse victims say Grok used their images, videos to train deepfake capabilities

Threats

• Chinese espionage groups swarm to exploit triple-link chain of zero-days

• Microsoft discloses two actively exploited zero-days among 974 vulnerabilities

• Russian national extradited to US for alleged involvement in bank-account takeover scheme

• Attackers exploit zero-days in consistently besieged SonicWall product

Policy

• Whistleblower says USPS deploying new, ‘untested’ IT systems governing mail-in ballots

• ‘Watershed 250’ test program in Texas looks to private sector for water cybersecurity help

• Cyber threats nudge Trump to sign executive order on foreign equipment in U.S. energy infrastructure

• Election official says Tina Peters would be consultant, won’t have access to election systems