Apple addressed a Bluetooth keyboard injection flaw with Magic Keyboard Firmware Update 2.0.6 (CVE-2024-0230). Discovered by Marc Newlin, the vulnerability involves session management, allowing an attacker with physical access to extract the Bluetooth pairing key for traffic espionage. The update includes enhanced checks to mitigate this risk. Unpatched devices are vulnerable under specific conditions, emphasising the importance of updating.
Volkswagen Cyberattack Linked to Chinese Hackers
April 26, 2024
