Magic Keyboard with Touch ID and Numeric Keypad for Mac models with Apple silicon (bottom)
Apple on Thursday released Magic Keyboard Firmware Update 2.0.6 which addresses a critical Bluetooth vulnerability.
Apple Support:
Magic Keyboard Firmware Update 2.0.6
Bluetooth
Available for: Magic Keyboard; Magic Keyboard (2021); Magic Keyboard with Numeric Keypad; Magic Keyboard with Touch ID; and Magic Keyboard with Touch ID and Numeric Keypad
Impact: An attacker with physical access to the accessory may be able to extract its Bluetooth pairing key and monitor Bluetooth traffic
Description: A session management issue was addressed with improved checks.
CVE-2024-0230: Marc Newlin of SkySafe
MacDailyNews Note: Firmware updates are automatically delivered in the background while the Magic Keyboard is actively paired to a device running macOS, iOS, iPadOS, or tvOS.
You can check the firmware version of your Magic Keyboard in Bluetooth settings on your Mac. Go to System Settings > Bluetooth, then click on the Info button next to your keyboard. After this firmware update is installed, the firmware version is 2.0.6.
Please help support MacDailyNews. Click or tap here to support our independent tech blog. Thank you!
Support MacDailyNews at no extra cost to you by using this link to shop at Amazon.
It is amazing how shallow and useless is this coverage. You parrot Apple’s message by the letter, not even checking the most basic check on what’s delivered, if at all.
Since Apple’s message arrived, I’ve been attending to this – and NONE of my 6 Magic keyboards updated.
Apples claim that you can see the current firmware version in the BlueTooth Preferences panel – is a lie, since there is no such “info” button in that panel. I checked on MacOS versions 10.14.6 through 12.7.2 – The only way I found to determine the firmware version on my Magic Keyboards (both with and without numeric keypads, all generations from 4 years ago till this year) – is via the “System Information” app you can open from the “About this Mac” via the “System Report…” button.
The version is 1.6.0 on all of my keyboards – and doesn’t change.
There is no download link, nor a public installer I can download the firmware update.
Apple publishes no instructions on how to force-install the firmware upgrade, which is scary – since we’re more vulnerable as soon as the vulnerability was made public by Apple.
It is YOUR JOB as technical reporters to do just a little more than copy Apple’s message.
You’re not alone. It is the same on all the other pseudo “tech” sites (MacRumors, 9to5Mac, and a dozen others). I’m impressed…
You need to get your head out of your ass. You obviously can’t read, numbskull. What he wrote is 100% correct. Now git, fool.