Your Magic Keyboard just got a rare update to fix a serious security flaw
As we wait for the next round of software updates to hit our devices, Apple has released a rare update to one of its oldest accessories. The Magic Keyboard has been updated to Firmware Version 2.0.6, a security update that patches a Bluetooth vulnerability. The following models will get the update:
- Magic Keyboard
- Magic Keyboard (2021)
- Magic Keyboard with Numeric Keypad
- Magic Keyboard with Touch ID
- Magic Keyboard with Touch ID and Numeric Keypad
If you have one of these models, you don’t have to do anything to install the firmware update. According to Apple, the installation will occur in the background when the keyboard is actively paired to a device running iOS, iPadOS, macOS, or tvOS.
According to Apple’s security notes, the update fixes a flaw that could let an attacker hijack your device’s Bluetooth connection:
Bluetooth
- Impact: An attacker with physical access to the accessory may be able to extract its Bluetooth pairing key and monitor Bluetooth traffic
- Description: A session management issue was addressed with improved checks.
- CVE-2024-0230: Marc Newlin of SkySafe
To check the firmware version of your Magic Keyboard, make sure it is connected to your Mac, then go to System Settings > Bluetooth and in the My Devices section, look for your keyboard. Then click the Info (i) button to see information about the device.