Apple Releases Magic Keyboard Firmware Update With Bluetooth Security Fix

[MacRumors]

Apple on Tuesday released Magic Keyboard firmware version 2.0.6 with a fix for a Bluetooth-related security vulnerability.

"An attacker with physical access to the accessory may be able to extract its Bluetooth pairing key and monitor Bluetooth traffic," an Apple support document says.

The firmware update is available for various Magic Keyboard models for the Mac, including the standard Magic Keyboard, Magic Keyboard with Numeric Keypad, Magic Keyboard with Touch ID, and Magic Keyboard with Touch ID and Numeric Keypad.

Magic Keyboard firmware updates are automatically installed while the keyboard is paired to a device running macOS, iOS, iPadOS, or tvOS, with no way to manually apply an update. To check a Magic Keyboard's firmware version on a Mac, open the System Settings app, click Bluetooth, and click on the info button next to your keyboard.

Apple's full security disclosure:

Bluetooth

Available for: Magic Keyboard; Magic Keyboard (2021); Magic Keyboard with Numeric Keypad; Magic Keyboard with Touch ID; and Magic Keyboard with Touch ID and Numeric Keypad

Impact: An attacker with physical access to the accessory may be able to extract its Bluetooth pairing key and monitor Bluetooth traffic

Description: A session management issue was addressed with improved checks.

CVE-2024-0230: Marc Newlin of SkySafe

This is the first firmware update for some Magic Keyboard models in several years, according to MacRumors contributor Aaron Perris.

Article Link: Apple Releases Magic Keyboard Firmware Update With Bluetooth Security Fix

 

[jonnysods]

I wish they'd release a fix for the price - I want a new one with the TouchID but blimey its $230 here in Canada.

 

[PsykX]

I hope the firmware update replaces the Lightning connector with a USB-C !

Seriously, I read the headline so fast I thought they were finally releasing an updated version of the product. 😅

 

[ChrisN718]

Just checked my keyboard version and to my surprise it has already been updated to 2.0.6

 

[iAppleOrchard]

Yay I get to update my keyboard!

I wonder what the new features are, the better typing experience? USB-C Port? Idk lol...

 

[jennyp]

Mine says 1.4.8 - seems a long way behind 2.0.6. I suppose I just have to wait for the planets to align or something.

What I wish would happen is that Apple releases a backlit extended bluetooth keyboard..

 

[TMRJIJ]

What a time to be alive when we get Software Updates to our Input Devices, Headphones, Cars, and Refrigerators...

 

[lkrupp]

I wish they'd release a fix for the price - I want a new one with the TouchID but blimey its $230 here in Canada.

Mine cost $199 (US) when I ordered it with my ac Studio M1 Max. Based on my online research the battery is not replaceable when it gives up the ghost. Does anyone know if that’s the case. If so it’s another argument for right to repair.

 

[Weaselboy]

Mine says 1.4.8 - seems a long way behind 2.0.6. I suppose I just have to wait for the planets to align or something.

What I wish would happen is that Apple releases a backlit extended bluetooth keyboard..

Mine updated to 2.0.6 overnight without me doing anything, so maybe just give it more time.

 

[lkrupp]

Found my Magic Keyboard with Touch ID updated to firmware 2.0.6 this morning. 👍

My Magic Mouse is on firmware 1.9.2 and no mention in this article about an update. Perhaps this vulnerability does not apply to the mouse?

 

[sportpepper]

I hope this fixes my typos.

 

[vgmrm]

Mine says 1.4.8 - seems a long way behind 2.0.6. I suppose I just have to wait for the planets to align or something.

What I wish would happen is that Apple releases a backlit extended bluetooth keyboard..

Logitech is your friend.

 

[tomtad]

Bloody hell, the keys now illuminate!

 

[TMRJIJ]

I hope this fixes my typos.

Not experiencing this bug, but I do normally type at just 65 WPM so 🤷‍♂️

 

[jennyp]

Logitech is your friend.

Oh? Interesting! Which Logitech keyboard is as good and is backlit?

 

[Bodhitree]

Yes, my Magic Keyboard with Touch ID updated as well. I was going to ask wether it requires Sonoma 14.3 but apparently it just updates over the air?

 

[jonnysods]

Mine cost $199 (US) when I ordered it with my ac Studio M1 Max. Based on my online research the battery is not replaceable when it gives up the ghost. Does anyone know if that’s the case. If so it’s another argument for right to repair.

Can you at least leave it plugged in if the battery is cooked?

 

[Roller]

Mine cost $199 (US) when I ordered it with my ac Studio M1 Max. Based on my online research the battery is not replaceable when it gives up the ghost. Does anyone know if that’s the case. If so it’s another argument for right to repair.

I did the same. From what I've read, the battery can be user-replaced, but disassembly and reassembly aren't easy. There's a kit available online for about $15, but Apple charges only $14 more (I just checked to be sure). I'd rather have Apple do it if and when the time comes. It's also worth remembering that you can continue to use the keyboard with the same cable you use to charge it.

 

[kagharaht]

I'm hoping they fix the random stutter/delay/jump on the Magic Trackpad. New M3 iMac and right from the start during set up it was doing that. It's a little better now but it's still there.

 

[3xBoom]

What a time to be alive when we get Software Updates to our Input Devices, Headphones, Cars, and Refrigerators...

I am concerned about bugs in any and all of those updates...

 

[wellander1]

I still have this
Apple Wireless Keyboard:

Address: 04B:56:CF:8B:51

Vendor ID: 0x05AC

Product ID: 0x0256

Battery Level: 100%

Firmware Version: 0.5.0

Minor Type: Keyboard

Services: 0x800020 < HID ACL >
Is this only for the rechargable ones and not the old ones that use replaceable battries?

 

[chrfr]

I did the same. From what I've read, the battery can be user-replaced, but disassembly and reassembly aren't easy. There's a kit available online for about $15, but Apple charges only $14 more (I just checked to be sure). I'd rather have Apple do it if and when the time comes. It's also worth remembering that you can continue to use the keyboard with the same cable you use to charge it.

Further, I'd bet that Apple just hands you a new/refurbished keyboard for that $29 "battery replacement" too.

 

[Anappleaday29]

You could hold down the option key in control center and click on bluetooth to see your full information as well

 

[StudioMacs]

Found my Magic Keyboard with Touch ID updated to firmware 2.0.6 this morning. 👍

My Magic Mouse is on firmware 1.9.2 and no mention in this article about an update. Perhaps this vulnerability does not apply to the mouse?

Logging keystrokes poses a higher security risk than logging cursor movements.

 

[4ppleJack]

Ummmm...🤔

(Magic Keyboard with Numeric Keypad on latest Ventura)

Edit - Switched off and on, then repaired and it's now at 2.0.6 (originally was on 1.6.0). Seems if you repair whilst it's charging it'll show a firmware version of 8.7.0; what a weird bug...