{"id":94515,"date":"2019-03-08T11:15:19","date_gmt":"2019-03-08T19:15:19","guid":{"rendered":"https:\/\/securingtomorrow.mcafee.com\/?p=94515"},"modified":"2025-08-29T09:41:26","modified_gmt":"2025-08-29T16:41:26","slug":"thunderclap-flaws","status":"publish","type":"post","link":"https:\/\/www.mcafee.com\/blogs\/internet-security\/thunderclap-flaws\/","title":{"rendered":"Don\u2019t Let Thunderclap Flaws Strike Your Device"},"content":{"rendered":"

If you own a Mac or PC, odds are you\u2019ve used your laptop\u2019s Thunderbolt port to connect another device to your machine. Thunderbolt ports are convenient for charging other devices using your laptop or desktop\u2019s battery power. However, a new flaw called Thunderclap<\/a> allows attackers to steal sensitive information such as passwords, encryption keys, financial information, or run detrimental code on the system if a malicious device is plugged into a machine\u2019s port while it\u2019s running.<\/p>\n

So, how can attackers exploit this flaw? Thunderbolt accessories are granted direct-memory access (DMA), which is a method of transferring data from a computer\u2019s random-access memory (RAM) to another part of the computer without it needing to pass through the central processing unit (CPU). DMA can save processing time and is a more efficient way to move data from the computer’s memory to other devices. However, attackers with physical access to the computer can take advantage of DMA by running arbitrary code on the device plugged into the Thunderbolt port. This allows criminals to steal sensitive data from the computer. Mind you, Thunderclap vulnerabilities also provide cybercriminals with direct and unlimited access to the machine\u2019s memory, allowing for greater malicious activity.<\/p>\n

Tips to Defend Yourself Against These Flaws<\/h2>\n

Thunderclap-based attacks can be carried out with either specially built malicious peripheral devices or common devices such as projectors or chargers that have been altered to automatically attack the host they are connected to. What’s more, they can compromise a vulnerable computer in just a matter of seconds. Researchers who discovered this vulnerability informed manufacturers and fixes have been deployed<\/a>, but it’s always good to take extra precautions. So, here are some ways users can defend themselves against these flaws:<\/p>\n