Meltdown and Spectre Attack Bugs

You may already be aware but there is a recently discovered a vulnerability related to all Intel-based systems running world-wide called Meltdown and Spectre.

Essentially, there’s a security flaw in modern processors that could affect practically every Intel computer released in the last two decades, as well as the AMD and Arm chips in your laptops, tablets and phones, too.

https://meltdownattack.com

https://spectreattack.com

 

Who is affected?

Pretty much everybody.

Can this be fixed?

Only partially, and it may take a while.

More details here….

Windows
Generally Windows 10 will automatically download necessary security updates and apply. Windows 7 & 8 may have to wait until next Windows Update
https://www.catalog.update.microsoft.com/Search.aspx?q=KB4056892
https://support.microsoft.com/en-us/help/4056892/windows-10-update-kb4056892

Android Phones
Google will be updating Jan 5th and if you have a Google branded phone the phone will automatically download the update.
For other Android phones, updates and patches can dependent on manufacturer and mobile provider.
https://support.google.com/faqs/answer/7622138

Google Chrome Web Browser
New version 64 scheduled for later this month (possibly Jan 23rd) should include mitigation to protect from explotations.
https://support.google.com/faqs/answer/7622138#chrome

Firefox Web Browser
Firefox users should update to Firefox 57.
https://blog.mozilla.org/security/2018/01/03/mitigations-landing-new-class-timing-attack/

Apple
Apple has also reportedly patched the vulnerability in MacOS 10.13.2.
https://twitter.com/aionescu/status/948609809540046849

 

OSD is working with hosting and server providers who are testing updates to the hosting infrastructure before rolling out to all.

We would advise that you check with your IT provider on updating any devices needed.

 

Victor Leonard

Technical Director at OSD Digital Agency

FacebookTwitterMore...