CPU security flaws Meltdown and Spectre

As reported on many major news sites, there has been a flaw found in processor chips that may allow an attacker to compromise secure data. The flaws, knowns as 'Meltdown' and 'Spectre' are going to affect billions of devices around the world.

How does it affect me?

Meltdown has the potential to grab information by snooping on memory operations that are not normally possible. Spectre gets programs to perform unnecessary operations and this leaks data that should stay confidential.

Should I panic?

There has been no evidence that the vulnerability has been exploited according to the UK's National Cyber Security Centre. This may change now the bug has been made public.

I've heard that the fix slows down my devices?

Intel said that any performance impacts were "workload-dependent" and the impact for average computer users "should not be significant".

How can I fix it?

Patches to fix the Meltdown bug are already being released. Microsoft Windows 10 will be next Thursday and updates for Windows 7 and 8 a few days afterwards. The latest version of Apple OS, 10.13.2, is already patched but earlier versions will need to be updated. Other devices such as Android phones and other devices are in the process of being fixed or already been patched.

All Datcom maintenance clients will have the patches automatically installed on your PC and laptop as part of the management of your network. These will be rolled out as the manufacturers provide them.

BBC Technology - Meltdown and Spectre : How chip hacks work

BBC Technology - What you need to know

BBC Technology - Chip hacks: How much us your device at risk? (video)

Wikipedia - Meltdown

Get in touch

Call us on 0333 000 3210 or Email us solutions@datcom.co.uk

Latest news...

Adobe Flash End Of Support

Adobe Flash Player will reach end of support on 31st December 2020, at which point Adobe will no longer update or distribute Flash Player and all major browsers will not allow Flash Player plugins.

Read More

End Of Long Life Certs

Apple are changing the validity check for TLS certificates from the 1st September 2020, this will affect all renewals after this point in time.

Read More

Securing Data in Microsoft Teams

With a large spotlight being shined on the technologies being used for working from home, we have taken this opportunity to talk about securing Microsoft Teams and best practice surrounding the data held within.

Read More