01/06/2018
Are your devices vulnerable to “Meltdown” and “Spectre” chip flaws?
Yes, they are.
Here’s what you can do protect your data.
Meltdown and Spectre, two chip vulnerabilities announced earlier this week, impact virtually every processor chip currently in use. In a nutshell the two bugs could allow a malicious program to access data (i.e. passwords, documents, pictures) stored in memory by other running programs. Thankfully there are currently no known exploits. The Meltdown flaw impacts every Intel processor made since 1995. If we don our rose-colored glasses, there are a couple of things working in our favor: 1) It took researchers (folks at Cyberus Technologies, Google and Graz University) 23 years to discover this flaw without a single malcontent figuring it out first – that’s a good thing. 2) The bugs were discovered about a month before the news got out so developers at Microsoft, Apple, Google etc. have had time to work on patches.
This week Microsoft released emergency updates to address Meltdown and Spectre vulnerabilities in Windows 10 and Windows Server 2016 operating systems (Windows 7 updates will be released next Tuesday). However, Microsoft reports that the updates are not compatible with some antivirus programs and as a result, the updates may not install automatically. You can check your update history by typing “windows update” (no quotes) in the search bar in the lower left corner and clicking “View your update history”. Look for any of the following updates: KB4056888, KB4056890, KB4056891, KB4056892, and KB405689. Updates will vary depending on your OS version and processor type. If you don't see the referenced updates, click update now.
Apple reports that all iOS and Mac systems are vulnerable to Meltdown and Spectre, and that it has already released “mitigations” in iOS 11.2, macOS 10.13.2, and tvOS 11.2 to help defend against Meltdown. The Apple Watch is not affected.
Google has already released patches for devices running its Android operating system.