MERIT Solutions Blog

MERIT Solutions has been serving the Chesapeake area since 1982, providing IT Support such as technical helpdesk support, computer support, and consulting to small and medium-sized businesses.

ALERT: Meltdown/Spectre Vulnerability Grants Malware Access, Patch It Today

ALERT: Meltdown/Spectre Vulnerability Grants Malware Access, Patch It Today

Mere months after the firmware in their computer chips was found to be seriously flawed, Intel’s flagship product has once again brought some unpleasant attention to the company. While the issue now has a fix, there was the possibility that a solution could depreciate the functionality of the CPU.

In a blog maintained by a user known only as Python Sweetness, a post went up stating that “an embargoed security bug impacting apparently all contemporary CPU architectures that implement virtual memory, requiring hardware changes to fully resolve.”

In layman’s terms, there was a bug that interfered with how other programs interacted with the CPU. A functioning CPU has two modes, kernel and user. User mode is the one that is generally considered ‘safe’ mode, while kernel mode grants access into the computer’s inner workings. Python Sweetness, however, realized that there was a bug that blurred the lines between user and kernel mode. This issue created a means for malware and other malicious programs to access a system’s hardware directly.

This bug was expected to cause the system to have to switch entire processes back and forth between user mode and kernel mode, which would ultimately slow any of the computer’s functions to a crawl. What’s worse, the initial expectation was that the computer could only be fixed with a hardware change. Fortunately, a fix was devised and released as a Windows update, costing only 2 percent of system performance (much less than what would be lost otherwise).

For PCs with Windows 10 installed and an antivirus that supports the patch, the fix should already be in place. However, to confirm this, go to Settings > Update & Security to see if there are any updates waiting to be installed. If not, check your update history for Security Update for Windows (KB4056892), or check with your antivirus provider to find out when it will be supported, the patch will not install until it sees that the antivirus has been updated to a version that the vendor verifies supports this patch.

If you have an Android device, there was an update on January 5 that provided mitigations, with the promise of more, further updates to add to these protections. Google-branded phones, including the Nexus and Pixel lines, should have already received the patches, and other Android phones may have as well. It is something that you should check, and if you haven’t received an update yet, reach out to your carrier and ask why (public forums get you extra points).

An update to Google Chrome is expected on January 23, with other browsers following suit, that will also include mitigations. In the meantime, ask your IT resource to help you activate Site Isolation to help keep a malicious website from accessing your data from another.

Other devices (like NAS devices, smart appliances, networking equipment, media equipment, etc.) may also be at risk, as they are using similar hardware. It’s really important for business owners to have their entire infrastructure reviewed and audited.

Of course, for the fix to take place, the update has to be installed. This is the reason that it is worth having a managed service provider looking out for your business. The MSP would be there, ear to the ground for news of updates, ready to jump into action on your behalf. As a representative of you business, you wouldn’t have to worry about dealing with any of it. This means that you and your staff would be free to focus on profit-generating initiatives, without the distraction of maintenance and updates.
MERIT Solutions can be that MSP for you. Call us at (757) 420-5150 for more information.

e-max.it: your social media marketing partner
 

Comments

No comments made yet. Be the first to submit a comment
Already Registered? Login Here
Guest
Friday, 23 February 2018

Captcha Image

Tag Cloud

Tip of the Week Security Technology Cloud Privacy Best Practices Business Computing Hackers Network Security Malware Software Internet Hosted Solutions Backup Business Management google Managed IT Services Productivity Microsoft Computer Disaster Recovery Business Continuity Business IT Support Outsourced IT Mobile Devices VoIP User Tips Windows 10 communications Innovation Productivity Email IT Services Hardware Cybercrime Data Backup Windows Efficiency Managed IT Mobile Device Management Mobility Apps Smartphone Server Ransomware Cybersecurity Save Money browser Telephone Systems Small Business Data Recovery Saving Money Hosted Solution Quick Tips Android Virtualization Operating System Law Enforcement Internet of Things Office 365 Data Security Recovery Password Holiday Microsoft Office Chrome BYOD Data BDR Money VPN Information Technology Passwords Budget Gadgets Smartphones Data Management IT Support Wireless Social upgrade Hacking Risk Management Google Drive Avoiding Downtime Unsupported Software App Alert Cloud Computing Communication Health Miscellaneous Phishing Managed Service Provider Computers Work/Life Balance Facebook Government Social Media Best Practice Current Events Audit The Internet of Things Workplace Tips Personal Information Politics Two-factor Authentication Collaboration Social Engineering USB Save Time Wireless Technology search Windows 10 Automation Telephony Identity Theft Vulnerability Flexibility Shortcut Private Cloud Office tips Applications Managed IT Services History User Error Wi-Fi Data Breach Proactive IT Firewall Application Content Filtering Battery Update Disaster Data Loss HaaS Humor Marketing Compliance IT solutions Google Docs Employer-Employee Relationship DDoS Automobile Network Sports Data Protection Tech Support Television Saving Time Hacker Redundancy Cleaning Internet Exlporer Office Apple Solid State Drive Streaming Media Computer Care Phone System Commerce Project Management WiFi Cortana Legal Encryption iPhone Going Green Users Bandwidth Mobile Computing Transportation eWaste Spam Artificial Intelligence Excel Robot Cost Management Data Storage Blockchain End of Support Remote Computing OneNote SaaS Gmail Samsung Antivirus Emails Devices Reputation Unified Threat Management Sales Cast Adobe tweet Advertising Workers Training Entertainment Settings Spyware Upgrades Retail Electronic Medical Records calculator Licensing Twitter Point of Sale WannaCry Data storage Updates Company Culture HIPAA control Black Market Webinar Fraud Administration Chromecast Consultant Conferencing HBO Smart Technology Mobile WSJ Microsoft Word Value Microsoft Excel Exchange Avoid Downtime Shadow IT IT solutions Edge Colocation Gifts Distributed Denial of Service altivista Professional Services Document Management Hard Drives Files File Sharing Experience SBS Windows 10s Ciminal Administrator Lithium-ion battery IT Management compaq Travel Nanotechnology Storage Wearable Technology Video Games Virtual Reality Hard Disk Drive Relocation Access Credit Cards WIndows Server 2008 hp Scam Tablets Root Cause Analysis Music domain Patch Management MSP FAQ Employer Employee Relationship NFL Augmented Reality PDF Touchscreen Lifestyle Analytics Business Intelligence remote Keyboard Outlook Yahoo Instant Messaging intranet Charger Computer Accessories Word Worker Commute Text Messaging Mobile Device Legislation Running Cable Big Data Managed IT Service Server 2008 Ali Rowghani Managing Stress iOS IT budget Wireless Charging Trending Windows Ink Scalability Maintenance Comparison Books Hiring/Firing Regulation Education Computer Fan Evernote Uninterrupted Power Supply Vendor Management Google Maps Router Laptop How To Device Security Specifications Screen Mirroring server installation dvd "cannot install required files" Benefits Sync stock Dark Web Identities Networking Software as a Service Meetings Touchpad Congratulations Cache Safety Monitors Remote Monitoring Emergency Worker CrashOverride Thank You

Mobile? Grab this Article!

QR-Code dieser Seite

Recent Comments

Anna Jackson 5 SEO Tools To Get a Google-Eye View of Your Website
15 September 2017
Hello Randall! I was doing very important work but due to your subject I felt better to stay at you...
David Miller Not all project-management tools are right for all businesses
25 August 2017
All the points depicted by you in this blog is v.apt. I love the title of this blog because it says ...