Contact Us Today! 800-626-8277

One World Technology Inc. Blog

One World Technology Inc. has been serving the Medina area since 2012, providing IT Support such as technical helpdesk support, computer support, and consulting to small and medium-sized businesses.

ALERT: Meltdown/Spectre Hardware Vulnerability Requires Action

ALERT: Meltdown/Spectre Hardware Vulnerability Requires Action

Just a few months after finding themselves in a firmware fiasco, Intel is making news for all the wrong reasons. This issue had the potential to affect the CPU of a device, causing a severe dip in the performance of the device.

In a blog post by a user going by the name Python Sweetness, an issue was reported, describing “an embargoed security bug impacting apparently all contemporary CPU architectures that implement virtual memory, requiring hardware changes to fully resolve.” This means that, thanks to this bug, the interactions that different programs would have with the CPU would be affected.

Under normal circumstances, a CPU will have two modes that it operates under: kernel, which permits the user to make changes to the computer itself, and user, which is considered a ‘safe’ mode. Python Sweetness discovered a bug that blurred the distinction between the two modes. The bug allowed programs run in user mode to also access kernel mode, possibly allowing malware to access the computer’s hardware.

However, the circumstances have proven to be less dire than they originally appeared. The expectation was that this bug would cause entire processes to shift back and forth between user and kernel mode, hamstringing the speed at which the device would operate. There was also the expectation that this issue would not be able to be resolved without a hardware change.

For PCs with Windows 10 installed and an antivirus that supports the patch, the fix should already be in place. However, to confirm this, go to Settings > Update & Security to see if there are any updates waiting to be installed. If not, check your update history for Security Update for Windows (KB4056892) or check with your antivirus provider to find out when it will be supported, the patch will not install until it sees that the antivirus has been updated to a version that the vendor verifies supports this patch.

Android devices had an update pushed on January 5 to provide some mitigations, with more protections coming in later updates. These patches have already been pushed to Google-branded phones, like the Nexus and Pixel lines, and may have been on other Android devices. It doesn’t hurt to check, and if you haven’t been updated, go online and put pressure on your carrier on a public forum.

Google Chrome should be updated with similar mitigations on January 23, with other browsers updating soon after. To help protect yourself until then, have your IT team activate Site Isolation to minimize the chance of a malicious site accessing data from another browser tab.

Other devices (like NAS devices, smart appliances, networking equipment, media equipment, etc.) may also be at risk, as they are using similar hardware. It’s really important for business owners to have their entire infrastructure reviewed and audited.

These kinds of issues help to demonstrate the value of an MSP’s, or managed service provider’s, services. MSPs like One World Technology Inc. are sure to keep themselves informed on the latest developments in IT security and any resolutions they can pass on to businesses like yours, if they don’t implement them on your behalf.

As a result, you and the rest of your team can go about your business without having to concern yourself with solving issues like these, knowing that you can trust the team who is solving it for you. For more ways that an MSP can help keep your business security and operations optimized, reach out to One World Technology Inc. at 800-626-8277.

What Does Redundancy Mean for Your Business
Personalities are Key to Successful Networking
 

Comments

No comments made yet. Be the first to submit a comment
Already Registered? Login Here
Guest
Wednesday, 23 May 2018
If you'd like to register, please fill in the username, password and name fields.

Captcha Image

Mobile? Grab this Article!

QR-Code dieser Seite

Tag Cloud

Security Tip of the Week Privacy Cloud Best Practices Technology Network Security Business Computing Managed IT Services Backup Hackers Hosted Solutions Software Malware Outsourced IT VoIP Email Google Business Continuity Business Microsoft Data Backup Disaster Recovery Data IT Support Windows 10 Android Saving Money Cybercrime Mobile Devices Ransomware Efficiency Smartphones Cloud Computing Productivity Hardware IT Services Small Business Alert Internet Communications Innovation Data Recovery Browser Business Management Office Computers Computer BDR Law Enforcement User Tips Smartphone Managed IT Server Cybersecurity Virtualization Internet of Things Work/Life Balance Productivity Telephone Systems Chrome Communication Tech Term Mobility Collaboration Passwords How To Managed IT Services Remote Monitoring Password Quick Tips Firewall Budget Social Engineering Data Security Mobile Device Management Private Cloud Artificial Intelligence Social Media Wi-Fi Save Money Flexibility Business Intelligence Phishing Holiday Health Hacking Office Tips Avoiding Downtime Windows App Data Protection Information Technology Money Applications Spam Network Vulnerability Office 365 Router Proactive IT BYOD Mobile Device Recovery Facebook Big Data Two-factor Authentication Gadgets Data Breach HaaS Bring Your Own Device Identity Theft Automation Bandwidth Value Miscellaneous Apps Compliance Redundancy Unsupported Software Comparison History Solid State Drive End of Support Microsoft Office Electronic Medical Records Legal Update Workers HIPAA Charger Content Filtering Data loss Hiring/Firing Business Owner Website Keyboard VPN Managed Service Provider Cleaning Document Management Computer Care Save Time Upgrade Data Storage Public Cloud Employer-Employee Relationship CES Word Remote Computing Credit Cards Windows 10 Patch Management Worker Smart Tech Computing Infrastructure Automobile Black Market OneNote Scam IT Management PDF Risk Management Workplace Tips Marketing Spam Blocking SaaS Battery Data Management Infrastructure Two Factor Authentication IT Plan Google Drive Government Training Operating System Root Cause Analysis Benefits Internet Exlporer Password Manager Software as a Service Frequently Asked Questions Digital Signature Vendor Management Assessment Online Shopping Telephony Windows 10s Hosted Solution Addiction Hosted Computing Smart Technology Current Events Business Mangement Downtime Excel Software Tips Encryption Search Specifications User Error Television Virtual Reality Evernote Techology Skype Cache Inventory Meetings Internet exploMicrosoft Knowledge Gmail Best Practice Tip of the week Physical Security Strategy Apple How to Millennials Public Computer Worker Commute Wireless Charging Start Menu Audit Access Control Network Congestion Recycling Google Docs Windows Server 2008 Wireless Emails Analysis iPhone Unified Threat Management Workforce Authentication Fiber-Optic Mobile Screen Mirroring Advertising Content eWaste Employer Employee Relationship Wireless Technology Telecommuting Windows 7 HBO Shadow IT Nanotechnology Cables Professional Services Computer Fan Books Cast Leadership Audiobook Criminal Relocation Computer Accessories Voice over Internet Protocol Remote Work Users Regulations Experience Devices Accountants Connectivity Safety Unified Communications Tools The Internet of Things Entertainment Bluetooth Video Games Multi-Factor Security Netflix Music Thought Leadership Samsung Theft FENG Emergency Hybrid Cloud Content Management Humor Trending Servers Settings Wearable Technology Streaming Media IoT Colocation Networking Cortana Botnet Data Warehousing webinar Blockchain Scalability Lifestyle Fraud Flash USB Content Filter Loyalty IBM Google Apps Travel Conferencing Human Resources Rootkit Mobile Computing Amazon Troubleshooting Storage Insurance Transportation hacker Supercomputer Outlook IT Support Politics Staff Instant Messaging Education Amazon Web Services Sync Hard Drives Practices Files Robot WiFi Wireless Internet Webinar IT solutions CrashOverride Twitter

Sign up for our Newsletter!

  • Company Name *
  • First Name *
  • Last Name *