Contact Us Today! 800-626-8277

One World Technology Inc. Blog

One World Technology Inc. has been serving the Medina area since 2012, providing IT Support such as technical helpdesk support, computer support, and consulting to small and medium-sized businesses.

ALERT: Meltdown/Spectre Hardware Vulnerability Requires Action

ALERT: Meltdown/Spectre Hardware Vulnerability Requires Action

Just a few months after finding themselves in a firmware fiasco, Intel is making news for all the wrong reasons. This issue had the potential to affect the CPU of a device, causing a severe dip in the performance of the device.

In a blog post by a user going by the name Python Sweetness, an issue was reported, describing “an embargoed security bug impacting apparently all contemporary CPU architectures that implement virtual memory, requiring hardware changes to fully resolve.” This means that, thanks to this bug, the interactions that different programs would have with the CPU would be affected.

Under normal circumstances, a CPU will have two modes that it operates under: kernel, which permits the user to make changes to the computer itself, and user, which is considered a ‘safe’ mode. Python Sweetness discovered a bug that blurred the distinction between the two modes. The bug allowed programs run in user mode to also access kernel mode, possibly allowing malware to access the computer’s hardware.

However, the circumstances have proven to be less dire than they originally appeared. The expectation was that this bug would cause entire processes to shift back and forth between user and kernel mode, hamstringing the speed at which the device would operate. There was also the expectation that this issue would not be able to be resolved without a hardware change.

For PCs with Windows 10 installed and an antivirus that supports the patch, the fix should already be in place. However, to confirm this, go to Settings > Update & Security to see if there are any updates waiting to be installed. If not, check your update history for Security Update for Windows (KB4056892) or check with your antivirus provider to find out when it will be supported, the patch will not install until it sees that the antivirus has been updated to a version that the vendor verifies supports this patch.

Android devices had an update pushed on January 5 to provide some mitigations, with more protections coming in later updates. These patches have already been pushed to Google-branded phones, like the Nexus and Pixel lines, and may have been on other Android devices. It doesn’t hurt to check, and if you haven’t been updated, go online and put pressure on your carrier on a public forum.

Google Chrome should be updated with similar mitigations on January 23, with other browsers updating soon after. To help protect yourself until then, have your IT team activate Site Isolation to minimize the chance of a malicious site accessing data from another browser tab.

Other devices (like NAS devices, smart appliances, networking equipment, media equipment, etc.) may also be at risk, as they are using similar hardware. It’s really important for business owners to have their entire infrastructure reviewed and audited.

These kinds of issues help to demonstrate the value of an MSP’s, or managed service provider’s, services. MSPs like One World Technology Inc. are sure to keep themselves informed on the latest developments in IT security and any resolutions they can pass on to businesses like yours, if they don’t implement them on your behalf.

As a result, you and the rest of your team can go about your business without having to concern yourself with solving issues like these, knowing that you can trust the team who is solving it for you. For more ways that an MSP can help keep your business security and operations optimized, reach out to One World Technology Inc. at 800-626-8277.

What Does Redundancy Mean for Your Business
Personalities are Key to Successful Networking
 

Comments

No comments made yet. Be the first to submit a comment
Already Registered? Login Here
Guest
Friday, 23 February 2018
If you'd like to register, please fill in the username, password and name fields.

Captcha Image

Mobile? Grab this Article!

QR-Code dieser Seite

Tag Cloud

Tip of the Week Security Privacy Best Practices Cloud Technology Network Security Managed IT Services Business Computing Backup Hackers Software Outsourced IT Hosted Solutions VoIP Malware Microsoft Business Business Continuity Disaster Recovery Google Email Windows 10 Data Data Backup Smartphones IT Support Mobile Devices Efficiency Saving Money Hardware Android Small Business Alert Innovation Productivity Computer Browser Cybercrime Office Ransomware Cloud Computing Communications Business Management IT Services Data Recovery Computers Server Virtualization Mobility Chrome Law Enforcement Work/Life Balance Cybersecurity How To User Tips Telephone Systems BDR Managed IT Passwords Save Money Flexibility Holiday Hacking Internet of Things Collaboration Office Tips Windows App Quick Tips Communication Remote Monitoring Social Engineering Password Firewall Budget Private Cloud Social Media Health Productivity Internet Smartphone Managed IT Services Avoiding Downtime Wi-Fi Proactive IT Data Security Mobile Device Management Information Technology Two-factor Authentication Data Breach Router Money Business Intelligence Facebook Phishing Office 365 Value Gadgets Artificial Intelligence Recovery Compliance Bring Your Own Device HaaS Miscellaneous Spam Workers Computing Infrastructure Charger Black Market Remote Computing Vulnerability Marketing Patch Management Government Google Drive Apps Hiring/Firing Scam Automobile Risk Management Workplace Tips Solid State Drive History Battery End of Support Data Management Network CES Identity Theft Word Computer Care Credit Cards Data Storage Employer-Employee Relationship Applications Legal Microsoft Office HIPAA Bandwidth Windows 10 Managed Service Provider Content Filtering Redundancy Worker BYOD Mobile Device OneNote Data Protection IT Management Big Data Business Owner Upgrade SaaS Spam Blocking Public Cloud Keyboard Automation Two Factor Authentication Comparison IT Plan Document Management Training Operating System Unsupported Software Save Time Electronic Medical Records Wireless Charging Software Tips Emergency Start Menu Television Recycling Google Docs PDF Meetings Wearable Technology Windows Server 2008 Knowledge Workforce Fiber-Optic Physical Security Mobile hacker Public Computer Scalability eWaste Website Audit Telecommuting Data loss Hard Drives USB Windows 7 Network Congestion Files Cables Professional Services Emails Internet Exlporer Unified Threat Management Criminal Voice over Internet Protocol Remote Work Screen Mirroring Troubleshooting Regulations Employer Employee Relationship Unified Communications HBO Transportation Tools Cleaning Downtime Politics Instant Messaging Multi-Factor Security Computer Fan Cast Leadership User Error Education Computer Accessories Theft Benefits Internet exploMicrosoft Safety Apple Content Management Trending The Internet of Things Hosted Solution Servers Bluetooth Cortana Smart Technology Botnet Netflix Samsung Wireless iPhone Search Blockchain Lifestyle FENG Fraud Flash Virtual Reality Techology Best Practice Google Apps Travel Settings Advertising Networking How to Human Resources Mobile Computing Amazon Data Warehousing webinar Worker Commute Loyalty Relocation Infrastructure Outlook IBM Users Staff Amazon Web Services Sync Conferencing Rootkit Wireless Technology Password Manager Software as a Service Content Frequently Asked Questions Supercomputer Shadow IT Online Shopping Books Telephony IT Support Humor Business Mangement Update Hybrid Cloud Audiobook Root Cause Analysis Experience Excel Specifications Evernote Skype Colocation Vendor Management Assessment Video Games Gmail Windows 10s Entertainment Music Tip of the week Current Events Millennials Webinar Robot IT solutions CrashOverride Digital Signature WiFi

Sign up for our Newsletter!

  • Company Name *
  • First Name *
  • Last Name *