Microsoft announces new updates to protect against Spectre and Meltdown attacks

By -
Additional versions of Windows 10 are now protected from these attacks, and Microsoft has begun releasing Intel microcode updates directly, but only for a small number of devices. Incompatible antivirus software remains a problem, however.
Historically, even the most crippling security vulnerabilities can be patched in relatively straightforward fashion. After applying a security update, you're no longer vulnerable to exploits based on that flaw.

That's not true of the "speculative execution side-channel attacks" broadly identified as Meltdown and Spectre. Repairing these flaws requires a series of updates to hardware and software, as well as coordination with developers of security software, where incompatibilities between updates can cause crashes and possible data loss.
As a result, the process of protecting PCs from these potentially deadly attacks could take months, with a series of patches (and updates on top of updates) from multiple vendors.
In a series of announcements today, Microsoft announced a handful of new tools it recently released as part of that ongoing fight against the Spectre and Meltdown threats.
As of February 13, Windows 10 releases on 32-bit (x86) platforms now have updates to address both vulnerabilities. Previous updates had covered only 64-bit versions of Windows 10.
Details and links to the Windows 10 updates are in the "Protect your Windows devices against Spectre and Meltdown" article, KB4073757.
In addition, Microsoft announced that it's making available Intel microcode updates for the Windows 10 Fall Creators Update, version 1709. The initial release applies only to devices powered by specific 6th Generation Intel Core and Core m processors: Skylake H/S (CPUID 506E3) and Skylake U/Y and U23e (CPUID 406E3).
For now, this fix is only available through the Microsoft Update Catalog, KB4090007. Attempting to install the update on a device with an unsupported CPU or a Windows 10 version other than 1709 results in an error message.
Although most devices will receive this class of updates via firmware provided by the device manufacturer, Microsoft says it will offer additional microcode updates from Intel through that KB article "as they become available to Microsoft."
The company also announced that it would continue its hard line on compatibility checks for antivirus software.
The vast majority of Windows devices now have compatible AV software installed, according to Microsoft. Nonetheless, the compatibility risks are still too high to abandon those checks

Comments

Post a Comment

Popular Posts

Hacker steals data of millions of Bulgarians, emails it to local media

By -
Image
  Source of the data breach appears to be the country's National Revenue Agency A mysterious hacker has stolen the personal details of millions of Bulgarians and has emailed download links to the stolen data to local news publications. The data's origin is believed to be the country's National Revenue Agency (NRA), a department of the Bulgarian Ministry of Finance. In a  message posted on its website  on Monday, the NRA said it was working with the Ministry of the Interior and the State Agency for National Security (SANS) to investigate the hack. "We are currently verifying whether the data is real," said the NRA. Hours after this article's publication, the Bulgarian Ministry of the Interior  confirmed the hack . HACKER STOLE 110 DATABASES, LEAKED 57 According to reports from local media [ 1 ,  2 ,  3 ,  4 ,  5 ], who received part of the data, the hacker said they stole the personal details of over five million Bulgarians, of the country's total ...
Read more

​Linux totally dominates supercomputers

By -
Image
It finally happened. Today, all 500 of the world's top 500 supercomputers are running Linux. Linux rules supercomputing. This day has been coming since 1998, when Linux first appeared on the TOP500 Supercomputer list . Today it finally happened:  All 500 of the world's fastest supercomputers are running Linux . The last two non-Linux systems, a pair of Chinese IBM POWER computers running AIX, dropped off the  November 2017 TOP500 Supercomputer list . Overall, China now leads the supercomputing race with 202 computers to the US' 144. China also leads the US in aggregate performance. China's supercomputers represent 35.4 percent of the Top500's flops, while the US trails with 29.6 percent. With an anti-science regime in charge of the government, America will only continue to see its technological lead decline. When the  first Top500 supercomputer list was compiled in June 1993 , Linux was barely more than a toy. It hadn't even adopted Tux as its masc...
Read more

Microsoft tries to stem its self-made collaboration-tool confusion

By -
Image
Microsoft is using this week's Ignite conference to try to help clarify its collaboration-tool strategy. Here's how SharePoint, Teams and Yammer figure in the mix. Choice is good. But too much choice, especially when it comes to collaboration tools, has been a problem for Microsoft. This isn't news to customers, partners or Microsoft execs themselves. But at the company's Ignite IT Pro conference in Orlando this week, Microsoft execs took a step to try to clarify the company's strategy and messaging in this area. Microsoft Office 365 Marketing chief Ron Markezich kicked off the conference this week with a slide entitled "Microsoft 365 Teamwork: Where to Start a Conversation." That slide attempts to do what  Microsoft initially attempted with a 60-plus-page whitepaper : Clarify which collaboration tools customers should use when. The slide, which features SharePoint -- and its files, sites and content storage at the center -- is broken down into t...
Read more