Our Most Popular Managed Services

If you need help deciding what services are best for your business let us know.

Logo

 
 Popular Services
 (347) 830-7322

Logo

 

Tekie Geek Blogs

ALERT: Your Business’ Infrastructure May Be Susceptible to Meltdown/Spectre Vulnerability

ALERT: Your Business’ Infrastructure May Be Susceptible to Meltdown/Spectre Vulnerability

You’d think that Intel would make sure their firmware is of sound integrity, but unfortunately, a recently discovered vulnerability has revealed that it’s not as secure as previously thought. The issue involving Intel’s chips could potentially lead to a permanent nosedive for your CPU’s capacity to perform as intended, which could have disastrous implications for your business.

An unknown blogger calling themselves Python Sweetness describes the issue as “an embargoed security bug impacting apparently all contemporary CPU architectures that implement virtual memory, requiring hardware changes to fully resolve.”

The bug found complicated the way that various programs interacted with the CPU. Ordinarily, your CPU will have two modes. Kernel offers a complete “carte blanche” access to the computer or user. This is supposed to be considered the safe mode for your CPU, but Python Sweetness has found that this bug lets programs run through user mode access kernel mode. What this ultimately allows for is the potential for malicious programs to access a user’s hardware--a scary thought indeed.

A fix has been developed that mitigates the issue to a small dip in system performance (approximately 2 percent), which is a much smaller price to pay compared to allowing hackers to influence your hardware itself. Originally, it was thought that the processes would be placed on the kernel mode, then shift back to the user mode as needed, but this process slowed down the system. A new Windows update has resolved the CPU problems, even though most professionals thought that a hardware change was the only way to solve it.

If you have a PC with Windows 10 and an antivirus that supports the patch, you should already have the fix implemented. You should make sure to confirm this by navigating to Settings > Update & Security. Once you’ve done so, make sure you also review your update history and find Security Update for Windows (KB4056892), or check with your antivirus provider to find out when it will be supported, the patch will not install until it sees that the antivirus has been updated to a version that the vendor verifies supports this patch.

Android device users should have had this issue mitigated by an update pushed on January 5, with other updates incoming to strengthen these protections. Phones that fall under the Google brand, including the Nexus and Pixel phones, should have received patches already, with other Android devices soon to be patched as well. You should check your phone to see, and if you haven’t received one, put pressure on your carrier on a visible forum.

Google Chrome should be updated on January 23, and the other browsers should soon follow, with additional mitigations. Until then, you should ask IT to activate Site Isolation to keep potentially malicious sites from harvesting your data from your other browser tabs.

Other devices (like NAS devices, smart appliances, networking equipment, media equipment, etc.) may also be at risk, as they are using cursory hardware. It’s really important for business owners to have their entire infrastructure reviewed and audited.

These types of problems are one of the best reasons to have a managed service provider as part of your IT management and maintenance infrastructure. Tekie Geek keeps a close eye on the latest in network security, including any new threats to your business’s data or patches that need to be implemented. We’ll do whatever it takes to keep your business’s technology as secure and up to date as possible.

Your business won’t have to worry about any aspect of IT maintenance, and we can even help your internal team with implementation projects or technology support aspects of running your organization. To learn more, reach out to us at (347) 830-7322.

Tip of the Week: Never Pay to Print Business Cards...
20-Year-Old Exploit Finds New Life as ROBOT
 

Comments

No comments made yet. Be the first to submit a comment
Already Registered? Login Here
Guest
Monday, 28 May 2018

Captcha Image

Mobile? Grab this Article!

QR-Code dieser Seite

Tag Cloud

Unified Threat Management Networking Information Technology Employer-Employee Relationship Ransomware IT consulting company Conferencing App Laptop Google Maps Data Protection Apps Cache Virtualization Flash Cloud Computing File Sharing Gmail User Tips Computer Care Twitter Password Hard Drive Mouse data recovery Bluetooth Customer Service computer support NYC Visible Light Communication YouTube Bitcoin Distributed Denial of Service Touchscreen Software License Paperless Office Society Save Money Operating System Tactics 3D Printing Rental Service Proactive IT Network Security IT Support Running Cable VoIP Tracking Project Management IT consulting firms LiFi Data Backup Powerful Technology Solutions Phishing Multi-factor Authentication Gadgets Scam IBM WiFi IT services NYC Vulnerability Google Docs Software Deep Learning Compliance Congratulations managed IT services staten island Excel Cabling Tip of the Week IT consulting Productivity Hackers Desktop Training Black Market Communication Google Calendar Staffing ransomware attacks Television IT support New York City Update computer support firms CrashOverride Time Management In Internet of Things Physical Security Unified Threat Management Tech Term CryptoLocker IT consulting Staten island Audit Social Start Menu Firewall Company Culture Administration Website Hacker Advertising communications Law Enforcement IT support firms Email Server End of Support IT services Staten Island Digital Payment IT support NYC DDoS Backup SaaS Telephony Remote Monitoring Mobile Device Best Practices Taxes Microsoft Office Hosted Solution Telephone Systems Data Breach Downtime Printer Big Data Smartphones Tablet Lenovo Smartphone Analytics Public Cloud Office 365 Windows 10 Network Management Travel Miscellaneous Business Growth Emergency Data Microsoft Relocation SharePoint computer repair Devices Thank You Mobile Security Google Computer Blockchain Mobility Tech Terms Addiction Bring Your Own Device email scam Google Wallet Digital Mobile Device Management Facebook Technology Processors Automation IT support Staten Islans data loss Virtual Reality Work/Life Balance IT services New York City Encryption computer support Staten Island Cortana Legislation Nanotechnology Drones Cryptocurrency Download Windows XP BDR Worker Outsourced IT Mobile Devices Web Server data recovery Staten Island Security Disaster Recovery tech support Staten Island Cybercrime How To Unified Communications Corporate Profile Hacks Cloud Privacy Accountants Network Remote Computing managed IT services NYC Managed Service Provider Maintenance datto Windows Scalability News Alert Vulnerabilities Social Media Computers Saving Money BYOD Microsoft Excel Android Spam Printing IT consulting Staten Island Spyware Managed IT Services Education Wi-Fi Lithium-ion battery Google Drive Social Engineering Tablets Cloud computing Staten Island HTML Equifax today ’s organizations IT Services Artificial Intelligence Passwords Cleaning Employer Employee Relationship Domains managed services Browser IT support Cost Management Memory Computing Infrastructure Samsung staten island managed services Hardware managed services Staten Island Virtual Assistant malware Hard disk Laptops Internet Displays Hard Drive Disposal Database Music Piracy Reliable Computing Emails Wireless computer repair Staten Island IT consulting firm Knowledge Tip of the week Bandwidth Text Messaging Disaster Hacking computer services Private Cloud Hiring/Firing Software as a Service Microchip Accidental deletion Business Computing Webcam History Business Technology Applications Windows 10 Productivity Device security Fake News Innovation Supercomputer tech support Staten Isalnd Staten Island IT support Outlook Data Security malware worms Flexibility Politics Securty CCTV Websites Language it support Legal Vendor Mangement IT support Staten Island Monitors Experience Retail managed it services Workstations Windows 8 Budget computer services Staten Island G Suite Office Uninterrupted Power Supply Meetings eWaste Chromebook Hosted Solutions Data storage Network Congestion Data Management Access Business Cards Recovery Staten Island computer support IT Consultant Collaboration Access Control Business Mangement Safety Startup Document Management IT Management Holiday Staten Island IT consulting Solid State Drive Hack Help Desk Downloads Virtual Desktop Mobile Technology Workplace Tips Multi-Factor Security Regulations Hardware Solutions Identity Theft Robot Machine Learning Managed IT Redundancy Search IT consulting NYC Motion Sickness The Internet of Things Business Continuity Health Automobile Managed IT Services Virus Botnet Documents Wireless Technology Patch Management Settings Best Practice Small Business Government Word Internet of Things Wireless Headphones Sports Screen Reader Content Filtering Tech Support Office Tips Two-factor Authentication Streaming Media Comparison Freedom of Information Upgrade PDF Efficiency Workers Malware Service Level Agreement Specifications Computer Malfunction Business Metrics Computing Apple computer support Staten Island tech support tech support Antivirus Quick Tips end-user files Banking VPN Augmented Reality VoIP Administrator Cybersecurity Money Notifications Backup and Disaster Recovery Business Business Management Vendor Management Writing

Newsletter Sign Up