Our Most Popular Managed Services

If you need help deciding what services are best for your business let us know.

Logo

 
 Popular Services
 (347) 830-7322

Logo

 

Tekie Geek Blogs

ALERT: Your Business’ Infrastructure May Be Susceptible to Meltdown/Spectre Vulnerability

ALERT: Your Business’ Infrastructure May Be Susceptible to Meltdown/Spectre Vulnerability

You’d think that Intel would make sure their firmware is of sound integrity, but unfortunately, a recently discovered vulnerability has revealed that it’s not as secure as previously thought. The issue involving Intel’s chips could potentially lead to a permanent nosedive for your CPU’s capacity to perform as intended, which could have disastrous implications for your business.

An unknown blogger calling themselves Python Sweetness describes the issue as “an embargoed security bug impacting apparently all contemporary CPU architectures that implement virtual memory, requiring hardware changes to fully resolve.”

The bug found complicated the way that various programs interacted with the CPU. Ordinarily, your CPU will have two modes. Kernel offers a complete “carte blanche” access to the computer or user. This is supposed to be considered the safe mode for your CPU, but Python Sweetness has found that this bug lets programs run through user mode access kernel mode. What this ultimately allows for is the potential for malicious programs to access a user’s hardware--a scary thought indeed.

A fix has been developed that mitigates the issue to a small dip in system performance (approximately 2 percent), which is a much smaller price to pay compared to allowing hackers to influence your hardware itself. Originally, it was thought that the processes would be placed on the kernel mode, then shift back to the user mode as needed, but this process slowed down the system. A new Windows update has resolved the CPU problems, even though most professionals thought that a hardware change was the only way to solve it.

If you have a PC with Windows 10 and an antivirus that supports the patch, you should already have the fix implemented. You should make sure to confirm this by navigating to Settings > Update & Security. Once you’ve done so, make sure you also review your update history and find Security Update for Windows (KB4056892), or check with your antivirus provider to find out when it will be supported, the patch will not install until it sees that the antivirus has been updated to a version that the vendor verifies supports this patch.

Android device users should have had this issue mitigated by an update pushed on January 5, with other updates incoming to strengthen these protections. Phones that fall under the Google brand, including the Nexus and Pixel phones, should have received patches already, with other Android devices soon to be patched as well. You should check your phone to see, and if you haven’t received one, put pressure on your carrier on a visible forum.

Google Chrome should be updated on January 23, and the other browsers should soon follow, with additional mitigations. Until then, you should ask IT to activate Site Isolation to keep potentially malicious sites from harvesting your data from your other browser tabs.

Other devices (like NAS devices, smart appliances, networking equipment, media equipment, etc.) may also be at risk, as they are using cursory hardware. It’s really important for business owners to have their entire infrastructure reviewed and audited.

These types of problems are one of the best reasons to have a managed service provider as part of your IT management and maintenance infrastructure. Tekie Geek keeps a close eye on the latest in network security, including any new threats to your business’s data or patches that need to be implemented. We’ll do whatever it takes to keep your business’s technology as secure and up to date as possible.

Your business won’t have to worry about any aspect of IT maintenance, and we can even help your internal team with implementation projects or technology support aspects of running your organization. To learn more, reach out to us at (347) 830-7322.

Tip of the Week: Never Pay to Print Business Cards...
20-Year-Old Exploit Finds New Life as ROBOT
 

Comments

No comments made yet. Be the first to submit a comment
Already Registered? Login Here
Guest
Tuesday, August 21, 2018

Captcha Image

Mobile? Grab this Article!

QR-Code dieser Seite

Tag Cloud

data recovery Disaster Recovery Domains Audit end-user files BYOD Communication Processors Customer Resource management Microsoft Startup Managed Service IT support Staten Island Relocation Deep Learning IT support New York City Black Market computer services Staten Island Politics Robot Office Tips Office Google Maps Office 365 Vendor Management Visible Light Communication Gamification Tech Term Windows Cleaning Tactics Mobile Device Disaster Management How To tech support Staten Island End of Support Drones Solid State Drive Network Management The Internet of Things Google Calendar Business Management Multi-Factor Security Workstations Hacks Holiday IBM SaaS malware worms Business Continuity Legislation Gadgets Public Cloud IT consulting firms Smartphone Corporate Profile Encryption Software Scam Google Drive Business Mangement Cloud Computing Music Hosted Solution Privacy Samsung Username Email data loss Spam Network Upgrade Trends Uninterrupted Power Supply Virtual Reality Cybersecurity Congratulations Vulnerabilities managed IT services NYC Virtual Desktop Securty Artificial Intelligence Upload Bitcoin Excel Streaming Media Hardware Access Travel Motion Sickness Addiction Website Devices Alert Telephone Hacker Thank You Cryptocurrency Apps Monitors WiFi computer support NYC Money Administrator Applications managed services Staten Island Hard Drive Disposal Regulation Webcam Vulnerability Data Backup Hackers Advertising Gmail Botnet Small Business Mouse Windows XP IT consulting NYC Tech Terms News Taxes Hack IT support Staten Islans Mobile Devices Machine Learning In Internet of Things Emails communications Mobile Device Management Conferencing HTML Miscellaneous Mobile Technology IT Services Hiring/Firing Laptop Websites IT support Productivity Firewall Start Menu Text Messaging Staten Island computer support IT consulting company Data Error App computer support Cost Management Accountants Powerful Technology Solutions Malware Health Distributed Denial of Service tech support Staten Isalnd Hosted Solutions Workers Documents CrashOverride Information Passwords IT Management Telephone Systems Memory datto Worker Operating System IT services NYC IT support NYC Piracy Specifications CryptoLocker Printer IT consulting Staten island Cortana File Sharing Hacking Backup email scam Staten Island IT consulting Business Metrics Managing Stress Tip of the week Bandwidth Rental Service Television Service Level Agreement Wireless Technology IT support firms Business Computing Society Legal Supercomputer Identity Theft Device security Apple Patch Management Data Protection 3D Printing managed IT services staten island Digital Best Practice eWaste Windows 8 Compliance Data Breach Private Cloud Business managed it services Ransomware Antivirus Business Growth Downtime Smartphones Maintenance Security Employer Employee Relationship Writing Content Administration Backup and Disaster Recovery Laptops Outsourced IT Big Data IT consulting firm Running Cable Automation Tablets Spyware Internet of Things Company Culture Displays Lithium-ion battery Best Practices VoIP computer services BDR Banking Computing Infrastructure Social Network Computer Malfunction Unified Threat Management it support Project Management today ’s organizations Social Engineering Search Tip of the Week G Suite CCTV Redundancy IT consulting Augmented Reality IT services Staten Island Microsoft Office Tablet Google Docs Database Cloud Safety Physical Security Screen Reader Access Control Content Filtering Managed IT Unified Communications Microchip LiFi Managed Service Provider VPN Windows 10 ransomware attacks Managed IT Services Notifications Quick Tips Analytics Touchscreen Bring Your Own Device Efficiency Bluetooth Sports Vendor Mangement Printing Going Green Data Management Update Mobility Twitter User Tips Google Wallet Computer Care VoIP IT consulting Staten Island Work/Life Balance Web Server computer repair Staten Island malware Hard disk Education computer repair Save Money Password Time Management Wi-Fi Document Management Information Technology Retail Flash Remote Monitoring Government Facebook Network Congestion Computers Multi-factor Authentication Reliable Computing Staten Island IT support Knowledge Networking Settings Network Security Technology Phishing Meetings Mobile Security Workplace Tips Virtual Assistant Outlook Collaboration Word Productivity Paperless Office data recovery Staten Island Proactive IT Cybercrime Managed IT Services Computing Business Technology Lenovo Desktop Monitoring Computer Cabling computer support Staten Island Freedom of Information Remote Computing Flexibility Comparison Accidental deletion Language tech support Customer Service Fake News Scalability Employer-Employee Relationship Social Saving Money Chromebook IT Support Virus Staffing Social Media Browser Business Cards Hardware Solutions Internet computer support firms Downloads Experience Recovery Innovation DDoS Law Enforcement Virtualization Training IT Consultant Google Windows 10 Two-factor Authentication Data storage Help Desk Automobile Nanotechnology Microsoft Excel SharePoint Hard Drive Regulations managed services Cloud computing Staten Island Cache Data Security Server IT services New York City Tech Support YouTube Tracking staten island managed services Blockchain History Wireless Wireless Headphones Staten Island tech support PDF Software as a Service Emergency Download Equifax Telephony Unified Threat Management Digital Payment Budget Software License Android

Newsletter Sign Up