Our Most Popular Managed Services

If you need help deciding what services are best for your business let us know.

Logo

 
 Popular Services
 (347) 830-7322

Logo

 

Tekie Geek Blogs

ALERT: Your Business’ Infrastructure May Be Susceptible to Meltdown/Spectre Vulnerability

ALERT: Your Business’ Infrastructure May Be Susceptible to Meltdown/Spectre Vulnerability

You’d think that Intel would make sure their firmware is of sound integrity, but unfortunately, a recently discovered vulnerability has revealed that it’s not as secure as previously thought. The issue involving Intel’s chips could potentially lead to a permanent nosedive for your CPU’s capacity to perform as intended, which could have disastrous implications for your business.

An unknown blogger calling themselves Python Sweetness describes the issue as “an embargoed security bug impacting apparently all contemporary CPU architectures that implement virtual memory, requiring hardware changes to fully resolve.”

The bug found complicated the way that various programs interacted with the CPU. Ordinarily, your CPU will have two modes. Kernel offers a complete “carte blanche” access to the computer or user. This is supposed to be considered the safe mode for your CPU, but Python Sweetness has found that this bug lets programs run through user mode access kernel mode. What this ultimately allows for is the potential for malicious programs to access a user’s hardware--a scary thought indeed.

A fix has been developed that mitigates the issue to a small dip in system performance (approximately 2 percent), which is a much smaller price to pay compared to allowing hackers to influence your hardware itself. Originally, it was thought that the processes would be placed on the kernel mode, then shift back to the user mode as needed, but this process slowed down the system. A new Windows update has resolved the CPU problems, even though most professionals thought that a hardware change was the only way to solve it.

If you have a PC with Windows 10 and an antivirus that supports the patch, you should already have the fix implemented. You should make sure to confirm this by navigating to Settings > Update & Security. Once you’ve done so, make sure you also review your update history and find Security Update for Windows (KB4056892), or check with your antivirus provider to find out when it will be supported, the patch will not install until it sees that the antivirus has been updated to a version that the vendor verifies supports this patch.

Android device users should have had this issue mitigated by an update pushed on January 5, with other updates incoming to strengthen these protections. Phones that fall under the Google brand, including the Nexus and Pixel phones, should have received patches already, with other Android devices soon to be patched as well. You should check your phone to see, and if you haven’t received one, put pressure on your carrier on a visible forum.

Google Chrome should be updated on January 23, and the other browsers should soon follow, with additional mitigations. Until then, you should ask IT to activate Site Isolation to keep potentially malicious sites from harvesting your data from your other browser tabs.

Other devices (like NAS devices, smart appliances, networking equipment, media equipment, etc.) may also be at risk, as they are using cursory hardware. It’s really important for business owners to have their entire infrastructure reviewed and audited.

These types of problems are one of the best reasons to have a managed service provider as part of your IT management and maintenance infrastructure. Tekie Geek keeps a close eye on the latest in network security, including any new threats to your business’s data or patches that need to be implemented. We’ll do whatever it takes to keep your business’s technology as secure and up to date as possible.

Your business won’t have to worry about any aspect of IT maintenance, and we can even help your internal team with implementation projects or technology support aspects of running your organization. To learn more, reach out to us at (347) 830-7322.

Tip of the Week: Never Pay to Print Business Cards...
20-Year-Old Exploit Finds New Life as ROBOT
 

Comments

No comments made yet. Be the first to submit a comment
Already Registered? Login Here
Guest
Monday, November 19, 2018

Captcha Image

Mobile? Grab this Article!

QR-Code dieser Seite

Tag Cloud

Vulnerabilities Password Employer-Employee Relationship Windows 8 Entertainment Chromebook Network Addiction LiFi Users BDR Backup Freedom of Information Computer Malfunction managed IT services staten island HTML Public Cloud Business Growth Document Management Laptop Smartphone Corporate Profile Network Security Comparison Meetings Computers Search Mobile Device Management Access IT Support Vendor Mangement Staffing Domains The Internet of Things Telephony Hack Regulations Office Tips Spyware Time Management Management ransomware attacks Virtual Reality Webcam Digital Screen Reader communications Virtualization Travel Wireless Blockchain Streaming Media Best Practices Websites malware Hard disk Tablets Access Control malware worms Cleaning News Windows Wi-Fi data loss email scam Automation Analytics Tech Terms Distributed Denial of Service IBM Apple Content Filtering Politics Relocation Device security History Cybercrime Social Media Telephone Systems Data Backup managed it services Money Virtual Assistant Data Protection Upgrade Malware Piracy Productivity SaaS Trends IT support firms Digital Payment Staten Island tech support Virtual Desktop Save Money Backup and Disaster Recovery Database Bring Your Own Device Tracking Best Practice Innovation Lenovo Printing SharePoint Big Data Botnet Information Tip of the Week Quick Tips Regulation managed services Staten Island Experience Excel Office 365 IT Management Vendor Desktop Startup CCTV Disaster Recovery Tip of the week Telephone Bandwidth Cost Management Staten Island IT consulting File Sharing Business Metrics DDoS Download Nanotechnology Taxes Unified Threat Management Productivity Uninterrupted Power Supply Data Breach Company Culture Devices Social Engineering Health IT Google Drive Safety computer support firms Business Windows XP Alert today ’s organizations datto Business Continuity Hosted Solution Evernote Audit Remote Computing Thank You Multi-factor Authentication end-user files Security IT services NYC Black Market Disaster Facebook Government Applications Software License Deep Learning Scam Telephone System Managed IT Services App Collaboration Windows 10 Downtime Browsers Hacker Error Wireless Technology Language IT consulting Staten Island Drones Augmented Reality Upload Downloads Software as a Service Displays Web Server Notifications Vulnerability Flash Accidental deletion VPN Network Management Reliable Computing Conferencing Project Management Managed IT Services Administration Text Messaging Television Email Server Network Congestion Computing Infrastructure Running Cable Supercomputer Website Data Accountants Hard Drive Disposal Printers Processors Work/Life Balance Tech Term PDF Unified Communications Small Business CryptoLocker Equifax User Tips Google Maps Lithium-ion battery Private Cloud Staten Island IT support Technology Gmail Fileless Malware Education Multi-Factor Security Wireless Headphones VoIP IT services New York City computer services Staten Island tech support Monitoring Holiday Employer Employee Relationship Internet of Things Hosted Solutions How To Administrator Directions Outlook In Internet of Things Navigation Computer Managing Stress data recovery Writing Google Cybersecurity Cloud computing Staten Island IT consulting Staten island Mobile Security Google Calendar Microsoft Office Help Desk Sports Health Artificial Intelligence Customer Resource management Vendor Management Phishing Networking Paperless Office Settings Processor User Tip IT support computer repair Staten Island Flexibility 3D Printing it support Banking Business Computing tech support Staten Isalnd Budget Computer Care Monitors YouTube Workplace Tips Law Enforcement Information Technology Computing Samsung Business Management Business Cards Microsoft Excel Microchip Ransomware IT support NYC Mobile Device Mobile Devices VoIP IT consulting company eWaste Google Wallet Securty Recovery Spam Business Mangement Managed IT Visible Light Communication Society Congratulations Hiring/Firing computer repair Identity Theft Cloud Computing IT consulting firm Tablet Saving Time Training Hacking Virus Hacks tech support Staten Island End of Support Service Level Agreement CrashOverride Laptops Social computer support Staten Island Data Management Emails Data storage Android Patch Management Microsoft Physical Security Cortana Google Docs staten island managed services Encryption Maintenance BYOD Software Update Music Bitcoin Social Network Data Analysis Internet Hackers IT Services Smartphones Gamification Machine Learning Mobile Technology IT consulting firms Proxy Server WiFi Bluetooth Worker Robot Solid State Drive Data Security Hard Drive Rental Service Workstations Bookmark Motion Sickness Twitter Cryptocurrency Unified Threat Management managed services Retail Office Gadgets managed IT services NYC Legal Mouse Proactive IT IT services Staten Island computer support NYC Going Green Customer Service Redundancy Mobility Saving Money data recovery Staten Island Hardware Business Technology Legislation Staten Island computer support Automobile computer support Scalability Hardware Solutions Communication Word Tech Support IT support New York City Remote Monitoring computer services Memory Workers Firewall Efficiency Windows 10 IT support Staten Islans Knowledge Cabling IT support Staten Island Printer Advertising Electronic Medical Records Browser Emergency Touchscreen Passwords Operating System G Suite Outsourced IT Tactics Compliance IT consulting NYC IT Consultant Apps IT consulting Cache Two-factor Authentication Miscellaneous Username Fake News Privacy Specifications Cloud Managed Service Start Menu Powerful Technology Solutions Documents Managed Service Provider Antivirus Content

Newsletter Sign Up