No Device is Safe from Meltdown and Spectre Vulnerabilities: eScan

January, 08, 2018

Almost every processor designed since 1995 is affected by "Speculative Execution Side-Channel Attacks" as per the extensive research was done by the researchers of Google Project Zero.

The vulnerabilities have been segregated into two categories viz. Meltdown and Spectre.

Computers, smartphones, tablets etc. with Windows, Linux, iOS, MacOS, tvOS, Android or any other operating systems are impacted by these vulnerabilities. Advisory issued by Microsoft can be accessed here (https://portal.msrc.microsoft.com/en-US/security-guidance), furthermore, users should enable Automatic updates. However, it yet unknown how smartphone device manufactures would be pushing the updates considering for a fact that every vulnerability addressed by Android takes a long time to be made available to the end-users by the device manufacturers. Apple/iOS traditionally have always been very quick in addressing the concerns and have been providing patches to its users at a much faster rate and this time around too, we expect Apple to provide a resolution for these issues.

Apple has issued a statement pertaining to Meltdown / Spectre and iOS / Mac users should expect updates to the Safari Browser in next few days.

eScan Advisory:

  • Update security patches regularly: It is very critical to keep your mobile device fully updated. Now that the vulnerabilities have been discovered which can be exploited using Javascript, updating the browsers as and when the new versions are made available, would be the best defense for your mobile.
  • Desktop/Servers: Ensure that the installed Antivirus has enabled the registry key on Windows Machines, as mandated by Microsoft, as this would ensure that Antivirus has tested and is compatible with the patches provided by Microsoft.
  • Be cautious while downloading applications: Avoid installing applications from the internet. Use the Google Playstore or App store as provided in the mobile device.
  • Ensure Backup: Always keep a backup of the data on the mobile device before formatting the device.
  • Upgrade your device:  Many a times mobile devices do not get updates after the software and hardware have become the old. The companies keep upgrading the versions of the mobile device with the latest security patches applied.
Share Your Views - post Your Comments Below

DT encourage Readers to go for verification process for security reasons.

Max Characters 1000.

We request you not to post comments that are obscene, libellous, slanderous or in flammatory, and do not indulge in personal attacks, name calling or inciting hatred against any community. Any offensive comments will not be published and will be forwarded to cyber crime department.

Posted Comments
There are no comments yet.