Update on CPU Vulnerability

January 4, 2018 Andres Torrado, OneNeck Security Architect

CPU vulnerability

OneNeck IT Solutions, along with other technology companies across the country, have learned of a potential flaw that could allow hackers the opportunity to access portions of memory within your CPU processor.

Currently, there are no known exploits. Our team is actively investigating this matter and working closely with our vendors to understand the situation and formulate a strategy that protects our customers against this vulnerability.

For the best protection, please continue to use and follow good security practices that protect against malware and confirm your malware is fully up-to-date. In general, this will help protect against possible exploitation. For our managed services customers, rest assured, we are vigilantly monitoring your infrastructure and working to keep it safe.

We will provide an update tomorrow at 3:30 p.m. central, sooner if more information becomes available.

For additional information:

https://newsroom.intel.com/news/intel-responds-to-security-research-findings/

https://www.theregister.co.uk/2018/01/02/intel_cpu_design_flaw/

 

Update #2 on Meltdown and Spectre CPU vulnerability

January 4, 2017

OneNeck IT Solutions, along with other technology companies across the country, continues to evaluate the Meltdown and Spectre CPU vulnerably. There are no known exploits at this time.
 
We are working with our vendors to help protect our customer’s virtual infrastructure environments and are in the process of hardening our infrastructure with their guidance.
 
Operating System (OS) vendors are beginning to release some patches for this vulnerability. We are reviewing these patches as they’re released. We plan to follow our normal roll-out process for applying these updates. At this time it appears unsupported legacy operating systems will not be receiving a patch from vendors for this vulnerability.
 
Future updates will be provided, as appropriate. Please continue following security best practices against malware and reduce internet browsing from servers, as much as possible.
 
For additional information: https://meltdownattack.com/

Previous Article
Citizen-Centric Experience Drives Government Digital Change
Citizen-Centric Experience Drives Government Digital Change

Thanks to digital transformation initiatives in today’s modern organization, citizens are demanding similar...

Next Article
What to expect in Oracle Database 18c
What to expect in Oracle Database 18c

During Oracle Open World 2017, Larry Ellison announced Oracle Database 18c, nicknamed “World’s first Self-D...