Meltdown and Spectre vulnerabilities affect billions of devices
Authored by a Symantec employee
Recently, two critical vulnerabilities were discovered in modern processors.1,2 Dubbed “Meltdown” and “Spectre,” these processor chip vulnerabilities are found on personal computers, mobile devices, and in the cloud.
These hardware vulnerabilities can potentially allow programs to steal data that is currently being processed on the computer’s chip. While programs are typically not permitted to read data from other programs, a malicious program can exploit Meltdown and Spectre to access data stored in the memory of other running programs. This might include passwords stored in a password manager or browser, personal photos, emails, instant messages and even documents containing personal information.
How to help protect against these vulnerabilities
Norton can help users protect against some instances of this threat. If you run into any issues installing patches, you should make sure your Norton product definitions are up to date first, then apply operating system patches immediately afterwards. Updates have already been released for Microsoft Windows, Apple macOS, and Linux to patch Meltdown. Spectre is reportedly more difficult to patch but also more difficult to exploit. Work is underway by all parties to harden the software against any potential exploits
How to help protect cloud data
Since this flaw also affects the cloud, and cloud data is stored on a physical server that utilizes these processors, some of these systems could become vulnerable, as well. It is advised to check with the cloud storage provider to see if their systems are affected by this vulnerability, and if so, ask them what to do to help protect important data.
Isn’t it time to upgrade your security?
Upgrading to new devices and software can often mean downgrading your privacy and security. It’s time to take your security seriously. Download the full version of Norton Security Deluxe free for 30 days, and test-drive it on up to 5 of your devices – PCs, Macs, smartphones or tablets.
Create an account today and be up and running in minutes.
1 Graz University of Technology, “Meltdown and Spectre,” 2018.
2 Symantec Blog, “Meltdown and Spectre: chip vulnerabilities could facilitate memory leaks,” January 4, 2018.
Disclaimers and references:
Symantec Corporation, the world’s leading cyber security company, allows organizations, governments, and people to secure their most important data wherever it lives. More than 50 million people and families rely on Symantec’s Norton and LifeLock comprehensive digital safety platform to help protect their personal information, devices, home networks, and identities.
Copyright © 2018 Symantec Corporation. All rights reserved. Symantec, the Symantec Logo, the Checkmark Logo, Norton, Norton by Symantec, LifeLock, and the LockMan Logo are trademarks or registered trademarks of Symantec Corporation or its affiliates in the United States and other countries. Firefox is a trademark of Mozilla Foundation. Google Chrome and Android are trademarks of Google, LLC. Mac, iPhone and iPad are trademarks of Apple Inc. Microsoft and the Windows logo are trademarks of Microsoft Corporation in the United States and/or other countries. The Android robot is reproduced and/or modified from work created and shared by Google and used according to terms described in the Creative Commons 3.0 Attribution License. Other company names and product names are registered trademarks or trademarks of each company.