Meltdown and Spectre vulnerabilities affect billions of devices
Authored by a Symantec employee
Recently, two critical vulnerabilities were discovered in modern processors.1,2 Dubbed “Meltdown” and “Spectre,” these processor chip vulnerabilities are found on personal computers, mobile devices, and in the cloud.
These hardware vulnerabilities can potentially allow programs to steal data that is currently being processed on the computer’s chip. While programs are typically not permitted to read data from other programs, a malicious program can exploit Meltdown and Spectre to access data stored in the memory of other running programs. This might include passwords stored in a password manager or browser, personal photos, emails, instant messages and even documents containing personal information.
How to help protect against these vulnerabilities
Norton can help users protect against some instances of this threat. If you run into any issues installing patches, you should make sure your Norton product definitions are up to date first, then apply operating system patches immediately afterwards. Updates have already been released for Microsoft Windows, Apple macOS, and Linux to patch Meltdown. Spectre is reportedly more difficult to patch but also more difficult to exploit. Work is underway by all parties to harden the software against any potential exploits
How to help protect cloud data
Since this flaw also affects the cloud, and cloud data is stored on a physical server that utilizes these processors, some of these systems could become vulnerable, as well. It is advised to check with the cloud storage provider to see if their systems are affected by this vulnerability, and if so, ask them what to do to help protect important data.
Isn't it time to upgrade your security?
Upgrading to new devices and software can often mean downgrading your privacy and security. It’s time to take your security seriously. Download the full version of Norton Security Deluxe free for 30 days, and test-drive it on up to 5 of your devices – PCs, Macs, smartphones or tablets.
Create an account today and be up and running in minutes.
1 Graz University of Technology, “Meltdown and Spectre,” 2018.
2 Symantec Blog, “Meltdown and Spectre: chip vulnerabilities could facilitate memory leaks,” January 4, 2018.
Disclaimers and references:
Symantec Corporation, the world’s leading cyber security company, allows organizations, governments, and people to secure their most important data wherever it lives. More than 50 million people and families rely on Symantec’s Norton and LifeLock comprehensive digital safety platform to help protect their personal information, devices, home networks, and identities.
Copyright © 2019 NortonLifeLock Inc. All rights reserved. NortonLifeLock, the NortonLifeLock Logo, the Checkmark Logo, Norton, LifeLock, and the LockMan Logo are trademarks or registered trademarks of NortonLifeLock Inc. or its affiliates in the United States and other countries. Firefox is a trademark of Mozilla Foundation. Android, Google Chrome, Google Play and the Google Play logo are trademarks of Google, LLC. Mac, iPhone, iPad, Apple and the Apple logo are trademarks of Apple Inc., registered in the U.S. and other countries. App Store is a service mark of Apple Inc. Alexa and all related logos are trademarks of Amazon.com, Inc. or its affiliates. Microsoft and the Window logo are trademarks of Microsoft Corporation in the U.S. and other countries. The Android robot is reproduced or modified from work created and shared by Google and used according to terms described in the Creative Commons 3.0 Attribution License. Other names may be trademarks of their respective owners.