-
Patch Lady – How to update Win10 to fix Spectre, Meltdown and other side channel vulnerabilities
Patch Lady Susan Bradley’s latest column in CSOOnline:
In January 2018, security news media was abuzz over a new class of vulnerability called side channel vulnerabilities. Spectre, Meltdown and Foreshadow are some of the best known. They exploit weaknesses in speculative execution in microprocessors to leak unauthorized information. Side channel vulnerabilities allow attackers to bypass account permissions, virtualization boundaries and protected memory regions.
Patching these vulnerabilities is not easy. They are mitigated by a combination of patches from both the chipset vendor and the operating system provider. Worse, there is often a noticeable performance hit after installing these updates…
Windows servers in particular need specific guidance as most of the protections are not enabled by default.
If you’re running a server that’s potentially at risk, it would behoove you to read this article.