Thursday, January 4, 2018

Bad News on Computer Security Vulnerabilities Today

CWC Students and Staff:

You may be hearing or reading today (Thr Jan 4) extensive media coverage about a severe security vulnerability that was recently made public - actually TWO issues being dubbed "Meltdown" and "Spectre".  These vulnerabilities affect both Apple and Windows computers, and other devices as well.

The two major takeaways for you:
  1. CWC Tech staff are busy researching how to proceed and will act immediately once a best practice is identified.  We will take care of your CWC computers and online services as best we are able.
  2. For your own computers and other devices:  Keep your devices updated.  Several big players have already released patches that will address this, and many others are expected to do so quickly.
If interested in more information, I found this CNN Money news story - and the written article below the video player -  well informed:
http://money.cnn.com/2018/01/04/technology/spectre-meltdown-cpu-flaws-explainer/index.html

UPDATE:  Now there looks like there is a THIRD reported vulnerability - only on Apple devices:
      See:
IOHIDeous is a macOS zero-day for the New Year
by Michael Heller, Senior Reporter
A newly discovered macOS zero-day flaw called IOHIDeous affects all versions of Apple's desktop operating system and can allow for full system compromise
SECOND UPDATE;  A really excellent article on the meltdown and spectre mess:  From The Skimm https://theskimm.com/archive/2018-01-05

No comments:

Post a Comment