Microsoft Meltdown Patch Fatal Flaw – Work Ongoing

Windows Articles

How to install WordPress with Nginx on Ubuntu 20.04?

Hi, folks. In this post, we will help you install Wordpress with Nginx on Ubuntu 20.04. It's a lot easier than you...

Electron 9.0 available

News has arrived that many developers are going to love. And that is that Electron this great cross-platform application framework has released...

How to install SQLite on Ubuntu 20.04 / 18.04?

There is a wide variety of database managers today. Of all of them, MySQL continues to be the most prominent within open source. On...

Deploy a Jitsi Meet server with Docker

Hi, folks. In this very short tutorial, I will show you how to deploy a Jitsi Meet server using Docker. This indicates...

How to Create Apache Virtual Hosts on Ubuntu 20.04 /Debian 10.4

Maybe you want to run more then1 domain on the same Server, why buying another server while its possible to run...
Mel Khamlichi
Mel Khamlichihttp://www.osradar.com
Founder of Osradar, from Amsterdam Netherlands

Meltdown and Spectre were the biggest inventions of the security flaws to date. They simply shook the world of cyber security to the roots. These are caused by hardware issues of the modern chipsets. Microsoft has released patches for these bugs, but the patches itself are in danger now.

Recently, a serious vulnerability has been found in the Microsoft patch for Meltdown. For a quick reminder, meltdown removes the barrier of memory and allows access to other apps’ memory locations unauthorized. You can check out the original nature of Meltdown here.

According to Alex Ionescu, a security researcher from cyber-security firm Crowdstrike, the patch allowed bypassing the security barrier and take the advantage of the chipset flaws for stealing information. Almost all the Microsoft Windows 10 versions are infected with the vulnerability, except the latest Windows 10 Redstone 4 (v1803). It seems like Microsoft has fixed the vulnerability in the latest update.

Old Windows 10 systems are still running the bypass-able patch for Meltdown. Instead of backporting the update faster, Microsoft has released another new update for the Windows Host Computer Service Shim (hcsshim) library flaw (CVE-2018-8155) that allowed a hacker execute remote code in the vulnerable system. The updated version of the “hcsshim” is available on GitHub.

How to Stay Secured

If you’re a Windows 10 user, make sure to update to the latest version – v1803. Microsoft is already working with the backport updates. According to our assumption, the patch may arrive in May 2018 Patch Tuesday, but it’s just a speculation.

More articles

LEAVE A REPLY

Please enter your comment!
Please enter your name here

Latest article

How to install WordPress with Nginx on Ubuntu 20.04?

Hi, folks. In this post, we will help you install Wordpress with Nginx on Ubuntu 20.04. It's a lot easier than you...

Electron 9.0 available

News has arrived that many developers are going to love. And that is that Electron this great cross-platform application framework has released...

How to install SQLite on Ubuntu 20.04 / 18.04?

There is a wide variety of database managers today. Of all of them, MySQL continues to be the most prominent within open source. On...

Deploy a Jitsi Meet server with Docker

Hi, folks. In this very short tutorial, I will show you how to deploy a Jitsi Meet server using Docker. This indicates...

How to Create Apache Virtual Hosts on Ubuntu 20.04 /Debian 10.4

Maybe you want to run more then1 domain on the same Server, why buying another server while its possible to run...