Authored by a Symantec employee
Recently, two critical vulnerabilities were discovered in modern processors.1,2 Dubbed “Meltdown” and “Spectre,” these processor chip vulnerabilities are found on personal computers, mobile devices, and in the cloud.
These hardware vulnerabilities can potentially allow programs to steal data that is currently being processed on the computer’s chip. While programs are typically not permitted to read data from other programs, a malicious program can exploit Meltdown and Spectre to access data stored in the memory of other running programs. This might include passwords stored in a password manager or browser, personal photos, emails, instant messages and even documents containing personal information.
How to help protect against these vulnerabilities
Norton can help users protect against some instances of this threat. If you run into any issues installing patches, you should make sure your Norton product definitions are up to date first, then apply operating system patches immediately afterwards. Updates have already been released for Microsoft Windows, Apple macOS, and Linux to patch Meltdown. Spectre is reportedly more difficult to patch but also more difficult to exploit. Work is underway by all parties to harden the software against any potential exploits
How to help protect cloud data
Since this flaw also affects the cloud, and cloud data is stored on a physical server that utilizes these processors, some of these systems could become vulnerable, as well. It is advised to check with the cloud storage provider to see if their systems are affected by this vulnerability, and if so, ask them what to do to help protect important data.
1 Graz University of Technology, “Meltdown and Spectre,” 2018.
2 Symantec Blog, “Meltdown and Spectre: chip vulnerabilities could facilitate memory leaks,” January 4, 2018.
Symantec Corporation, the world’s leading cyber security company, allows organizations, governments, and people to secure their most important data wherever it lives. More than 50 million people and families rely on Symantec’s Norton and LifeLock comprehensive digital safety platform to help protect their personal information, devices, home networks, and identities.
© 2017 Symantec Corporation. All rights reserved. Symantec, the Symantec Logo, the Checkmark Logo, Norton, Norton by Symantec, LifeLock, and the Lockman Logo are trademarks or registered trademarks of Symantec Corporation or its affiliates in the United States and other countries. Firefox is a trademark of Mozilla Foundation. Google Chrome is a trademark of Google, Inc. Mac, iPhone and iPad are trademarks of Apple Inc. Microsoft and the Windows logo are trademarks of Microsoft Corporation in the United States and/or other countries. The Android robot is reproduced or modified from work created and shared by Google and used according to terms described in the Creative Commons 3.0 Attribution License. Other names may be trademarks of their respective owners.