#brian krzanich

[macdailynews]

Intel discloses new 'Variant 3a' and 'Variant 4' Spectre-like chip flaw vulnerabilities

Intel discloses new ‘Variant 3a’ and ‘Variant 4’ Spectre-like chip flaw vulnerabilities

Intel has released “INTEL-SA-00115,” the latest information on Intel product security or lack thereof.

Here it is, verbatim:

Summary:

Security researchers identified two software analysis methods that, if used for malicious purposes, have the potential to improperly gather sensitive data from multiple types of computing devices with different vendors’ processors and operating systems.

View On WordPress

[macdailynews]

Germany calls on chip and hardware makers to tackle processor flaws

Germany calls on chip and hardware makers to tackle processor flaws

“Germany’s federal cyber agency called on chip and hardware-makers to address new vulnerabilities discovered in computer central processing units, but said no complete fix was possible at the moment,” Reuters reports. “The BSI agency said its analysis showed the new flaws, dubbed Spectre-Next Generation, resembled the Meltdown and Spectre bugs discovered in January and could allow attackers to…

View On WordPress

[macdailynews]

How beleaguered Intel fell so far behind

How beleaguered Intel fell so far behind

Apple still makes Macs with Intel chips, but nobody really wants them. They’re the past, not the future. Even Apple’s entry-level, first-crack M1 chip runs rings around Intel’s big, slow, and hot offerings. (See: M1 benchmarks prove Apple Silicon outclasses nearly all Intel Macs.) When Apple unveils the M2, things will go from embarrassing to ugly for Intel. When Apple officially announced the…

View On WordPress

[macdailynews]

How to fully protect your Mac against Zombieland bug, and how badly the fix affects performance

How to fully protect your Mac against Zombieland bug, and how badly the fix affects performance

“Want to protect your Mac against the Zombieland (MDS) bug?” Adrian Kingsley-Hughes reports for ZDNet. “According to Apple, becoming fully protected is not as simple as installing a patch.”

“Step one, however, is to install the latest updates, which are MacOS 10.14.5 for systems running Mojave, and Security Update 2019-003 High Sierra and Security Update 2019-003 Sierra for Macs running older…

View On WordPress

[macdailynews]

These Macs may be unable to be patched for future vulnerabilities similar to 'ZombieLoad'

These Macs may be unable to be patched for future vulnerabilities similar to ‘ZombieLoad’

[cfsp key=”getamac.jpg”]”Several pre-2011 Macs could still be vulnerable to ‘ZombieLoad’-like security exploits, and Apple can’t fix that because Intel won’t release the necessary microcode updates,” William Gallagher reports for AppleInsider.

“While ‘ZombieLand’ itself will not affect these machines, because of the particular attack vector, Apple cannot fully patch against other such…

View On WordPress

[macdailynews]

How to protect your Mac from Intel CPU's Microarchitectural Data Sampling (MDS) vulnerabilities

How to protect your Mac from Intel CPU’s Microarchitectural Data Sampling (MDS) vulnerabilities

[cfsp key=”getamac.jpg”]Intel has disclosed vulnerabilities called Microarchitectural Data Sampling (MDS) that apply to desktop and notebook computers with Intel CPUs, including all modern Mac computers.

You can check if hyper-threading is enabled or disabled in the System Information app. Just choose Apple menu  > About This Mac, then click the System Report button. Then select Hardware in the…

View On WordPress

[macdailynews]

New secret-spilling flaw affects almost every Intel chip since 2011; Apple to release patches today

New secret-spilling flaw affects almost every Intel chip since 2011; Apple to release patches today

”Security researchers have found a new class of vulnerabilities in Intel chips which, if exploited, can be used to steal sensitive information directly from the processor,” Zack Whittaker reports for TechCrunch. “The bugs are reminiscent of Meltdown and Spectre, which exploited a weakness in speculative execution, an important part of how modern processors work… Both Meltdown and Spectre leaked…

View On WordPress

[macdailynews]

Researchers reveal new 'Spoiler' vulnerability in all Intel Core processors

Researchers reveal new ‘Spoiler’ vulnerability in all Intel Core processors

”A function of Intel’s processors dealing with speculative execution has another vulnerability that affects all Intel-based computers including Apple’s Mac, researchers have revealed, with ‘Spoiler’ potentially allowing an attacker the ability to view the layout of memory, and in turn potentially access sensitive data stored in those location,” Malcolm Owen reports for AppleInsider.

View On WordPress