Cyber Risks · Cisco Talos

Meltdown and Spectre

Summary: Cisco Talos reported three new vulnerabilities affecting Intel, AMD, Qualcomm and ARM processors used by almost all computers, assigned CVE entries including Meltdown, which lets an attacker access kernel memory from user space. Talos said it had not observed exploitation in the wild but had seen publicly available proof-of-concept exploit code being developed, and it released Snort SIDs 45357-45368 covering the specific PoCs and sample code in the Spectre and Meltdown whitepapers.

What you should know: The flaws sit in processors used by almost all computers, and Talos notes its signatures may not catch every variant, so it still recommends installing OS and firmware patches - the detection layer alone is not a complete answer.

Read the original at Cisco Talos ↗

Topics
Zero-Days & Exploits
Related