{"id":13547,"date":"2018-01-10T15:46:08","date_gmt":"2018-01-10T15:46:08","guid":{"rendered":"https:\/\/www.dfi.ch\/important-flash-news-2\/"},"modified":"2022-09-01T13:56:18","modified_gmt":"2022-09-01T13:56:18","slug":"important-flash-news-2","status":"publish","type":"post","link":"https:\/\/www.cheops-technology.ch\/en\/important-flash-news-2\/","title":{"rendered":"Important Flash news"},"content":{"rendered":"\t\t
\n\t\t\t\t\t\t
\n\t\t\t\t\t\t
\n\t\t\t\t\t
\n\t\t\t
\n\t\t\t\t\t\t
\n\t\t\t\t
\n\t\t\t\t\t\t\t\t\t

<\/p>

Critical vulnerabilities in AMD, ARM and Intel processors<\/h4>

The beginning of this year has been marked by the discovery of two highly critical vulnerabilities in the processor architecture of three vendors, AMD, ARM and Intel.<\/p>

<\/p>

WHICH SYSTEMS ARE AFFECTED?<\/h4>

These flaws are present in almost all IT equipment (PCs, laptops, servers, clouds, smartphones, etc.) from the main vendors, such as Microsoft, Apple and Samsung. The impacted processors concern the most recent processors of the above-mentioned brands but also processors dating back to 1995. The attack surface is therefore very large for malicious actors and represents a great opportunity for them.<\/p>

<\/p>

WHAT ARE THE RISKS?<\/h4>

The flaws in question have been named Meltdown and Spectre. These two hardwares flaws could allow an attacker to retrieve sensitive information that is not supposed to be accessible by the user environment such as passwords from your browser or password manager.<\/p>

<\/p>

HOW TO REACT TO THIS ATTACK ?<\/h4>

DFi is in the process of applying the various patches in order not to expose its customers and its entire infrastructure to malicious actions. Even if the public attacks available to date are still limited, it is also essential that each customer updates the operating systems of their virtual servers with the patches which follow in the appendix. These will be automatically applied for customers who have delegated the management of the operating system to DFi.<\/p>

<\/p>

In addition, the customers of DFi’s Security Operations Center (SOC)<\/a> benefit from a proactive detection of attempts to exploit these flaws as well as an appropriate response enabling the threat to be quickly contained.<\/strong><\/p>

DFi encourages you to always keep your machines and software up to date in order to reduce the attack vectors.<\/strong> Indeed, the majority of attacks to date use vulnerabilities that are several years old, hence the need to apply patches as soon as they are published.<\/p>

SECURITY FLAW REFERENCES:<\/h4>

For more information refer to the following CVEs:<\/p>