--- title: "Meltdown and Spectre Explained: Vulnerabilities, Patches and Protection" description: Learn about the recently discovered Spectre and Meltdown vulnerabilities. This page will be updated as more information becomes available. image: https://marketing.pinecc.com/hubfs/Logo.jpg --- - [MT Cybersecurity Report](http://www.pinecc.com/montana-cyber-security-report) - [Technology News & Blog](https://marketing.pinecc.com/blog) - [Partners](http://www.pinecc.com/partners) - [Careers](http://www.pinecc.com/pine-cove-careers) [![Pine Cove Consulting](https://marketing.pinecc.com/hs-fs/hubfs/Website/pcc_logo_lrg_color_transparent.png?width=576&height=288&name=pcc_logo_lrg_color_transparent.png "Pine Cove Consulting")](http://www.pinecc.com) - Solutions - [Cybersecurity](http://www.pinecc.com/cyber-security) - [Infrastructure](http://www.pinecc.com/infrastructure) - [Communication](http://www.pinecc.com/communication) - [Physical Security](http://www.pinecc.com/physicalsecurity) - [Student Safety](http://www.pinecc.com/student-safety) - [User Security](http://www.pinecc.com/user-security) - IT Services - [Budgeting/Sustainability Planning](http://www.pinecc.com/budgeting) - [Support Services](http://www.pinecc.com/support) - About Us - [History](http://www.pinecc.com/about) - [Our Team](http://www.pinecc.com/team) - [Community Involvement](http://www.pinecc.com/community) - [Case Studies](http://www.pinecc.com/casestudies) [![Contact Us](https://hubspot-no-cache-na2-prod.s3.amazonaws.com/cta/default/164718/216a4af8-6258-4cec-943b-457d7f5f275e.png)](https://hubspot-cta-redirect-na2-prod.s3.amazonaws.com/cta/redirect/164718/216a4af8-6258-4cec-943b-457d7f5f275e) # Meltdown and Spectre Explained: Vulnerabilities, Patches and Protection [![Jace Holyoak](https://marketing.pinecc.com/hubfs/Website/Team/Cartoons/PCC_06-JaceHolyoak_HQ.jpg) Jace Holyoak](https://marketing.pinecc.com/blog/author/jace-holyoak) ![Topic](https://cdn2.hubspot.net/hubfs/685080/HubSpot_Template_Marketplace/Cobalt%20Modular/icons/co-topic.svg) [Cybersecurity](https://marketing.pinecc.com/blog/topic/cybersecurity) ![Date Published](https://cdn2.hubspot.net/hubfs/685080/HubSpot_Template_Marketplace/Cobalt%20Modular/icons/co-calendar.svg) Jan 5, 2018 12:02:09 PM ![Reading Time](https://cdn2.hubspot.net/hubfs/685080/reading-time.svg) Reading Time: 2 min Share: [ ](https://www.facebook.com/share.php?u=https://marketing.pinecc.com/blog/meltdown-and-spectre-explained-vulnerabilities-patches-and-protection) [ ](https://www.linkedin.com/shareArticle?mini=true&url=https://marketing.pinecc.com/blog/meltdown-and-spectre-explained-vulnerabilities-patches-and-protection) [ ](https://twitter.com/intent/tweet?original_referer=https://marketing.pinecc.com/blog/meltdown-and-spectre-explained-vulnerabilities-patches-and-protection&url=https://marketing.pinecc.com/blog/meltdown-and-spectre-explained-vulnerabilities-patches-and-protection&source=tweetbutton&text=Meltdown%20and%20Spectre%20Explained:%20Vulnerabilities,%20Patches%20and%20Protection) ![Logo](https://marketing.pinecc.com/hubfs/Logo.jpg) ![Spectre and Meltdown ](https://marketing.pinecc.com/hs-fs/hubfs/Logo-2.jpg?width=800&name=Logo-2.jpg "Spectre and Meltdown ")In the world of cyber-security news, 2018 is off to an impressive start. Just a few days into this new year, computer chip flaws have been discovered to be present in billions of devices. Two major flaws have been discovered in a large portion of the world's processors. The Meltdown and Spectre vulnerabilities are [present in modern processors](http://money.cnn.com/2018/01/03/technology/computer-chip-flaw-security/index.html) that are used to perform "speculative execution." That means that the processors are designed to execute and rapidly access multiple areas of the memory at the same time. The data that should be protected has been found to be vulnerable as the processor queues up information. ## Spectre and Meltdown Deconstructed These vulnerabilities are complicated but impact everyone with any sort of computing device -- desktops, laptops, smartphones, and cloud servers. So let's deconstruct these vulnerabilities. First, Spectre. According to [researchers](https://meltdownattack.com/), Spectre breaks the isolation between different applications. It allows an attacker to trick error-free programs, which follow best practices, into leaking their secrets. In fact, the safety checks of said best practices actually increase the attack surface and may make applications more susceptible to Spectre. Spectre opens up the possibility of attackers accessing sensitive data stored in memory such as webpage history and passwords. Spectre affects almost every system including Desktops, Laptops, Cloud Servers, and Smartphones. Spectre has been verified on Intel, AMD, and ARM processors. Meltdown, on the other hand, breaks the most fundamental isolation between user applications and the operating system. This attack allows a program to access the memory, and thus also the secrets, of other programs and the operating system. Meltdown affects every single Intel processor since 1995 (except Intel Itanium and Intel Atom before 2013). The difference between the two is that Meltdown essentially melts the security boundary normally enforced by hardware while Spectre tricks applications into accessing arbitrary locations in their memory. Shortly after the announcement of Spectre and Meltdown, [Apple](https://support.apple.com/en-us/HT208394) confirmed that all Mac systems and and iOS devices are affected. ## What can you do about it Unfortunately, there is really nothing you can do about either Meltdown or Spectre until patches are released for the operating system. The best thing you can do is familiarize yourself with the two major CPU bugs and download the patches as they are released. [Intel](https://wccftech.com/intel-patch-meltdown-spectre/) is preparing to release a Spectre and Meltdown patch for 90% of processors introduced in the last 5 years by the end of next week. Apple, Google, AMD, and others are also expected to release patches in the coming days. This post will be updated as patches are released to provide you the most current information and security. For more information visit: [meltdownattack.com](https://meltdownattack.com/) which will continue to be updated by the researchers that originally discovered the vulnerabilities. [Next Washakie School District Invests in Sophos Security](https://marketing.pinecc.com/blog/washakie-school-district-invests-in-sophos-security) [BLOG](https://marketing.pinecc.com/blog) [Previous Are your toys listening to you? Smart toy cyber-security concerns](https://marketing.pinecc.com/blog/are-your-toys-listening-to-you-smart-toys-pose-cyber-security-concerns) ### **You may also be Interested in the Following Blogs:** 6 November, 2024 ![author](https://cdn2.hubspot.net/hubfs/685080/author.png) [Eddie the Sasquatch](https://marketing.pinecc.com/blog/author/eddie-the-sasquatch) ##### [Our 5-Step Process](https://marketing.pinecc.com/blog/5-step-process) Pine Cove Consulting’s 5-step process ensures seamless Wi-Fi for institutions by optimizing performance, reliability, and long-term support. Through a strategic partnership with RUCKUS Networks, Pine Cove analyzed, designed, deployed, and continues to support... [Read more](https://marketing.pinecc.com/blog/5-step-process) 24 October, 2024 ![author](https://cdn2.hubspot.net/hubfs/685080/author.png) [Eddie the Sasquatch](https://marketing.pinecc.com/blog/author/eddie-the-sasquatch) ##### [Highlights from Verkada One 2024](https://marketing.pinecc.com/blog/highlights-from-verkada-one-2024) In October 2024, Denver was buzzing with the latest in physical security at the highly anticipated [Verkada One Conference](https://www.verkada.com/blog/announcing-verkadaone-2024/). This three-day event attracted over 1,600 attendees, including industry leaders, technology innovators, and key partners. Verkada didn’t... [Read more](https://marketing.pinecc.com/blog/highlights-from-verkada-one-2024) 16 October, 2024 ![author](https://cdn2.hubspot.net/hubfs/685080/author.png) [Eddie the Sasquatch](https://marketing.pinecc.com/blog/author/eddie-the-sasquatch) ![topic](https://cdn2.hubspot.net/hubfs/685080/topic.png) [Newsletter](https://marketing.pinecc.com/blog/topic/newsletter) ##### [Trail Report: It's Cybersecurity Awareness Month!](https://marketing.pinecc.com/blog/october-2024-trail-report) Welcome IT dwellers, it’s October and I’m here to tell you what’s new in the IT sphere. Here’s what’s been on my mind lately: - MFA - CISO job security concerns - Biometric access control [Read more](https://marketing.pinecc.com/blog/october-2024-trail-report) ## Follow Pine Cove On Social Media For news, satire, and information. [ ](https://www.facebook.com/Pinecoveconsulting) [ ](https://www.linkedin.com/company/pinecoveconsulting/) [ ](https://twitter.com/PINECC) [ ](https://www.youtube.com/user/Pinecoveconsulting) ![Screenshot 2023-02-16 at 1.11.58 PM](https://marketing.pinecc.com/hs-fs/hubfs/Screenshot%202023-02-16%20at%201.11.58%20PM.png?width=103&height=175&name=Screenshot%202023-02-16%20at%201.11.58%20PM.png "Screenshot 2023-02-16 at 1.11.58 PM") ![2022 VERKADA](https://marketing.pinecc.com/hs-fs/hubfs/2022%20VERKADA.png?width=500&height=500&name=2022%20VERKADA.png "2022 VERKADA") ![2022 MSP 500](https://marketing.pinecc.com/hubfs/2022%20MSP%20500.png "2022 MSP 500") ![2022 CRN 100](https://marketing.pinecc.com/hubfs/2022%20CRN%20100.png "2022 CRN 100") ![2021 SOPHOS PARTNER](https://marketing.pinecc.com/hubfs/2021%20SOPHOS%20PARTNER.png "2021 SOPHOS PARTNER") ![2021 CRN MSP](https://marketing.pinecc.com/hubfs/2021%20CRN%20MSP.png "2021 CRN MSP") **Products** --- - [Cyber Security](http://www.pinecc.com/cyber-security) - [Physical Security](http://www.pinecc.com/physicalsecurity) - [Network Infrastructure](http://www.pinecc.com/infrastructure) - [Communication](http://www.pinecc.com/communication) - [User Security](http://www.pinecc.com/user-security) - [Student Safety](http://www.pinecc.com/student-safety) **Services** --- - [Support Services](http://www.pinecc.com/support) - [IT Budgeting](http://www.pinecc.com/budgeting) **About Us** --- - [Contact Us](http://www.pinecc.com/contact) - [About Us](http://www.pinecc.com/about) - [Community Involvement](http://www.pinecc.com/community) - [Technology Leadership Program](http://www.pinecc.com/scholarship) - [Tech News & Blog](https://marketing.pinecc.com/blog) - [FAQ](http://www.pinecc.com/faq) - [Careers](http://www.pinecc.com/pine-cove-careers) Copyright © [Pine Cove Consulting](http://www.pinecc.com/) [](https://www.linkedin.com/company/pinecoveconsulting) [](https://www.facebook.com/Pinecoveconsulting) [](https://twitter.com/PINECC) [](https://www.youtube.com/user/Pinecoveconsulting) ```json { "@context" : "https://schema.org", "@type" : "BlogPosting", "author" : { "@type" : "Person", "name" : "Jace Holyoak", "url" : "https://marketing.pinecc.com/blog/author/jace-holyoak" }, "datePublished" : "2018-01-05T19:02:09.000Z", "headline" : "Meltdown and Spectre Explained: Vulnerabilities, Patches and Protection", "image" : [ "https://marketing.pinecc.com/hubfs/Logo.jpg" ], "mainEntityOfPage" : { "@id" : "https://marketing.pinecc.com/blog/meltdown-and-spectre-explained-vulnerabilities-patches-and-protection", "@type" : "WebPage" }, "publisher" : { "@type" : "Organization", "logo" : { "@type" : "ImageObject", "url" : "https://marketing.pinecc.com/hubfs/Website/pcc_logo_lrg_color_transparent.png" }, "name" : "Pine Cove Consulting" } } ```