Microsoft Releases Mitigations for Spectre-Like 'Variant 4' Attack

By Eduard Kovacs on June 13, 2018
 
Updates released by Microsoft on Tuesday for its Windows operating system add support for a feature that should prevent attacks involving the recently disclosed speculative execution vulnerability known as “Variant 4.”
 
Researchers from several organizations warned in January that processors from Intel, AMD, ARM and other companies are affected by vulnerabilities that allow malicious applications to bypass memory isolation mechanisms and gain access to sensitive data. The flaws are tracked as Spectre (Variant 1 - CVE-2017-5753 and Variant 2 - CVE-2017-5715) and Meltdown (Variant 3 - CVE-2017-5754).
 
Full Article.