Last year, Specter and Meltdown saw vulnerabilities, but researchers warned that this pair of shortcomings was just the beginning of something bigger. ZombieLoad is the latest vulnerability to exploit a similar type of attack.
There's not much to say about ZombieLoad that hasn't already been said, here's what you need to know . First and foremost, it affects almost all Intel processors manufactured since 2011. Secondly, since it directly affects the processor, it is OS-agnostic – this error is present on Windows, Mac, Chrome OS, Linux and quite a few other operating systems running on an Intel chip.
The good news? Most of the big players have already patched the vulnerability (or will come so soon). – Apple has a fix for every Mac and MacBook released since 2011, Mozilla makes sure Firefox is secure, Microsoft rolls a fix to Windows and Amazon uses a patch for the AWS. Google said that most Android devices are not vulnerable – you know, because most do not use Intel chips, but a patch has been developed and will need to be distributed by manufacturers. Affected Chrome OS devices are great to go from Chrome OS 74, but it can lead to some performance until the permanent solution becomes available in Chrome OS 75 as the temporary fix inactivated hyperthread.
Without becoming too technical, ZombieLoad does its thing by utilizing something called, get this, a zombie load. A zombie load contains clusters of data that the processor cannot, erm, process, so it must request microcode help to avoid crashes. The ZombieLoad vulnerability allows attackers to exploit this process to access data currently loaded into the processor's kernel in real time. Because the processor sees everything, you can imagine why this is such a problem – username, password, sensitive account information and the like are all potentially at risk here.
On the upside, scientists have only recently discovered this vulnerability and there is no evidence that it has been exploited in the world yet. Now that the word is out, however, it is safe to pique the interests of every wrong person with the know-how, so it is important that you make sure you are able to patch your devices. Install the updates, people! [TechCrunch, The Verge, Wired]
In other news
Disney buys Comcast's stake in Hulu, OnePlus officially announces 7 Pro, Google gets more ads, Facebook returns "Show as public" and more.
- Disney now has full control over Hulu: Disney is ready to buy Comcast's stake in Hulu and will take full control of streaming straight away. Nothing will change in terms of content from now on, as Comcast agreed to extend the licensing of NBCUniversal content to "late 2024." After that, however, we must see. [Ars Technica]
- OnePlus 7 Pro is official: It has an unbeatable 6.67-inch 90Hz QHD + screen with 93% screen-to-body ratio and pop-up self-camera, Qualcomm Snapdragon 855 CPU, up to 12GB of RAM , and other beastly specs. All for a starting price of $ 669. It's a monster. [OnePlus]
- New Google ads come: Google announced all sorts of new ads yesterday, mostly for the mobile. Google Search gets more intrusive ads, as does the Discover flow. Jippie? [The Verge]
- Facebook takes back "Show as public": Remember the Facebook feature of old who made it possible for you to see your profile the same as others saw it? Well, it'll come back – hopefully, it's safer this time around. [Engadget]
- AT&T will pull content from Netflix for its own sake: You ever lean back and think "man, if there were only 17 more streaming services with all other content!" Well, boy, do we have good news for you! AT&T switches up to start a streaming service, and when it does, you can say goodbye to things like Friends and The Office on Netflix. Good. [Android Police]
- Google pays some Pixel owners in a class action trial: The tire says the company knew that the original Pixel had a faulty microphone, but still they sold it anyway. Now, Google has to pay up to $ 500 to some users. All Pixel and Pixel XL units made before January 4, 2017 are covered. [The Verge]
- A new Mortal Kombat movie comes: Look, you might not care about this, but I'm already hyped. I need more live action Baraka. [Engadget]
Google combines and renames a lot of services in its latest shift. First of all, Google Trips, flights, hotel search and similar services that you probably didn't know Google offered will be a lone service called Trips. You can check it out now. Secondly, as previously rumored, Google Express becomes Google Shopping, and it integrates with Google Images, Discover and YouTube. It makes it even easier to buy things using Google Shopping. They come to you, Amazon. ! [The Verge, Android Police]