Initial thoughts re: Spectre and Meltdown
There has been a lot of news about the Spectre and Meltdown vulnerabilities in the past few business days, and we've been working dilligently behind the scenes with our vendors on these issues. We are also working on a more comprehensive response to the threats, but in the interim, the following are a couple of important points to keep in mind:
- Right now, both Spectre and Meltdown are just that: Vulnerabilities. They are NOT active exploits or descriptions of a virus, malware, or other imminent danger.
- There's a LOT of FUD (Fear, Uncertainty, Doubt) out there, and a lot of conflicting information. If you are looking for more information, we've found this article in Wired is probably the best high-level and balanced description of the whole debacle: https://www.wired.com/story/meltdown-and-spectre-vulnerability-fix/
More to come...