Fallout from flawed fixes for the Meltdown and Spectre microprocessor firmware vulnerabilities continues as Microsoft released a second emergency patch this month for Windows: this time, to deactivate Intel's buggy update for one of the Spectre issues.
Microsoft late Friday issued an out-of-band update that disables the mitigation patch for the branch target injection flaw (CVE-2017-5715), aka Spectre variant 2. Intel last week revealed that this firmware update caused spontaneous reboots and other system problems, and called for customers and OEMs to halt installation of patches for its Broadwell and Haswell microprocessors.
Posted from an article on DarkReading:
https://www.darkreading.com/risk/microsoft-issues-emergency-patch-to-disable-intels-broken-spectre-f...
Scott Andersen, PMP, CISSP
Security Services Chief / ISSM
Accenture Federal Services
Security and Intelligence Directorate (S&ID)
(703) 457-5661
(571) 758-7751
5155 Parkstone Dr, Chantilly, VA 20151
"Si vis pacem, para bellum"
