No sooner had the industry moved away from last year's Meltdown and Spectre, as the users faced a new danger — ZombieLoad. At risk were the owners of computers with Intel processors. This vulnerability could allow attackers to remotely steal someone else's data. We tell you how to protect yourself from potential danger.
Intel confirmed the existence of ZombieLoad vulnerability and told that it consists of four errors in the microcode of processors. All personal computers and cloud servers are subject to hacking, built on Intel chips, released since 2011. This issue does not apply to devices with AMD processors.
The essence ZombieLoad is the implementation of the attack on the processor by feeding large amounts of information, which he is not able to handle. To prevent failure of the chip addresses to the microcode, performing the restart. One of the errors allows at this point to access all the data that was processed by the processor cores. In normal operation, applications only have access to their own data.
With ZombieLoad, attackers can find out which sites a user is viewing in real time, steal their passwords and access tokens from payment systems and take possession of other valuable information. However, to do this, a person needs to download the infected SOFTWARE to his computer and run it.
Apple, Google, Microsoft, Amazon, and other major corporations have already begun distributing updates protecting against ZombieLoad. Intel has also released appropriate patches for all affected processors. The company noted that included in the firmware fix will clear the buffer of CPU in case of overload, thus preventing the access of malware to the data of other apps.
To ensure the safety of the users of macOS should be updated to version 10.14.5 containing all necessary corrections. Microsoft has also released an appropriate patch for Windows users via Windows Update. If automatic updates installation is disabled on your computer, you should enable this option or download a new firmware version for Intel processors from a special Microsoft website.