Posts

Showing posts from 2018

Checking Systems for Meltdown & Spectre Vulnerabilities

Image
On Wednesday, January 3rd 2018 Google Project Zero and Intel Security announced Spectre (CVE-2017-5715) & Meltdown (CVE-2017-5754). They affect all Operating Systems running on most industry processors regardless if it's physical or virtual. If you want more information about the vulnerabilities and how they can be exploited be sure to review the links in the reference section at the end of this blog post. Microsoft Security Response Center released a handy Powershell module tool called SpeculationControl  that you can use to verify if any of your Windows systems are vulnerable to these exploits. If you have Powershell 5.x (which you should) then you can easily install the Powershell module just as you would any other module. Install-Module -Name SpeculationControl The module only has a single command in it called Get-SpeculationControlSettings. When you run this command it will verify and provide an easy to read summary for you that is color coded and...