Microsoft issues emergency Windows update for processor security bugs

[Eugene]

Source: The Verge

Microsoft issues emergency Windows update for processor security bugs

By Tom Warren@tomwarren Jan 3, 2018, 4:41pm EST

Microsoft is issuing a rare out-of-band security update to supported versions of Windows today. The software update is part of a number of fixes that will protect against a newly-discovered processor bug in Intel, AMD, and ARM chipsets. Sources familiar with Microsoft’s plans tell The Verge that the company will issue a Windows update that will be automatically applied to Windows 10 machines at 5PM ET / 2PM PT today.

The update will also be available for older and supported versions of Windows today, but systems running operating systems like Windows 7 or Windows 8 won’t automatically be updated through Windows Update until next Tuesday. Windows 10 will be automatically updated today.

While Microsoft is quickly addressing the issues, the fixes will also rely on firmware updates from Intel, AMD, or other vendors that are rolling out. Some anti-virus vendors will also need to update their software to work correctly with the new patches, as the changes are related to Kernel-level access.

The firmware updates and software patches could cause some systems to run slower. Sources familiar with the situation tell The Verge that Intel processors that are based on Skylake or newer architecture won’t see a significant performance degradation. However, older processors could slow down more significantly due to the firmware and software updates.

-snip-

Read more: https://www.theverge.com/2018/1/3/16846784/microsoft-processor-bug-windows-10-fix

[teach1st]

1. Your anti-virus/malware has to be compatible with the Windows Update

https://support.microsoft.com/en-us/help/4072699/important-information-regarding-the-windows-security-updates-released

Microsoft has identified a compatibility issue with a small number of anti-virus software products.

The compatibility issue is caused when anti-virus applications make unsupported calls into Windows kernel memory. These calls may cause stop errors (also known as blue screen errors) that make the device unable to boot. To help prevent stop errors caused by incompatible anti-virus applications, Microsoft is only offering the Windows security updates released on January 3, 2018 to devices running anti-virus software from partners who have confirmed their software is compatible with the January 2018 Windows operating system security update.

If you have not been offered the security update, you may be running incompatible anti-virus software and you should follow up with your software vendor.

Microsoft has been working closely with anti-virus software partners to ensure all customers receive the January Windows security updates as soon as possible

I can't vouch for the accuracy of this list of compatible anti-malware programs:

https://docs.google.com/spreadsheets/d/184wcDt9I9TUNFFbsAVLpzAtckQxYiuirADzf3cL42FQ/htmlview?sle=true#gid=0

[teach1st]

2. PS: I think computer security companies are moving fast on this

The two companies whose products I use on my computer both put out compatible updates today.