2018 started with the news of Meltdown and Spectre, while not making a splash in the mainstream news, it has been front and centre for IT and tech publications. As most know by now, security researchers found design flaws which enable access to sensitive information across electronic devices including (but not limited to) servers; mobiles and laptops. 

Overview

A new set of processor (CPU) vulnerabilities, known collectively as Meltdown and Spectre, have become public.  These vulnerabilities take advantage of the way that modern processors execute code in order to speed up performance which can lead to information leakage between applications, users, etc.  

The vulnerabilities impact on almost all Operating Systems and hypervisors in some way. Including most modern processors from Intel, AMD and ARM, and have existed for at least twenty years without discovery.

At Memset, maintaining a really strong SSH (Secure Shell) and TLS (Transport Layer Security) configuration and cipher set is something that we pride ourselves on. 

The new General Data Protection Regulation (GDPR) will go live on 25th May 2018, bringing with it new mandatory data protection processes and mechanisms, new rights for UK citizens, new executive responsibilities and a punishing set of punitive measures.

Memset Security have noticed an increase in SMB-related compromises on Windows servers with SMB (Port 445) open to the public. This has been as a result of the alleged NSA-related Shadow Broker exploit kit leaks.

Cyber security breaches have become an endemic problem in modern society and business, from the likes of huge public incidents at Sony and T-Mobile, through critically impacted SMEs to individual people suffering life-changing cybercrime attacks and personal fraud.

Our Head of Security, Thomas Owen, discusses the data protection landscape in advance of Data Protection Day on January 28th 2017.

With just 16 months left to become compliant with the General Data Protection Regulation (GDPR), organisations should be in the full swing of making sure their systems and processes will comply by May next year.

Memset has become a Corporate Sponsor of Security BSides Athens, part of the world’s leading community-driven framework of security events, helping researchers, professionals and InfoSec enthusiasts to come together and exchange knowledge.