waja / gist:8236ad04d8c24cc68abe1608983f807a

[Project Zero team at Google: Reading privileged memory with a side-channel](https://googleprojectzero.blogspot.de/2018/01/reading-privileged-memory-with-side.html) ## Desktop ### Browsers * https://support.google.com/faqs/answer/7622138#chrome * https://blog.mozilla.org/security/2018/01/03/mitigations-landing-new-class-timing-attack/ * https://blog.gpunktschmitz.de/381-firefox-automatisches-fuellen-von-login-forms-deaktivieren ### Microsoft #### Windows 10 * [KB4056892 (OS Build 16299.192)](https://support.microsoft.com/en-us/help/4056892/windows-10-update-kb4056892) ## Servers / Cloud * [Meltdown and Spectre kernel update per operating system](https://docs.ovh.com/fr/dedicated/meltdown-spectre-kernel-update-per-operating-system/) ### VMWare * https://lists.vmware.com/pipermail/security-announce/2018/000397.html ### KVM * https://twitter.com/olesovhcom/status/949214617510842369 ### Microsoft * [Microsoft: Guidance to mitigate speculative execution side-channel vulnerabilities](https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/ADV180002)