Remediation Update on the Spectre and Meltdown Vulnerabilities

In our previous February newsletter, we sought to spread awareness regarding 2 new security vulnerabilities, known as Spectre and Meltdown, which affect modern computer processors used by all operating systems.  We also informed you that ITS technical staff had begun to test and apply firmware updates to all affected Pace computer hardware, in order to prevent any potential exploitation of the vulnerabilities in our equipment.

As of now, the Meltdown vulnerability has been mitigated for all Pace servers, computers, and laptops through the ongoing monthly Windows Updates cycle.  The Spectre vulnerability is being addressed separately as follows:

  • Beginning in mid-March and over the next several months, ITS is applying approved firmware updates for Pace Windows desktops.  The required updates are being applied overnight, similar to the way our regular monthly Windows Updates work, and computers will restart automatically after the updates are applied.  Therefore, we remind faculty and staff to please make sure to save all your work each day before you leave your office.
  • For Pace-owned mobile devices – such as Windows laptops, Macbooks, and smartphones – a separate communication has either been sent or will be sent soon to those particular users with additional steps they may need to take in order to update their devices.

As a reminder, if you own any personal computer devices, we strongly recommend that you check with your respective computer/device vendor to learn how to best protect yourself and your personal equipment from the Spectre and Meltdown security vulnerabilities.