Intel’s latest CPUs are vulnerable to a security flaw that allows thieves to crack BitLocker encryption, according to researchers. The flaw is called " Spectre “, and it affects the Intel Xeon E5-2600 v3 and E5-2650 v3 processors. It’s possible to exploit this vulnerability by running a specially crafted application on the processor, and then allowing the application access to sensitive data. BitLocker is a security feature of many laptops and desktops, and it helps protect data from being accessed by unauthorized individuals. If you’re using an Intel CPU, be sure to update your firmware as soon as possible so that you’re not vulnerable to this attack.
The affected chips are the Intel Pentium, Celeron, and Atom CPUs on the Apollo Lake, Gemini Lake, and Gemini Lake Refresh platforms. These chips are found in lower-end desktops and laptops, so if you own one of these, you’ll want to be extra watchful over your device.
As mentioned, the attacker needs to have physical access to the computer, meaning they can’t execute the malicious exploits remotely. But if someone does manage to steal your laptop, they can get around Bitlocker, trusted platform modules, anti-copying restrictions, and so on. Meaning that someone can get around the security there to protect your stuff.
According to Ars Technica, which has all the technical details of the exploit if you’re interested, the person only needs physical access to your computer for about 10 minutes, which is plenty of time if they’ve actually stolen or found your laptop.
Researcher Mark Ermolov, who is part of the team that found the vulnerability, spoke about the real risk of this exploit:
There’s currently no evidence that the bug has been exploited in the wild yet, and as long as you have control over your laptop, you shouldn’t have anything to worry about. Thankfully, there’s an update, which Intel says “that users of affected Intel Processors update to the latest version provided by the system manufacturer that addresses these issues.”
If you have one of the processors listed on this page, you should install the UEFI BIOS update available from OEMs or motherboard manufacturers to ensure you’re protected, especially if you have lots of privileged information on your PC.
RELATED: How to Check Your BIOS Version and Update it
