Microsoft is Helping Intel Distribute its Firmware Updates

Intel: Updates Will Make Chips "Immune" From New Security Vulnerabilities

Meltdown and Spectre have been two of the decade’s most talked about security vulnerabilities. There’s been so much news around these two security flaws, it’s almost getting impossible to keep track of all the latest updates. Intel, as one of the world’s largest chip makers, has been at the centre of all these updates. The company issued the first set of functional firmware updates for its affected systems last month.

And today, Microsoft is helping Intel roll out these firmware updates to their customers. Redmond has started deploying the functional microcode updates from Intel to Windows 10 Fall Creators Update machines with Skylake processors through the Microsoft Update Catalog today. It’s important to note that these updates aren’t automatically available via Windows Update and users would need to manually update their systems for now. Plus, the company is only issuing fixes for Skylake systems running the latest version of Windows 10, though it says it will continue to release patches for other systems as they become available from Intel.

Windows Intelligence In Your Inbox

Sign up for our new free newsletter to get three time-saving tips each Friday — and get free copies of Paul Thurrott's Windows 11 and Windows 10 Field Guides (normally $9.99) as a special welcome gift!

"*" indicates required fields

This field is for validation purposes and should be left unchanged.

“We continue to work with industry partners on further mitigations and tools to help protect against the Spectre and Meltdown vulnerabilities. As always, we emphasize the importance of keeping your devices up to date for both Windows security and feature updates. Windows 10 version 1709, the Fall Creators Update, is the most secure version of Windows and is fully available for all devices,” the company said in a blog post.

Tagged with

Share post

Please check our Community Guidelines before commenting

Conversation 23 comments

  • Stooks

    01 March, 2018 - 2:17 pm

    <p>My prediction is this won't end well.</p><p><br></p><p>I am glad my only Windows PC is a gaming desktop with a Ryzen/AMD chipset. If AMD goes this route it will be a Linux box real quick.</p>

    • lvthunder

      Premium Member
      01 March, 2018 - 3:58 pm

      <blockquote><a href="#249809"><em>In reply to Stooks:</em></a></blockquote><p>What are you talking about? AMD issues these patches just like Intel does. Microsoft will update them both just like Linux does. Why do you think Linus was so upset?</p>

      • Martin Pelletier

        Premium Member
        01 March, 2018 - 8:12 pm

        <blockquote><a href="#249858"><em>In reply to lvthunder:</em></a></blockquote><p>Not for Spectre no. </p>

    • Martin Pelletier

      Premium Member
      01 March, 2018 - 8:10 pm

      <blockquote><a href="#249809"><em>In reply to Stooks:</em></a></blockquote><p>It will since we still have no Spectre fix for AMD system. I keep using InSpectre after each bios update from my board maker. And I still see that I am vulnerable to Spectre bug. It is false to think that my AMD is protected at the moment. </p><p><br></p><p>I don't know what they are waiting for. Intel did screw up, but they are in the way to really fix it before AMD. </p>

  • Winner

    01 March, 2018 - 3:07 pm

    <p>Well given that the only automatic updating across most Intel machines is Windows Update, that kind of makes obvious sense.</p>

  • jlmerrill

    01 March, 2018 - 3:16 pm

    <p>Is i5-5200 a 5th generation?</p>

  • harmjr

    Premium Member
    01 March, 2018 - 3:36 pm

    <p>This seems like a no brainier. Why hasn't MS been doing this all along? BTW MS dont give me no BS. Patch all systems. Help Intel, AMD and the hardware makers. This is what you should be doing with your time then adding new freaking features like Timelines and Tab Programs…</p>

    • peterh_oz

      02 March, 2018 - 9:28 am

      <blockquote><a href="#249848"><em>In reply to harmjr:</em></a></blockquote><p>Read again :</p><p>Microsoft "will continue to release patches for other systems <em>as they become available from Intel</em>" </p><p><br></p><p>They can't release something that doesn't exist. </p>

  • Username

    01 March, 2018 - 4:03 pm

    <p>Unfortunately, the vulnerability remediation Windows updates aren’t benign.</p><p>I’ve lost ability to start my Total Media Theatre v5 since the updates. It was perfectly good software Blu-Ray player from a company that had since dropped the product so now unsuppoted.</p>

    • lvthunder

      Premium Member
      01 March, 2018 - 4:28 pm

      <blockquote><a href="#249860"><em>In reply to Username:</em></a></blockquote><p>So get Inspectre from grc.com and turn the patches on and off when you want to watch a blu-ray or find a replacement.</p>

      • Username

        02 March, 2018 - 12:08 am

        <blockquote><a href="#249865"><em>In reply to lvthunder:</em></a></blockquote><p><br></p><p>Thank you! Will try.</p><p>[Update]</p><p>Tried, didn't help.</p>

    • MikeGalos

      01 March, 2018 - 5:16 pm

      <blockquote><a href="#249860"><em>In reply to Username:</em></a></blockquote><p>Yet another reason to not use unsupported products.</p>

      • Username

        02 March, 2018 - 4:46 am

        <blockquote><a href="#249873"><em>In reply to MikeGalos:</em></a><span class="ql-cursor"></span> Yet another reason to not use unsupported products.</blockquote><p><br></p><p>Exactly, Windows and Sandy Bridge is supported… So, Microsoft and Intel should fix their sh!t without negatively impacting me.</p>

  • StevenLayton

    02 March, 2018 - 2:47 am

    <p>How would a normal user know a update was available? Does Windows prompt them one is available and point them in the right direction?</p>

    • StevenLayton

      02 March, 2018 - 12:42 pm

      <blockquote><a href="#249943"><em>In reply to StevenLayton:</em></a><em>lol, which numpty downvoted me for asking a sensible question? Gotta love the Internet!</em></blockquote><blockquote><br></blockquote><p><em>still don’t understand how a normal user knows how to download it, or even that they need it. Mention Spectre or Meltdown to my Mum, she assumes I’m talking James Bond!</em></p><p><br></p>

  • Waethorn

    02 March, 2018 - 5:55 pm

    <p>I think the reason for the manual install is because anybody can edit the registry keys that antivirus software is supposed to, in order for the patches to be installable. There are no real security checks for that. It's a piss-poor implementation IMO.</p><p><br></p><p>A piece of malware could easily check to see if the reg key is not marked to enable support of the update, then enable it anyway, and download the update to bork the computer. This is a lack of security in a security check for a security update. Only Microsoft would screw this up this badly.</p>

  • Vic116

    02 March, 2018 - 7:46 pm

    <p>So what happens if you install Microsoft's firmware update and your PC vendor's BIOS update with the same firmware changes that addresses the same issue? Hopefully the microcode is exactly the same and nothing bad happens.</p>

  • Siv

    04 March, 2018 - 6:51 am

    <p>I would be very cautious about applying any updates from MS or Intel after the fiascos both companies made in January and February. KB407588 effectively bricking PCs by disabling the keyboard and mouse drivers and Intel's patches literally bricking PCs with AMD processors. I appreciate the attempts to protect their customers but if they brick your PC then you'd have been better leaving the patches and taking the risk you might never get hit by the malware. </p><p><br></p><p>I am really concerned that both companies have lost the ability to do proper testing.</p>

  • Dorm

    04 March, 2018 - 9:24 am

    <p>What happens if my PC is not an OEM machine and I built it?</p><p>How am I expected to get these update automatically? (beside getting it through the catalog)</p>

Windows Intelligence In Your Inbox

Sign up for our new free newsletter to get three time-saving tips each Friday

"*" indicates required fields

This field is for validation purposes and should be left unchanged.

Thurrott © 2024 Thurrott LLC