The Meltdown-Spectre Exploits: Lock-down your Servers, Update Cloud Instances

The report summarizes the critical Meltdown and Spectre speculative-execution vulnerabilities (CVE-2017-5753, CVE-2017-5715, CVE-2017-5754) that can allow unauthorized cross-process and cross-privilege memory reads on many modern CPUs (Intel, AMD, ARM); it highlights elevated risk for virtualized and cloud hosts, cites the researchers who discovered the issues, and recommends following cloud provider and OS vendor patching guidance.