Intel Management Engine Security Flaw ..

It has been brought to my attention on the Zorin forum about a major security issue affecting Intel Processors and more specifically in relation to Intel's Management Engine which could prove to be a vulnerability for both Windows and GNU/Linux users who have Intel Processors issued from 2008 onwards:

https://www.wired.com/story/intel-management-engine-vulnerabilities-pcs-servers-iot/

https://www.intel.com/content/www/us/en/support/articles/000025619/software.html

https://thenextweb.com/security/2017/11/09/researchers-find-almost-every-computer-intel-skylake-cpu-can-owned-via-usb/

There is a detector tool supplied by Intel for you to check to see if you have the vulnerability. In respect of Hardware vendors, only Lenovo has provided a solution for theirs - so as usual it would appear that Intel is waiting on Hardware Vendors to clean up their rose manure.

Get the vulnerability detection tool from here:

https://downloadcenter.intel.com/download/27150

My MB vendor has already released a microcode fix and ME driver update...

I would advise anyone to check with their Motherboard / Computer manufacturer's website for an update..

Hi, Anyone with an Asus Motherboard should go to their site and go to the Product Page | Support then look for Drivers and download the ME Update Tool from that Page.

Boards with Z170 and Z270 updates via the downloaded fix from within Windows but be sure to stop all running applications such as Spotify, Skype, any ancillary apps in the System Tray, then disconnect from the Internet, then close AntiVirus program. Before extracting the ME update tool check the download integrity of the md5 sum using the md5free tool from Winmd5.com - you need to check the integrity of the zip file NOT its contents!

Z370 boards from ASUS have an update tool from within the BIOS utility.

How to use winmd5 in my tutorial video here:

http://www.veoh.com/watch/v28335038JpeNGXzP

Please be advised asus uses md5 - other manufacturers may use SHA256 verification. For that look here:

https://www.maketecheasier.com/verify-md5-sha-1-sha-256-checksum-windows10/