Critical vulnerabilities in Intel processors

In a posts two weeks ago, I mentioned that Intel processors have a hidden operating system to which the user doesn't have access.

kaleidoscope source

We didn't have to wait long to find the first security holes. Intel certified 11 serious bugs this week that are in millions of processors around the world.
Well, Intel did it only after Maxim Goryachy and Mark Ermolov of Positive Technologies discovered a critical vulnerability in ME (Management Engine) in the processors. Full access to your computer can be obtained through ME. Even if the computer is turned off but connected, ME can run because it uses a special microprocessor.

kaleidoscope source

As I noted, Google found that ME is running on a modified version of MINIX, which even has a web server and IP support (IP stack), so they wrote their own firmware that runs on Linux and doesn't have that.

Intel quickly prepared the tool to check if the processor contains any of the vulnerabilities found. The only good news is that for now, it looks like an attack requires local access or an existing presence in the network or administrator privileges.

There's no evidence that vulnerabilities are being exploited already but millions of computers are potentially at risk.

More security news:
Did you know that you have more than one operating system on your computer?
Android Oreo Bug
Encryption History
Cryptocomic
Encryption Technology
The Internet Of Ransomware Things
Who is Spying on You? And How to Stop Them?

@seckorama