Print      
Tech companies facing chip issue
Researchers find computers, phones open to attacks
The weakness uncovered by Google underscored the potential damage wreaked by vulnerabilities in hardware, and affects the most prominent tech companies. (John Locher/Associated Press/File)
By Ian King
Bloomberg News

The world’s biggest chipmakers and software companies, including Intel Corp. and Microsoft, are coming to grips with a vulnerability that leaves vast numbers of computers and smartphones susceptible to hacking and performance slowdowns.

Google researchers recently discovered that a feature, present in almost all of the billions of processors that run computers and phones around the world, could give cyberattackers unauthorized access to sensitive data — and whose remedy could drag on device performance.

News of the weakness, found last year and reported Tuesday by The Register technology blog, weighed on shares of Intel, the biggest semiconductor maker, while boosting rivals including Advanced Micro Devices. Intel’s silence for most of Wednesday added to investors’ unease.

Late in the day, Intel, Microsoft, Google and other tech bellwethers issued statements aimed at reassuring customers and shareholders. Intel said its chips weren’t the only ones affected and predicted no material effect on its business, while Microsoft, the largest software maker, said it released a security update to protect users of devices running Intel and other chips.

Government filings show that Intel’s CEO sold shares in his company several months after Google informed the chipmaker of the security problem affecting its products, The Associated Press reported Thursday.

CEO Brian Krzanich sold about $39 million in stocks and options in late November, before the security vulnerability was publicly known.

The company didn’t respond to inquiries about the timing of Krzanich’s divestments.

Google, which said the issue affects Intel, AMD, and ARM Holdings chips, noted that it updated most of its systems and products with protections from attack. Amazon.com, whose AWS is No. 1 in cloud computing, said most of its affected servers have already been secured.

Hackers for decades have exploited security holes in software — for example, by inducing unsuspecting users to open attachments that unleash viruses or other malware onto a device or network. The weakness uncovered by Google, by contrast, underscores the potential damage wreaked by vulnerabilities in hardware. Complex components, such as microprocessors, can be harder to fix and take longer to design from scratch if flawed.

‘‘It’s a big one and it’s a severe one. This gives an attacker capabilities that bypass the common operating system security controls that we’ve relied on for 20 years,’’ said Jeff Pollard, an analyst at Forrester Research. ‘‘There’s big impact on both the consumer and enterprise.’’

Intel’s stock remained under pressure even after its statement.

‘‘We struggle to believe that Intel won’t face some sort of financial liability,’’ analysts at Sanford C. Bernstein wrote in a note.

China’s largest cloud computing services scrambled Thursday to address the issue. Domestic industry leader Alibaba Group Holding said it planned to update its systems from 1 a.m. on Jan. 12 to handle potential chip security issues. Rival Tencent Holdings said it was in touch with Intel on possible fixes but wasn’t aware of any attempted attacks.

Applying the operating system upgrades to remedy the flaw could hamper performance, security experts said. The Register reported that slowdowns could be as much as 30 percent.

Computer slowdowns will vary based on the task being performed and for the average user ‘‘should not be significant and will be mitigated over time,’’ Intel said, adding it has begun providing software to help limit potential exploits.