Our servers were upgraded with the the latest Meltdown and Spectre mitigation patches.
If you have further questions, please email us at support@cloudinary.com
Posted Jan 23, 2018 - 04:02 EST
Monitoring
Cloudinary's security team is tracking the recent public disclosure of vulnerabilities in modern CPUs, named the Meltdown and Spectre attacks (https://meltdownattack.com/). We are taking all available steps to mitigate the impact of these vulnerabilities. No customer action is required at this time.
We regularly apply security patches to the operating systems we use on our servers as soon as updates are available, benchmarked and tested internally. The update mitigating Meltdown is a routine maintenance patch with no expected downtime.
There is no immediate remedy for Spectre attacks for any cloud service provider. We recommend and internally apply regular updates to all operating system and browsers (https://www.kb.cert.org/vuls/id/584653) to apply patches and mitigations as they are released.
We will update this note as the release process progresses.