Such information might include passwords stored in a password manager or browser, personal photos, emails, instant messages, and other sensitive documents, Dr Yarom says.
Most notably, Apple says that testing with public benchmarks such as GeekBench 4, Speedometer, and JetStream showed the Meltdown mitigations "resulted in no measurable reduction in the performance of macOS and iOS".
To make sure our computers, smartphones and tablets work quickly, processors have to do a certain amount of guesswork about what data and functions they'll need next, having them ready to go when they're called upon.
For now, there's only one thing you can do: Update your devices and browser software when the updates are made available.
The other flaw, called Meltdown, affects most Intel processors made after 1995. However, it would be hard to determine if a computer has been exploited because there doesn't appear to be records saved in computer log files. Microsoft, Google, and Amazon are also scrambling to roll out patches to combat the exploitations.
MacOS High Sierra Facing a New Password Bug
Anyone with access can enable or disable settings related to automatically installing MacOS software, security and app updates. Then click on the padlock again to unlock it and a prompt should pop up where you can enter your username and password.
In a blog post, Apple commented on the issue saying, "All Mac systems and iOS devices are affected, but there are no known exploits impacting customers at this time". The company already released mitigations against Meltdown in its most recent versions of iPhone, iPad, Mac, and Apple TV software.
We're rolling out a software update (build NMJ88C) with the January security patches and fixes for the Spectre and Meltdown security flaws.
To update your Mac, go to the Mac App Store on your machine and open the Updates tab.
To be clear, nearly every computing device is affected by both Meltdown and Spectre.
Intel and AMD both said that Google told the companies about the threats last summer. And although security patches exist for devices running Linux, Windows, and OS X, the researchers said, the fix may slow down their performance by as much as 30 percent, according to some estimates. To avoid the chaos that such breaches could cause, tech companies are rushing to address the vulnerabilities. Microsoft also released a patch on Wednesday. For example, in Google's Chrome browser on a computer, you can click on the three dots in the upper-right corner and click Update Google Chrome.
But not all antivirus products have been able to do this yet, which means many Windows users likely will not be able to download this patch immediately. If you don't have automatic updates turned on, go to Windows Settings to manually update.
Your operating system and apps typically have a button you can click to check for software updates.