Intel faces 32 class action suits stemming from Spectre and Meltdown

The company disputes the claims and says it is fighting all the lawsuits "vigorously."

Intel is fighting 32 class action lawsuits related to major security vulnerabilities in its chips that were disclosed in January, the company said in an annual filing with to the Securities and Exchange Commission on Friday.

The filing says that as of Feb. 15, there are 30 class action lawsuits on behalf of customers and two on behalf of shareholders, all resulting from the nature of the disclosure of Meltdown and Spectre. About six months elapsed from the flaws’ discovery in June until their public disclosure.

The company says the lawsuits are filed in U.S. federal and state courts and in some cases courts in other countries.

Meltdown and Spectre are deep-rooted flaws in computer central processing units that can allow hackers to steal sensitive information undetected. The flaws are present in CPU chips dating back to the mid-1990s.

The customer lawsuits “generally claim to have been harmed by Intel’s actions and/or omissions in connection with the security vulnerabilities,” and are seeking monetary damages and equitable relief, the company writes.

The two shareholder lawsuits represent the class of people who bought Intel stock between July 27, 2017, and Jan. 4, 2018. These lawsuits claim that Intel and certain company officials made “false or misleading” statements about the vulnerabilities and violated securities laws in the process.

“We dispute the claims described above and intend to defend the lawsuits vigorously,” the company said in the filing.

Intel and other chip manufacturers have faced criticism, including an inquiry from Congress, over how they handled the disclosure and response to the vulnerabilities.

A Google research team discovered the flaws and informed Intel and other companies in June 2017.

Intel says the flaws were supposed to officially be disclosed in late January, but an independent researcher tweeted the relevant code on Jan. 3, forcing Intel and other companies to react sooner than expected.

Intel says certain mitigation techniques it had planned for did not operate as intended because of the premature disclosure by third parties.

Separately in the SEC filing, Intel said it does not expect to suffer any material financial losses from Meltdown and Spectre.

Government

• FBI officials say AI is bolstering adversaries, emphasizing need to focus on cyber basics, patching

• Feds accuse China of ‘systematic’ distillation of U.S. AI models

• CIA’s Michael Ellis says cyber intelligence is changing how the agency operates

• Jail time for Maine child in 764 marks turning point in federal law enforcement

Technology

• FCC proposes public scorecard to rate telecoms on anti-robocall efforts

• Pegasus, NoviSpy variant spyware found on devices of Serbian activists

• Wyden seeks upgraded NSA security guidance on commercial VPN use

• The Collective Cyber Defense letter wrote your next vendor questionnaire

Threats

• Chinese espionage groups swarm to exploit triple-link chain of zero-days

• Microsoft discloses two actively exploited zero-days among 974 vulnerabilities

• Russian national extradited to US for alleged involvement in bank-account takeover scheme

• Attackers exploit zero-days in consistently besieged SonicWall product

Policy

• Whistleblower says USPS deploying new, ‘untested’ IT systems governing mail-in ballots

• ‘Watershed 250’ test program in Texas looks to private sector for water cybersecurity help

• Cyber threats nudge Trump to sign executive order on foreign equipment in U.S. energy infrastructure

• Election official says Tina Peters would be consultant, won’t have access to election systems