AIs in Love, UEFI, Fortinet, Godaddy, Juggalos, Aaran Leyland, and More. – SWN #443
AIs in Love, UEFI, Fortinet, Godaddy, Juggalos, Aaran Leyland, and More. In this edition of the Security Weekly News.
Hosts
Doug White
Professor at Roger Williams University
- 1. New UEFI Secure Boot flaw exposes systems to bootkits, patch now
- 2. Hackers leak configs and VPN credentials for 15,000 FortiGate devices
- 3. Fortinet Confirms New Zero-Day Exploitation
- 4. Woe Daddy: FTC raps hosting giant GoDaddy for security lapses
- 5. New Protocol Vulnerabilities: CVE-2024-7595/7596 & CVE-2025-23018/23019
- 6. Subtle makeup tweaks can outsmart facial recognition
- 7. Apple Intelligence: iPhone AI news alerts halted after errors
- 8. She Is in Love With ChatGPT
Aaran Leyland
Cyber security lead EMEA at Defence
- 1. DOJ confirms FBI operation that mass-deleted Chinese malware from thousands of US computers
The article from TechCrunch highlights a significant operation by the FBI and DOJ, which successfully deleted Chinese malware from thousands of US computers. Here are some key points:
- Operation Details: The FBI, with court authorization, removed the "PlugX" malware from over 4,200 infected computers in the US¹(https://techcrunch.com/2025/01/14/doj-confirms-fbi-operation-that-mass-deleted-chinese-malware-from-thousands-of-us-computers/).
- Malware Origin: The malware was linked to a Chinese state-backed hacking group known as "Twill Typhoon" or "Mustang Panda"¹(https://techcrunch.com/2025/01/14/doj-confirms-fbi-operation-that-mass-deleted-chinese-malware-from-thousands-of-us-computers/).
- Global Impact: The malware had infected millions of computers worldwide, including 3,000 in France¹(https://techcrunch.com/2025/01/14/doj-confirms-fbi-operation-that-mass-deleted-chinese-malware-from-thousands-of-us-computers/).
- Espionage Campaign: The malware was used for espionage, collecting and staging victims' files for exfiltration¹(https://techcrunch.com/2025/01/14/doj-confirms-fbi-operation-that-mass-deleted-chinese-malware-from-thousands-of-us-computers/).
This operation marks a significant step in combating state-sponsored cyber threats. If you have any more questions or need further details, feel free to ask!
Source: Conversation with Copilot, 17/01/2025 (1) DOJ confirms FBI operation that mass-deleted Chinese malware from .... https://techcrunch.com/2025/01/14/doj-confirms-fbi-operation-that-mass-deleted-chinese-malware-from-thousands-of-us-computers/.
