Security Now: AI-Assisted Firewall Attacks and Public-Sector Vulnerability Scanning
· 2:40:05 · Watch on YouTube ↗
Summary
The episode examines a reported AI-assisted campaign against FortiGate firewalls, alleged theft from Mexican government agencies, age-verification privacy rules and UK public-sector vulnerability scanning.
Key points
- AWS reported that a financially motivated, Russian-speaking attacker compromised more than 640 firewalls with exposed management ports, weak passwords and no MFA, rather than exploiting vulnerabilities.
- Researchers identified Deep Seek and Claude as tools allegedly used to generate scripts for reconnaissance, configuration extraction and vulnerability assessment.
- Bloomberg reported that an attacker allegedly used Claude to assemble scripts in breaches of Mexican government agencies involving more than 150 GB of data.
- The FTC announced conditional COPPA enforcement relief for age-verification data collection, including limits on use, retention and disclosure.
- The UK said its vulnerability monitoring service scans 6,000 public-sector bodies and provides remediation guidance; Steve Gibson questioned unclear claims about DNS weaknesses.
Article Details
- Topics
- [18:57] AI-assisted attacks on exposed FortiGate management interfaces
- [25:01] Reported data theft from Mexican government agencies
- [26:19] Apple age-assurance tools and regional requirements
- [37:19] COPPA enforcement policy for age-verification data
- [01:02:38] UK public-sector vulnerability scanning and remediation