This site covers two kinds of viruses, and this week both kinds made the news for the same reason: something began spreading before a fix was ready. One story is about turkeys in Minnesota. The other is about email servers. The way each is being handled is almost the same.
The biological outbreak
After a quiet summer, H5N1 avian flu is back on commercial poultry farms in the United States. Over the past 30 days it has been confirmed in 14 commercial and seven backyard flocks, affecting about 620,000 birds. That is up from a seasonal low of about 150,000 in August. Minnesota is the hardest-hit state, and detections in wild birds are rising as the fall migration gets under way.
The digital outbreak
On October 1, Fortinet warned that attackers are already exploiting a critical flaw in FortiMail, an email security product that organizations use. The flaw is rated 9.8 out of 10 for severity. It lets someone who has not even logged in write files onto the system, and security updates for it are not yet available.
The same four moves
Set the two stories side by side, and the response follows the same order.
- Watch closely. Farm outbreaks are confirmed and counted flock by flock, and wild birds are tested. For software, the equivalent is the published advisory and the list of warning signs Fortinet has given customers to check their systems against.
- Report early. Both systems depend on someone saying “we have a problem” before the full picture is known. Fortinet published its advisory while the attacks were under way and before a fix existed.
- Contain it before you can cure it. With no fix yet, Fortinet’s advice is to switch off the affected feature and limit who can reach the management screen. That is a quarantine. Poultry farms do the same thing with strict controls on who and what comes onto the property.
- Set a deadline. CISA, the US cybersecurity agency, gave federal agencies until October 4 to act. Speed decides how far either kind of outbreak travels.
Where the comparison ends
The two are not the same. Bird flu’s return each fall follows the migration, so it can be anticipated. A flaw like this one arrives without warning, which is why it is called a zero-day: defenders have had zero days to prepare. The stakes differ too. One is about animals, the food supply, and public health. The other is about data and money.
What it means for you
Few of us run an email server or a turkey farm. Our part is smaller, but it is real. Keep your own devices updating automatically, because the same race between flaw and fix plays out on phones and laptops. And follow the long-standing public health advice on bird flu: do not handle sick or dead wild birds, and cook poultry and eggs thoroughly. If you keep a backyard flock, your state agriculture department publishes guidance on protecting it.
This article is general information, not medical or veterinary advice.
Send this to yourself, or to someone who should see it
Enter your email and we will send you a link to this article.
