Flawed Broadcom Wi-Fi chipsets get a fix, but flaw remains a mystery

In other news

• The first of two hackers associated with the group "Crackas with Attitude" was sentenced to two years in prison for hacking personal accounts of U.S. government officials, including then-CIA Director John Brennan's AOL accounts. Andrew Otto Boggs, known as "Incursio," of North Wilkesboro, N.C., was arrested with fellow hacker Justin Gray Liverman, known as "D3f4ult," of Morehead City, N.C., in September of 2016. Boggs pleaded guilty in January 2017 to gaining unauthorized access via social engineering to government computer systems and the online accounts of at least 10 government officials. Along with other members of Crackas with Attitude, who are located in the United Kingdom and being prosecuted by the Crown Prosecution Service, Boggs then posted the information gathered in the hacks to the public, exposing the names and contact information for tens of thousands of employees in the Department of Justice and the Department of Homeland Security. Liverman also pleaded guilty in January and is set to be sentenced on July 28.
• In the latest chapter of Kaspersky Lab versus the U.S. government, co-founder and CEO Eugene Kaspersky said that he is willing to turn over the source code of his company's products to U.S. government officials for examination. This follows last week's move by U.S. senators to try to ban the use of Kaspersky Lab products in the military as part of the National Defense Authorization Act. In an interview with The Associated Press, Kaspersky said he would disclose the source code if the U.S. needs it, and said, "Anything I can do to prove that we don't behave maliciously I will do it." The U.S. governments' suspicions that Kaspersky Lab does not operate independently of the Kremlin have yet to be backed up with solid evidence. Meanwhile, Russian lawmakers are drafting a bill that would make the use of Western antivirus products in Russia illegal. Russian officials said the bill is not political and wouldn't have a big impact on foreign businesses if it passes into law.
• Siemens patched two critical vulnerabilities in Intel's Active Management Technology (AMT). One of the flaws enabled attackers to gain system privileges for the company's industrial controls systems, and the other enabled attackers to upload and execute arbitrary code. Siemens had 38 product series affected by these bugs and, according to an advisory put out by the company, "unprivileged local or remote attackers can gain system privileges to provisioned Intel manageability SKUs: Intel  AMT, Intel Standard Manageability (ISM) and Intel Small Business Technology (SBT)." Siemens released firmware updates to fix the issue this week.