Enlarge (credit: Getty Images)

A now-abandoned USB worm that backdoors connected devices has continued to self-replicate for years since its creators lost control of it and remains active on thousands, possibly millions, of machines, researchers said Thursday.

The worm—which first came to light in a 2023 post published by security firm Sophos—became active in 2019 when a variant of malware known as PlugX added functionality that allowed it to infect USB drives automatically. In turn, those drives would infect any new machine they connected to, a capability that allowed the malware to spread without requiring any end-user interaction. Researchers who have tracked PlugX since at least 2008 have said that the malware has origins in China and has been used by various groups tied to the country’s Ministry of State Security.

Still active after all these years

For reasons that aren’t clear, the worm creator abandoned the one and only IP address that was designated as its command-and-control channel. With no one controlling the infected machines anymore, the PlugX worm was effectively dead, or at least one might have presumed so. The worm, it turns out, has continued to live on in an undetermined number of machines that possibly reaches into the millions, researchers from security firm Sekoia reported .

Enlarge / Greylag geese sit on a field and rest while a cow passes by in the background. (credit: Getty | Daniel Bockwoldt )

Researchers around the world are growing more uneasy with the spread of highly pathogenic avian influenza (H5N1) in US dairy cows as the virus continues to make its way into new herds and states. Several experts say the US is not sharing enough information from the federal investigation into the unexpected and growing outbreak, including genetic information from isolated viruses.

To date, the US Department of Agriculture has tallied 32 affected herds in eight states : Idaho, Kansas, Michigan, New Mexico, North Carolina, Ohio, South Dakota, and Texas. In some cases, the movement of cattle between herds can explain the spread of the virus. But the USDA has not publicly clarified if all the herds are linked in a single outbreak chain or if there is evidence that the virus has spilled over to cows multiple times. Early infections in Texas were linked to dead wild birds (pigeons, blackbirds, and grackles) found on dairy farms. But the USDA reportedly indicated to Stat News that the infections do not appear to be all linked to the Texas cases .

Spread of the virus via cattle movements indicates that there is cow-to-cow transmission occurring, the USDA said. But it's unclear how the virus is spreading between cows. Given that even the most symptomatic cows show few respiratory symptoms, the USDA speculates that the most likely way it is spreading is via contaminated milking equipment.

Enlarge / This photo taken in August 2014 shows macaque monkeys in a country park in Hong Kong. (credit: Getty | Alex Ogle )

A 37-year-old man is fighting for his life in an intensive care unit in Hong Kong after being wounded by monkeys during a recent park visit and contracting a rare and deadly virus spread by primates.

The man, who was previously in good health, was wounded by wild macaque monkeys during a visit to Kam Shan Country Park in late February, according to local health officials . The park is well known for its conservation of wild macaques and features an area that locals call " Monkey Hill " and describe as a macaque kingdom.

On March 21, he was admitted to the hospital with a fever and "decreased conscious level," health officials reported. As of Wednesday, April 3, he was in the ICU listed in critical condition. Officials reported the man's case Wednesday after testing of his cerebrospinal fluid revealed the presence of B virus.

Enlarge / A cat, but not the one with plague. (credit: Getty | Silas Stein )

An Oregon resident contracted bubonic plague from their "very sick" pet cat, marking the first time since 2015 that someone in the state has been stricken with the Black Death bacterium, according to local health officials.

Plague bacteria, Yersinia pestis , circulates cryptically in the US in various types of rodents and their fleas. It causes an average of seven human cases a year, with a range of 1 to 17, according to the Centers for Disease Control and Prevention. The cases tend to cluster in two regions, the CDC notes: a hotspot that spans northern New Mexico, northern Arizona, and southern Colorado, and another region spanning California, far western Nevada, and southern Oregon.

The new case in Oregon occurred in the central county of Deschutes. It was fortunately caught early before the infection developed into a more severe, systemic bloodstream infection (septicemic plague). However, according to a local official who spoke with NBC News, some doctors felt the person had developed a cough while being treated at the hospital. This could indicate progression toward pneumonic plague, a more life-threatening and more readily contagious variety of the plague that spreads via respiratory droplets. Nevertheless, the person's case reportedly responded well to antibiotic treatment, and the person is recovering.

Enlarge / An ant carrying away one of the termites it preys on. (credit: Wikimedia Commons )

Although humans may think we are alone in creating antibiotics, there is a species of ant that secretes an especially powerful one—no pharma lab required.

The Matabele ants ( Megaponera analis) of sub-Saharan Africa eat only termites. Unfortunately, the fierce mandibles of termite soldiers cause injuries that, if infected, can turn fatal. Ants back at the nest rush to the injured and can tell which wounds are infected. They then secrete an antibiotic for them.

An international team of researchers observed these ants closely and analyzed their antibiotic secretion. They found it can reduce mortality by about 90 percent in injured ants and that the ants can identify chemical changes that result from infected wounds, focusing treatment on those that need it most.

Enlarge (credit: Getty | UniversalImagesGroup )

This year has been marked by many terrifying things, but perhaps the most surprising of the 2023 horrors was … eye drops.

The seemingly innocuous teeny squeeze bottle made for alarming headlines numerous times during our current revolution around the sun, with lengthy lists of recalls , startling factory inspections , and ghastly reports of people developing near-untreatable bacterial infections , losing their eyes and vision , and dying .

Recapping this unexpected threat to health, the Food and Drug Administration on Tuesday released an advisory titled " What You Should Know about Eye Drops " in hopes of keeping the dangers of this year from leaking into the next. Among the notable points from the regulator was this stark pronouncement: No one should ever use any homeopathic ophthalmic products, and every single such product should be pulled off the market.

Enlarge (credit: Getty | UniversalImagesGroup )

The Food and Drug Administration is warning consumers to ditch 26 over-the-counter eye drop products found at big retailers—including CVS, Rite Aid, and Target—due to a risk of infection. Consumers should not buy any of the products and should immediately stop using them if they've already purchased them.

The products include Target's branded Up & Up Dry Eye Relief Lubricant Eye Drops and Up & Up Extreme Relief Dry Eye, as well as Lubricant Eye Drops and Lubricant Gel Drops branded by CVS Health and Rite Aid. The warning also includes eye drop products branded as Rugby and Leader (both from Cardinal Health) and Velocity Pharma. A full list can be found here , as can links to report adverse events.

In an advisory posted Friday, the FDA reported that no infections or adverse events have been linked to the products so far. But the agency said it "found insanitary conditions in the manufacturing facility and positive bacterial test results from environmental sampling of critical drug production areas in the facility."

Enlarge / Under a magnification of 1,125x, this photomicrograph of a blood specimen revealed the presence of intraerythrocytic Plasmodium falciparum ring-form trophozoites. Note the erythrocyte in the center contained four ring-staged trophozoites and that all rings exhibited a single chromatin dot. (credit: CDC )

Catching malaria in the US is extremely rare, but when it happens, the mosquito-borne parasite can masquerade as another parasite that's regularly found in the country, leading to a misdiagnosis that has foiled doctors around the world for years. Such was the case this year in Maryland, when the state saw its first locally acquired malaria case in over 40 years , according to a report this week .

The misdiagnosis led the patient to a weeks-long treatment for the wrong infection and held up public health responses to pinpoint and thwart further transmission. To date, the source of the patient's infection remains a mystery.

As global travel and climate warming expand malaria's range, awareness of the diagnostic pitfall and better testing will be increasingly needed, the report's authors suggest. The report was published Thursday in the Centers for Disease Control and Prevention's Morbidity and Mortality Weekly Report.

Enlarge / Competitors take part in "Tough Mudder" at the Glen Helen Raceway in San Bernardino, California, United States on April 2, 2023. (credit: Getty | Tayfun CoÅkun )

Hundreds of people who participated in a recent Tough Mudder event—a very muddy obstacle course race—held in Sonoma, California, have fallen ill with pustular rashes, lesions, fever, flu-like symptoms, nerve pain, and other symptoms, local health officials and media outlets report.

The cases could be caused by various infectious agents, including Staphylococcus bacteria, but the leading culprit is the relatively obscure Aeromonas bacteria— specifically A. hydrophila , according to the Sonoma County health department. In a statewide alert this week, the California Department of Public Health said it is considering it an Aeromonas outbreak, noting that multiple wound cultures have yielded the hardy bacterium.

A spokesperson for the Sonoma County health department told the Los Angeles Times on Thursday that, based on calls and emails the department had received, health officials estimate that the outbreak involves around 300 cases . Tough Mudder participants, meanwhile, have tallied as many as 489 cases in online forums.