Security News Update for September 21, 2025

This week’s news includes:

• New Attack Bypasses Rowhammer Defenses in DDR5 Memory
• CMMC Q&A
• Microsoft to Force-Install Microsoft 365 CoPilot
• Apple Changes Version Number Scheme for its Operating Systems
• Self Replicating Worm infects Software on Javascript Repository
• Samsung Patches Actively Exploited Android Zero-Day
• Chegg Study App Pays $7.5 Mil for Nearly Impossible to Cancel Auto-Renewal
• It’s a Good Thing That Salesforce Can Afford Many Lawyers – They will Need Them
• Former Chinese Defector Was Illegal Chinese Agent
• Gucci/Balenciaga/YSL Parent Hacked
• Hackers hide fake remote management software in fake Chrome updates
• Uvalde schools – lesson to learn
• Salesforce breach: 760 businesses, 1.5 billion victims
• Security News for the week ending September 19, 2025: Google adds support to detect modified content in Pixel 10, congressional UFO hearing over hellfire missile video, I got a $1 payment from the Park Mobile class action settlement, fakes and scams on online marketplaces and DHS’s ICE using spyware to hack phones with no oversight.

• Audio
• Video