Security News Update for March 23, 2025

This week’s news includes:

• White House Instructs Agencies Not to Fire Cybersecurity Staff
• Hey Alexa, Got Privacy?
• Startups Use AI to Write 95 Percent of Their Code – What Could Possibly go Wrong
• AMI Remote Access Controller Vulnerable to Remote, Unauthenticated Attack
• CMMC Q&A
• Federal ‘National Resilience Strategy” Pushes Risk, Cost to States
• Veeam Patches Vulnerability Rated 9.9
• Appeals Court Upholds Conviction of Former Uber Cyber Exec Joe Sullivan
• No Honor Among Thieves – Black Basta Ransomware Gang Leaks Juicy Kremlin Ties
• I Am Glad (Cyber) Criminals Don’t Understand IRL (In Real Life)
• Temu’s Sister Company Hacked; Stole Data on 700 Million
• Is It A Breach if Oberlin Marketing Leaves Data Exposed?
• European Telecommunications Carrier Orange Reportedly Hacked
• I wonder how this would work in the US?
• Russian propaganda has infected AI chatbots
• Prez tells states you are on your own for cybersecurity – with no money to help
• Security News for the week ending March 21st, 2025: humans are the weak link in security, FCC is pretending they are cybersecurity experts, France is debating encryption backdoor, hackers go after big law – steal millions of socials, other info and lawmakers push for DeepSeek ban for fed devices

• Audio
• Video