Security News Update for April 13, 2025
This week’s news includes:
- FTP Software CrushFTP being Exploited; Hackers Gain Sensitive Data
- Maryland Pharmacist Spied on Coworkers for a Decade
- CMMC Q&A
- Canary Tokens
- Google Pixel Phones Join Samsung Privacy Feature for When You Need Your Phone Repaired
- Microsoft Patches 126 Bugs, Including Yet Another Zero-Day in Common Log File System
- UK Secret Court Says Apple Appeal Should Not be Secret
- Dutch Government Plans to do Background Checks on Students, Researchers Who Access Sensitive Information
- Senator Wyden to Block CISA Director Confirmation Over Refusal to Release Telecoms’ Negligent Cybersecurity Practices
- Consumer Reports Assessment of AI Voice Cloning Software
- OCC Email System Breach Described as “Stunning, Serious”
- Industrial Tech Company Sensata Hit By Ransomware, Shuts Down Systems
- Hacker Claims to Have Breached Both WooCommerce and Magento
- Oregon’s Environmental Agency Down Due to Cyberattack
- Meta claims using pirated books to train its LLM is “Fair Use”
- This is your cloud provider – what is your plan?
- China and, oh yeah, more China
- Security News for the week ending April 11th, 2025: settlement checks coming for 2021 T-Mobile breach, EU reforming – simplifying GDPR, Apple’s plan for mitigating effects of tariffs, weaponized DoJ goes after former CISA director Chris Krebs and feds put more companies on the entities list