This month in security with Tony Anscombe – March 2025 edition

This March 2025 security roundup reports multiple active threats: exploitation of a year-old vulnerability in a third-party ChatGPT tool targeting US government organizations; a mail-based scam impersonating ransomware groups to extort corporate executives; Microsoft Patch Tuesday addressing up to six zero-day vulnerabilities being actively exploited; and an FTC finding that Americans lost US$12.5 billion to online fraud in 2024, with additional guidance from the UK NCSC about preparing for quantum-era threats by 2035.