SecurityWeek News’ March 21, 2025 roundup brought together three unrelated but consequential developments: Google patched critical Chrome use-after-free vulnerability CVE-2025-2476; a court ordered a new sentence for Capital One hacker Paige Thompson; and the open-source Expat project disclosed how CVE-2024-8176 took months to fix after limited help from major users. The same roundup also recorded ransomware, website-compromise and data-exposure figures that put the three lead stories in context.
At a glance
| Story | Primary subject | Immediate response described by SecurityWeek | Potential harm |
|---|---|---|---|
| Chrome CVE-2025-2476 | Technical browser security | Update Chrome | Browser sandbox escape or arbitrary code execution |
| Paige Thompson’s Capital One case | Criminal sentencing | Await the resentencing process | Financial, emotional and reputational damage |
| Expat CVE-2024-8176 | Open-source software supply chain | Patch libexpat in products and distributions that use it | Exposure wherever the vulnerable XML parser is embedded |
This is a dated account of the information available in SecurityWeek News’ March 21, 2025 publication. Court developments, software status and incident totals may have changed since then.
As an Amazon Associate I earn from qualifying purchases.
What is the critical Chrome bug?
Google patched CVE-2025-2476, a critical use-after-free vulnerability in Chrome. A use-after-free flaw occurs when software continues using memory after that memory has been released. In a browser, successful exploitation can help an attacker escape the security sandbox or execute arbitrary code on the device.
Free tools Windows power users keep installed
One-click scans. No signup required.
The practical response for Chrome users is to install the browser’s available security update through its built-in update mechanism and restart when prompted. SecurityWeek reported that Google had not announced the vulnerability’s bounty amount at the time of publication, so no reward figure should be inferred from the “critical” rating.
#1 Best Overall
Why is the Capital One hacker being resentenced?
Paige Thompson’s original 2022 punishment was reversed, and the court ordered resentencing. Thompson had received time served—described as approximately 100 days in prison—along with five years of probation for the Capital One breach.
The court concluded that sentence was too lenient in light of the case’s consequences, including tens of millions of dollars in damage and the emotional and reputational harm experienced by affected people and organizations. Resentencing means the punishment is being reconsidered; it does not, by itself, describe a new conviction or establish what the eventual sentence will be.
Rank #2
- Used Book in Good Condition
What happened with the Expat vulnerability?
Discovery and disclosure
CVE-2024-8176 affects Expat, also known as libexpat, an open-source XML parser used inside other software. Google Project Zero researcher Jann Horn discovered the vulnerability in 2022. Expat developer Sebastian Pipping began contacting major users in early 2024 to seek assistance with a fix.
What’s actually slowing this PC down?
Pick the symptom - the matching free tool is one click away.
Why the repair effort took so long
According to SecurityWeek, 40 companies were contacted. Siemens and one unnamed company were the only organizations that offered help. A patch was released 10 months later. The episode illustrates a supply-chain problem: a small open-source project may support widely deployed products while having limited access to the commercial users best positioned to help test and repair it.
Organizations that ship software containing libexpat need to identify the affected component in their dependency inventories and apply the vendor or project patch. The roundup does not establish a universal exploitation status or a single update procedure for every product that embeds Expat.
Other incidents noted in the roundup
- BlackLock (also called El Dorado): SecurityWeek reported that the ransomware operation targeted 48 organizations during the first two months of 2025.
- DollyWay World Domination: GoDaddy said this campaign had hacked more than 20,000 websites since 2016.
- SpyX: SecurityWeek cited reporting that SpyX systems were hacked in June 2024, exposing two million user records.
- WP Ghost: The WordPress security plugin was deployed on more than 200,000 sites and contained a critical remote-code-execution vulnerability tracked as CVE-2025-26909. The roundup said the flaw had been patched.
Why these three lead stories belong in one security roundup
They represent different points in the security lifecycle. Chrome’s issue is an urgent end-user software update. Expat’s issue is a dependency-maintenance and coordination challenge for vendors and open-source maintainers. The Capital One story is a legal response that follows an earlier breach and remains subject to court action. Together, they show that security risk is managed through technical patches, supply-chain cooperation and, when harm has already occurred, the justice system.
Quick Recap
Product prices and availability are accurate as of the date/time indicated and are subject to change. Any price and availability information displayed on Amazon at the time of purchase will apply.
Recommended Free Tools
