Day: April 10, 2025

Wall Street’s euphoria lifts US stocks to historic heights after Trump’s 90-day tariff pause

by

U.S. stocks soared to one of their best days in history on a euphoric Wall Street Wednesday after President Donald Trump said he would back off on most of his tariffs temporarily, as investors had so desperately hoped he would.Treasury Secretary Scott Bessent later told reporters that Trump was pausing his so-called ‘reciprocal’ tariffs on most of the country’s biggest trading partners, but maintaining his 10% tariff on nearly all global imports. China was a huge exception, though, with Trump saying tariffs are going up to 125% against its products. That raises the possibility of more swings ahead that could stun financial markets. The trade war is not over, aThe pause of heftier tariffs on dozens of countries came less than 24 hours after they kicked in. However, the White House kept a 10% blanket duty on almost all U.S. imports. The increase in China tariffs was in retaliation for China’s announcement of an 84% levy on U.S. goods starting April 10. Traders took the opportunity to shop for beaten-down stocks. Since Trump announced broad tariffs late on April 2, stocks had fallen more than 12%. “This is the pivotal moment we’ve been waiting for. The immediate market reaction has been overwhelmingly positive, as investors interpret this as a step toward much-needed clarity,” said Gina Bolvin, president of Bolvin Wealth Management Group.

EU pauses countermeasures after Trump’s tariff reprieve; U.S. weighing deals

by

BRUSSELS/BEIJING/WASHINGTON, April 10 (Reuters) – The European Union will pause its first countermeasures against U.S. tariffs after President Donald Trump temporarily lowered the hefty duties less than a day after imposing them on dozens of countries, European Commission chief Ursula von der Leyen said on Thursday. The Trump administration is weighing offers from more than a dozen countries on tariff deals and is close to reaching agreements with some of them, White House economic adviser Kevin Hassett said.”USTR has informed us that there are maybe 15 countries now that have made explicit offers that we’re studying and considering and deciding whether they’re good enough to present the president,” Hassett told reporters at the White House, referring to the U.S. trade representative. Principals in the administration’s trade policy will meet at the White House on Thursday to discuss how to prioritize the separate negotiations, Hassett said. The EU was due to launch counter-tariffs on about 21 billion euros ($23.25 billion) of U.S. imports next Tuesday in response to Trump’s 25% tariffs on steel and aluminium. It is still assessing how to respond to U.S. car tariffs and the broader 10% levies that remain in place.”We want to give negotiations a chance,” von der Leyen said on X. “While finalising the adoption of the EU countermeasures that saw strong support from our Member States, we will put them on hold for 90 days.” Trump’s sudden decision on Wednesday to pause most of his hefty new duties brought relief to battered markets and anxious global leaders, even as he ratcheted up a trade war with China. His turnabout, which came less than 24 hours after steep new tariffs kicked in, followed the most intense episode of financial market volatility since the early days of the COVID-19 pandemic. U.S. stock indexes shot higher on the news, and the relief continued into Asian and European trading on Thursday. Before Trump’s U-turn, the upheaval had erased trillions of dollars from stock markets and led to an unsettling surge in U.S. government bond yields that appeared to catch Trump’s attention. source Reuters

BigCommerce vs Magento: Why BigCommerce is the Better B2B Choice

by

BigCommerce and Magento (now Adobe Commerce) are two ecommerce platforms that businesses often evaluate. Magento is an open-source platform, while BigCommerce is a fully hosted Software-as-a-Service (SaaS) platform. For growing businesses, choosing the right platform means balancing cost, scalability, maintenance, flexibility, and security.  In this article, we compare BigCommerce and Magento on these key factors and explain why BigCommerce is the better choice for most businesses. We’ll also highlight real-world examples of companies that migrated from Magento to BigCommerce and saw significant benefits.One of the most important considerations when choosing the right platform is the total cost of ownership (TCO). At first glance, Magento Open Source is free to download, while BigCommerce requires a subscription. However, the upfront cost doesn’t tell the whole story. BigCommerce’s pricing is all-inclusive, whereas Magento’s expenses can quickly add up through various fees. If you opt for Magento’s premium Adobe Commerce edition, there’s also a steep licensing fee (often over $10,000 per year for enterprise stores). Many companies discover that Magento’s ongoing maintenance and development costs outweigh any initial savings. Curt Carpenter, Co-founder of Lekker Home, initially used Magento but found the high cost and constant need for developer intervention a major burden. Facing increasing expenses, they switched to BigCommerce B2B Edition and saw immediate benefits, including improved website performance and lower costs.  Forrester analyzed the benefits customers see when moving to BigCommerce. The study revealed that enterprise brands saw improved ROI, cost savings, and more success over three years with BigCommerce. The study found that a composite of the customers surveyed saw: “We’ve been with BigCommerce for 12 months, and our total cost of ownership is significantly lower,” remarked Mark Vourlides, Marketing and Ecommerce Manager at TradeTools. Scalability As your online store grows, you need a platform that can handle increased traffic and product expansion. Magento and BigCommerce approach scalability very differently: “Our old platform was becoming more of a hindrance than a help. We had a lot of manual processes for our pricing, and it wasn’t scalable,” said Jacob Jones, Head of Ecommerce at Sellars, who migrated from Magento to BigCommerce. “The open API made it easy to integrate with our existing systems and create a seamless experience for our customers. We now have a system that’s scalable and flexible enough to adapt to our needs as we grow.” Maintenance and upgrades Keeping an ecommerce site running smoothly requires regular software updates, security patches, and performance optimizations. The difference between Magento and BigCommerce is clear: The difference in maintenance overhead has a direct impact on business agility. BB Wheels, an online automotive business, gained peace of mind with BigCommerce’s hands-off maintenance.  “BigCommerce makes sure that everything is secure. We don’t have to worry about our site being hacked or maintaining it. Also, it helps to have BigCommerce on the backend, so we can focus on selling products,” explained Chelsey Eggert, Director of Operations at BB Wheels. Flexibility and customization Magento is often associated with customization due to its open-source nature, but this flexibility comes at a cost: greater development time, maintenance complexity, and potential technical debt. BigCommerce has embraced an open SaaS approach that blends flexibility with ease of use. A great illustration of BigCommerce’s flexibility is MKM Building Supplies, which chose BigCommerce for its API-driven and modular architecture, allowing the brand to innovate quickly without the maintenance burden associated with open-source platforms. Security and compliance Security is a critical consideration for online businesses. Here’s how Magento and BigCommerce compare: BB Wheels found BigCommerce’s security invaluable. “​​BigCommerce makes sure that everything is secure,” said Chelsey Eggert, Director of Operations at BB Wheels. “We don’t have to worry about our site being hacked or maintaining it.” This proactive security approach reduces the risks associated with unpatched Magento installations

Operations of Sensor Giant Sensata Disrupted by Ransomware Attack

by

Sensata Technologies informed the Securities and Exchange Commission on Wednesday that it was recently targeted in a ransomware attack that caused disruptions to its operations.  The Attleboro, Massachusetts-based company provides sensors, relays, switches and other electrical components for the automotive, industrial and aerospace sectors. The company has operations in 14 countries and employs more than 18,000 people. Sensata told the SEC that it detected a cyberattack on April 6. The company described it as a ransomware incident that resulted in files stored on some devices being encrypted.  The sensor giant has also found evidence that the hackers have stolen files from its systems. An investigation is underway to determine exactly which files have been taken. “The incident has temporarily impacted Sensata’s operations, including shipping, receiving, manufacturing production, and various other support functions,” Sensata said. “While the Company has implemented interim measures to allow for the restoration of certain functions, the timeline for a full restoration is not yet known.” Regarding the potential material impact of the ransomware attack, the company said it does not expect the incident to affect financial results and operations for the second quarter. However, it noted that “the full scope and impact of this incident is not yet known and could result in a future determination that the incident will be material to the Company’s financial statements and results of operations”. It’s unclear which ransomware group is behind the attack on Sensata. At the time of writing, no known cybercrime group appears to have taken credit for the attack. 

Nissan Leaf Hacked for Remote Spying, Physical Takeover

by

Researchers have demonstrated that a series of vulnerabilities affecting the Nissan Leaf electric vehicle can be exploited to remotely hack the car, including for spying and the physical takeover of various functions.  The research was conducted by PCAutomotive, a company that offers penetration testing and threat intelligence services for the automotive and financial services industries. The Nissan Leaf hacking was detailed last week at Black Hat Asia 2025. PCAutomotive researchers targeted a second generation Nissan Leaf made in 2020. The vulnerabilities they found enabled them to use the infotainment system’s Bluetooth capabilities to infiltrate the car’s internal network. They were then able to escalate privileges and establish a C&C channel over cellular communications to maintain stealthy and persistent access to the EV directly over the internet.  The researchers showed that an attacker could exploit the vulnerabilities to spy on the owner by tracking the car’s location, taking screenshots of the infotainment system, and recording people talking in the vehicle. They were also able to remotely take control of various physical functions, including doors, wipers, the horn, mirrors, windows, lights, and even the steering wheel, including while the car was in motion.  The vulnerabilities have been assigned eight CVE identifiers: CVE-2025-32056 through CVE-2025-32063. The disclosure process started in August 2023 and Nissan confirmed the findings in January 2024, but it took until recently to get the CVEs assigned, according to the researchers.  Contacted by SecurityWeek, a Nissan spokesperson commented, “PCAutomotive contacted Nissan regarding its research. While we decline to disclose specific countermeasures or details for security reasons, for the safety and peace of mind of our customers we will continue to develop and roll out technologies to combat increasingly sophisticated cyberattacks.” Nissan Leaf Hacked for Remote Spying, Physical Takeover

GitHub Announces General Availability of Security Campaigns

by

GitHub has announced the general availability of security campaigns, which make it easier for developers and security teams to work together on fixing vulnerabilities in their applications. The security campaigns feature was launched in public preview in late October 2024 and it is now generally available to all GitHub Advanced Security and GitHub Code Security customers. GitHub has been offering tools such as CodeQL to enable developers to automate the discovery of vulnerabilities in their code, and Copilot Autofix to help them fix the identified flaws.  However, an analysis conducted by the Microsoft-owned coding platform found that only a relatively small percentage of findings are actually resolved, with the rest piling on and increasing the organization’s security debt.  Security campaigns aim to help organizations lower security debt, and their use during the public preview period showed that they led to 55% of prioritized security debt being fixed by developers, compared to 10% without the use of security campaigns. Security campaigns are designed to streamline the remediation of vulnerabilities by making collaboration between security and development teams more efficient.  This process has three main steps. First, security teams prioritize the vulnerabilities that need to be fixed, with security campaigns providing predefined templates for common themes (for instance, the most exploited types of flaws). Campaign alerts are selected and a timeline is specified. Then, developers impacted by the campaign are notified and the tasks related to patching vulnerabilities are brought into their workflow, enabling them to plan and manage them just like any other work. Copilot Autofix suggests automatic remediations for all of the alerts in a campaign to make developers’ jobs easier.  “Crucially, security campaigns are not just lists of alerts. Alongside the alerts, campaigns are complemented with notifications to ensure that developers are aware of which alert they (or their team) are responsible for,” GitHub explained.  “To foster stronger collaboration between developers and the security team, campaigns also have an appointed manager to oversee the campaign progress and be on hand to assist developers. And of course: security managers have an organization-level view on GitHub to track progress and collaborate with developers as needed,” it added.

Study Identifies 20 Most Vulnerable Connected Devices of 2025

by

Routers represent the riskiest devices in enterprise networks, containing the largest number of critical vulnerabilities, Forescout notes in a new report. According to the company’s ‘Riskiest Connected Devices of 2025’ report, device risk has increased 15% compared to the previous year, with routers accounting for more than half of the devices plagued by the most dangerous vulnerabilities. The report, which analyzes millions of devices in Forescout’s Device Cloud to identify the riskiest types across IT, IoT, OT, and Internet of Medical Things (IoMT), shows that computers have the largest number of bugs, but not the most dangerous ones. The list of top 20 riskiest devices has changed significantly since last year, with 12 new device types added: ADCs, firewalls, intelligent platform management interfaces (IPMIs), domain controllers, PoS systems, universal gateways, historians, physical access control systems, imaging devices, lab equipment, healthcare workstations, and infusion pump controllers. The remaining eight device types have been on the list for at least one year: routers, VoIP systems, IP cameras, and UPS devices since 2022, NAS and BMS devices since 2023, and NVR and PACS systems since 2024. While meant to secure networks and enable communication with external networks, ADCs, firewalls, and routers are routinely affected by severe vulnerabilities that threat actors often exploit as zero-days. “Network equipment – especially routers – has overtaken endpoints as the riskiest category of IT devices. Driven by increased threat actor focus, adversaries are rapidly exploiting new vulnerabilities in these devices through large-scale attack campaigns,” Forescout says. According to the report, some of the most dangerous security defects are found in IoMT devices such as pump controllers, medication dispensing systems, and workstations. On average, the riskiest devices are within the retail sector, with financial services, government, healthcare, and manufacturing rounding up the top five. Spain, China, the UK, Qatar, and Singapore are impacted the most. Within all five industries, more than 50% of non-legacy Windows devices are running Windows 10, which will reach end-of-support on October 14, 2025. Retail and healthcare are impacted the most, with over 70% of non-legacy Windows devices running Windows 10. Forescout also underlines that special-purpose operating systems such as embedded firmware are more prevalent than mobile platforms across industries, with the healthcare, government, and manufacturing sectors having the highest concentration of such products. The report also shows that organizations in the financial sector have the largest number of open ports on protocols such as SMB, RDP, SSH, and Telnet. Overall, Forescout has observed a decrease in the use of SSH, which provides encrypted communication, and an increase in the use of Telnet, which is not encrypted. “The attack surface in modern organizations now spans IT, IoT and OT, with IoMT adding another layer of complexity in healthcare. Focusing security efforts on a single category is no longer sufficient, as attackers exploit devices across different domains to execute attacks,” Forescout notes. source cybersecurityweek

Warrant Launches First AI-Powered Marketing Compliance Agent for Financial Services, Real Estate, and Insurance

by

Backed by Brickyard, Capitalize VC, and Vast Ventures, Warrant announces $720K in pre-seed funding to simplify marketing compliance in an era of regulatory chaos. NEW YORK, April 9, 2025 /PRNewswire-PRWeb/ —  Warrant, the AI-powered marketing compliance platform purpose-built for regulated industries, today announced the launch of the first AI compliance agent designed specifically to review and approve marketing materials for financial services, real estate, and insurance companies. Alongside the product debut, Warrant has raised $720,000 in pre-seed funding from Brickyard, Capitalize VC, Triangle Tweener Fund, Vast Ventures, and a network of strategic angels, including executives from Brex, Slope, and current regulators. Warrant’s AI agent gives marketing and sales teams instant, tailored feedback on customer-facing content—whether it’s a website, social post, sales deck, email campaign, video, or influencer partnership. What sets Warrant apart is its ability to learn from a company’s previously approved content, providing suggestions that align with a team’s unique brand voice and risk tolerance. Over time, Warrant gets smarter, becoming a trusted extension of legal and compliance teams, proactively guiding marketers and sales reps through complex regulations. Teams can review materials against a growing library of thousands of federal, state, and platform-specific policies—or create their own—and ensure every asset is aligned with their company’s guidelines. Warrant also streamlines approval workflows, allowing teams to collaborate seamlessly with legal, compliance, and partner stakeholders, and track reviews through to final approval. “The most creative marketing doesn’t happen in spite of the rules—it happens when you know how to play by them,” said Austin Carroll, CEO and Founder of Warrant. “At Warrant, we demystify regulations, so businesses can move faster, hire the best people for the job, and unlock the full potential of their teams. In a world where every employee is a brand ambassador—whether they’re posting on LinkedIn or speaking at a conference—compliance isn’t just compliance’s job anymore. It’s everyone’s responsibility. And Warrant makes that possible.” Marketing Compliance Has Never Been More Chaotic Warrant launches at a time of sweeping changes—and chaos—in regulatory environments. As federal deregulation accelerates—whether it’s the rise of meme coins or uncertainty around CFPB enforcement— individual states are stepping in with new rules and enforcement actions, creating a confusing patchwork of policies that vary state by state. Nowhere is this more painful than for marketing and sales teams in financial services, real estate, and insurance, where partner banks and regulators are cracking down on customer-facing content. Companies are seeing approvals take longer, partner bank requirements grow stricter, and compliance risks increase. Warrant’s AI agent was purpose-built to cut through that chaos. Early adopters—including Holdings, Future Money, and Relli—are using Warrant to reduce marketing review times from an industry average of six hours to just 15 minutes. Teams leverage Warrant to speed up partner bank reviews, streamline legal and compliance approvals, and keep marketing and sales campaigns moving—without sacrificing safety or regulatory rigor. AI That Learns. Compliance That Scales. Unlike traditional tools that rely on static, outdated regulations, Warrant’s AI analyzes a constantly updated stream of enforcement actions, regulatory press releases, and sanctions—giving teams a complete picture of what regulators are focused on today. It learns what approved content looks like within each organization and makes intelligent suggestions tailored to their brand voice and risk tolerance. This ensures faster approvals, fewer bottlenecks, and a proactive compliance process that scales as companies grow—keeping teams protected and ahead of emerging risks. With this new funding, Warrant will expand its development of webhooks and integrations across the entire marketing, sales, and customer experience (CX) tech stack. Warrant’s proactive approach allows companies to embed compliance checks directly into the tools their teams already use, reducing risk from overlooked content and extending compliance across the entire organization. Built by Experts in Marketing, Compliance, and AI Warrant’s founding team brings deep expertise in marketing, financial services, and AI. CEO and Founder Austin Carroll previously led financial product marketing at Mercury and Brex, and served as a Product Manager at Capital One, where she experienced firsthand how compliance bottlenecks slow down marketing teams. CTO Daniel Chopson was formerly Chief Technical Officer and Co-Founder at Cove.Tool, where he pioneered the use of AI to interpret federal, state, and local regulations, and also held key engineering roles at Sage. Warrant’s team is supported by advisors from Dave, American Express, Melio, Brex, and current regulators. “Marketing compliance has become a major bottleneck for companies in regulated industries,” said Matt Patterson, Partner at Brickyard. “Warrant is solving a massive pain point by enabling marketing and sales teams to move faster without increasing risk. Their AI-driven approach not only streamlines approvals but also ensures that compliance becomes a seamless part of the creative process. We’re thrilled to back Austin, Daniel, and the Warrant team as they build the future of marketing compliance.” About Warrant Warrant is the AI-powered marketing compliance platform for financial services, insurance, and real estate. The team of marketers, AI engineers, and compliance experts transforms complex regulations into intelligent AI systems that adapt to evolving laws, enforcement actions, and industry standards. The system continuously learns from each organization’s past approvals to provide smarter suggestions that reflect a company’s unique brand voice and risk tolerance. Marketing and compliance teams use Warrant to accelerate reviews, reduce regulatory risk, and ensure every customer-facing asset is compliant—enabling proactive, organization-wide compliance at scale. For more information, visit www.hellowarrant.com Media Contact source PRnewswire

Wix Launches Astro, an AI-powered Assistant for Site and Business Management

by

NEW YORK – Wix.com Ltd. (NASDAQ: WIX), the leading SaaS website builder platform globally1, today announced the launch of Astro, its AI-powered business assistant. This innovative tool simplifies the user experience by allowing users to query and perform various business and back-office tasks directly from the chat interface. Astro marks the beginning of a series of agents that will be rolled out to Wix users, setting the stage for enhanced productivity and providing more opportunities to monetize and grow their businesses.  Astro provides users with seamless access to essential tools and insights, enhancing efficiency and simplifying site operations. Integrated throughout the dashboard, the assistant allows users to ask questions, optimize site settings, complete tasks, and discover useful features. By guiding users toward relevant tools and add-ons, Astro is expected to drive app installations, increase package upgrades, and encourage the adoption of premium features, ultimately improving collections and helping reduce churn. “Astro seamlessly integrates powerful capabilities into a single interface, making it easier than ever for users to manage their businesses efficiently,” said Guy Sopher, Head of the AI Platform Group at Wix. “With this being the largest collection of skills we’ve ever incorporated into a single assistant at Wix, boasting hundreds of different skills and capabilities, with more added every day, Astro acts as a trusted guide, Astro provides real-time insights and personalized recommendations to help users optimize their sites. By streamlining workflows and simplifying access to essential tools, it empowers users to accomplish more in less time. As they engage more deeply with the platform’s features, they can ultimately unlock greater opportunities for growth, visibility, and business success.” Capabilities of the business assistant include: Astro is for Wix and Wix Studio users in English, gradually rolling out in other languages. Learn more about Wix’s AI solutions here. source globenewswire

AppsFlyer and NAVER Announce Audience Integration to Enhance Digital Marketing Capabilities

by

SAN FRANCISCO & SEOUL, South Korea-)–AppsFlyer, the global leader in marketing measurement, attribution, and data analytics, has announced a new integration of AppsFlyer Audiences with NAVER. The integration enhances audience targeting on NAVER, maximizing the impact of marketing campaigns by targeting AppsFlyer’s predefined audience segments for improved precision. This integration enables advertisers to build granular user cohorts, measure, and optimize campaign performance. AppsFlyer will now provide seamless audience activation and real-time performance insights within NAVER’s advertising platform. Audiences created in the AppsFlyer dashboard will be automatically transferred to NAVER and updated daily, enabling advertisers to target users with the most up-to-date audience segments. This allows businesses to reach high-intent potential customers with personalized ads, quickly identify top-performing audiences, and optimize ad spend for maximum efficiency. With automated audience integration, brands can streamline campaign management by eliminating manual uploads and ensuring the latest segmentation data is always applied. “We’re proud to strengthen our collaboration with NAVER to deliver smarter, privacy-first marketing solutions,” said Ronen Mense, President and Managing Director of APAC at AppsFlyer. “This integration brings together NAVER’s scale and AppsFlyer’s expertise as the global standard for measurement, helping Korean brands drive meaningful, data-driven growth in an increasingly complex digital landscape.” “NAVER is proud to expand our AppsFlyer integration with the addition of AppsFlyer Audiences,” said Jaeyoung Han, VP of Business Development at NAVER. “Together, we are enabling advertisers to maximize their marketing efficiency and deliver more relevant experiences to users with enhanced segmentation capabilities.” This enhanced integration is already showing promising results for businesses leveraging both platforms. Eunseo Son, Performance Marketing Team Lead, Woowa Brothers, a leading food delivery and local commerce platform in South Korea, shared their experience: “The integration of AppsFlyer Audiences with NAVER will help us overcome the limitations of previous targeting configurations. The ability to automatically sync and update finely segmented audiences directly from AppsFlyer to NAVER’s Performance Display Ads will greatly improve both targeting accuracy and operational efficiency. We plan to continue leveraging AppsFlyer Audiences to better identify and engage high-potential users across the NAVER ecosystem.” About AppsFlyer AppsFlyer helps brands make good choices for their business and their customers with its advanced measurement, data analytics, deep linking, engagement, fraud protection, data clean room, and privacy-preserving technologies. Built on the idea that brands can increase customer privacy while providing exceptional experiences, AppsFlyer empowers thousands of creators and technology partners to create better, more meaningful customer relationships. To learn more, visit www.appsflyer.com. source -(BUSINESS WIRE

Get 30% off your first purchase

Got it!
X