CVE-2025-24200
Apple releases update of zero-day vuln exploited in the Wild

Apple has issued emergency security updates to fix a zero-day vulnerability, CVE-2025-24200, which is being exploited in targeted attacks on iPhone and iPad users.

The vulnerability lets attackers turn off USB Restricted Mode on a locked device, risking unauthorized access to sensitive data. Apple is aware that this issue may have been used in a highly sophisticated attack on certain individuals.

• Alert
• Cyber Attack
• Vulnerabilities

CVE-2024-55591 and CVE-2025-24472
New SuperBlack ransomware exploits Fortinet flaws

By infosecbulletin / Friday , March 14 2025

Forescout Research- Vedere Labs identified a series of intrusion based on two Fortinet vulnerabilities which began with the exploitation of...

Read More

• Alert
• Vulnerabilities

CVE-2025-25291 & CVE-2025-25292
Attention! GitLab Patched Critical Authentication Bypass Flaws

By infosecbulletin / Thursday , March 13 2025

GitLab has released versions 17.9.2, 17.8.5, and 17.7.7 for its Community and Enterprise Editions to fix security vulnerabilities, including a...

Read More

• Alert
• Vulnerabilities

CVE-2025-20138
Cisco released High Security Alert for IOS XR Software

By infosecbulletin / Thursday , March 13 2025

Cisco has issued a security advisory for a high-severity vulnerability in its IOS XR Software, labeled CVE-2025-20138, with a CVSS...

Read More

• Cyber Attack

400+ IPs Exploiting Multiple SSRF Vulnerabilities

By infosecbulletin / Wednesday , March 12 2025

GreyNoise warns of a coordinated increase in the exploitation of Server-Side Request Forgery (SSRF) vulnerabilities across various platforms. "At least...

Read More

• Alert
• Vulnerabilities

NVIDIA has released update for NVIDIA Riva

By infosecbulletin / Wednesday , March 12 2025

NVIDIA has released a software update for Riva to fix security vulnerabilities that could allow privilege escalation, data tampering, denial...

Read More

• Alert
• Vulnerabilities

CVE-2025-24201
Apple fixes 0-day exploited in “extremely sophisticated attack”

By infosecbulletin / Wednesday , March 12 2025

On Tuesday, Apple fixed a critical zero-day vulnerability affecting nearly all supported iPhones and iPads. The company noted that it...

Read More

• Uncategorized

Microsoft’s March 2025 updates fix 7 zero-day, 57 flaws

By infosecbulletin / Wednesday , March 12 2025

Microsoft's March 2025 Patch Tuesday update fixes 57 flaws, including seven zero-day exploits, six of which are actively being exploited....

Read More

• Alert
• Vulnerabilities

Ballista Botnet infects 6000 Unpatched TP-Link Routers

By infosecbulletin / Tuesday , March 11 2025

Cato CRTL team said, a new botnet campaign dubbed Ballista target the unpatched TP-Link Archer routers. CVE-2023-1389 is a serious...

Read More

• Alert
• Vulnerabilities

CVE-2025-24813
Flaw in Apache Tomcat Exposes Servers to RCE

By infosecbulletin / Tuesday , March 11 2025

A critical vulnerability, CVE-2025-24813, has been found in Apache Tomcat, which could let attackers execute remote code, leak sensitive data,...

Read More

• Alert

CISA Adds 3 Ivanti Endpoint Manager Bugs to KEV

By infosecbulletin / Tuesday , March 11 2025

CISA included three vulnerabilities in Ivanti Endpoint Manager—CVE-2024-13159, CVE-2024-13160, and CVE-2024-13161—in its Known Exploited Vulnerabilities catalog. Federal agencies must address...

Read More

The company fixed the vulnerability in iOS 18.3.1 and iPadOS 18.3.1 by enhancing state management.

The zero-day vulnerability impacts the following devices:

iPhone XS and later
iPad Pro 13-inch
iPad Pro 12.9-inch (3rd generation and later)
iPad Pro 11-inch (1st generation and later)
iPad Air (3rd generation and later)
iPad (7th generation and later)
iPad mini (5th generation and later)

USB Restricted Mode helps keep your data safe by blocking USB access if your device has been locked for over an hour.

This feature blocks unauthorized access to locked iOS devices to prevent law enforcement from using forensic software. However, a recent vulnerability lets attackers bypass this protection.

Bill Marczak from Citizen Lab, a cybersecurity research group at the University of Toronto, discovered the vulnerability. Citizen Lab is known for identifying advanced cyberattacks.

Apple urges the users to install security updates iOS 18.3.1 and iPadOS 18.3.1 right away to fix the CVE-2025-24200 vulnerability and enhance security.

SAML Bypass Auth on GitHub Enterprise Servers to Login