InfoSecBulletin Cybersecurity for mankind
U.S. Cybersecurity and Infrastructure Security Agency (CISA) added five security problems affecting Apple, Craft CMS, and Laravel Livewire to its Known Exploited Vulnerabilities (KEV) list on Friday. They are telling federal agencies to fix these issues by April 3, 2026.
The vulnerabilities that have come under exploitation are listed below:
Apple Zero-Day Exploited: Pentagon Data Breach Reportedly Exposes Sensitive Data of 3 Million People
JadePuffer Agentic AI targets and destroys Azure’s cloud resources
“InfoSecCon-2026: Bangladesh’s Cybersecurity Leaders Unite to Shape a Safer Digital Future”
Microsoft Patches CVSS 10.0 Azure AI Foundry Vulnerability Allowing Privilege Escalation
AWS is unable to restore access to Bahrain, one UAE cloud data zone after war damage
Cisco Warns of Critical ISE 0-Day Flaw and Hackers Allegedly Selling Fortinet FortiGate 1-Day Flaw
Anthropic prepares “Claude Money” to analyze bank account and financial data
GhostCode Phishing Kit Evades Microsoft 365 MFA to Hijack Accounts in 78 Seconds
CISA Warns of Cisco Secure Email Gateway 0-Day Flaw Actively Exploited in Attacks
VPN flaw exposed 246,000 personnel records in japan
CVE-2025-31277 (CVSS score: 8.8) – A vulnerability in Apple WebKit that could result in memory corruption when processing maliciously crafted web content. (Fixed in July 2025)
CVE-2025-43510 (CVSS score: 7.8) – A memory corruption vulnerability in Apple’s kernel component that could allow a malicious application to cause unexpected changes in memory shared between processes. (Fixed in December 2025)
CVE-2025-43520 (CVSS score: 8.8) – A memory corruption vulnerability in Apple’s kernel component that could allow a malicious application to cause unexpected system termination or write kernel memory. (Fixed in December 2025)
CVE-2025-32432 (CVSS score: 10.0) – A code injection vulnerability in Craft CMS that could allow a remote attacker to execute arbitrary code. (Fixed in April 2025)
CVE-2025-54068 (CVSS score: 9.8) – A code injection vulnerability in Laravel Livewire that could allow unauthenticated attackers to achieve remote command execution in specific scenarios. (Fixed in July 2025)
The three Apple vulnerabilities were added to the KEV catalog after reports from Google Threat Intelligence Group (GTIG), iVerify, and Lookout about an iOS exploit kit called DarkSword. This kit uses these weaknesses and three other bugs to spread malware like GHOSTBLADE, GHOSTKNIFE, and GHOSTSABER that steals data.
CVE-2025-32432 is believed to have been used as a zero-day by unknown hackers since February 2025, according to Orange Cyberdefense SensePost. Since then, a group called Mimo (also known as Hezb) has been seen taking advantage of the weakness to install a cryptocurrency miner and proxy software for homes.
CVE-2025-54068 is the last item on the list. The Ctrl-Alt-Intel Threat Research team recently warned about its use in attacks by the Iranian hacking group, MuddyWater (also known as Boggy Serpens).
