InfoSecBulletin Cybersecurity for mankind
CISA has issued an urgent warning about a critical zero-day vulnerability in Apple iOS and iPadOS, known as CVE-2025-24200, which is currently being exploited in targeted attacks.
An authorization bypass flaw in Apple’s USB Restricted Mode allows attackers with physical access to turn off security protections on locked devices, risking exposure of sensitive data. The flaw is due to an incorrect authorization vulnerability (CWE-863) in Apple’s mobile operating systems.
AWS SNS misused for Data Exfiltration and Phishing
Researcher found non protected database form ESHYFT containig 86000 records
CVE-2024-55591 and CVE-2025-24472
New SuperBlack ransomware exploits Fortinet flaws
CVE-2025-25291 & CVE-2025-25292
Attention! GitLab Patched Critical Authentication Bypass Flaws
CVE-2025-20138
Cisco released High Security Alert for IOS XR Software
400+ IPs Exploiting Multiple SSRF Vulnerabilities
NVIDIA has released update for NVIDIA Riva
CVE-2025-24201
Apple fixes 0-day exploited in “extremely sophisticated attack”
Microsoft’s March 2025 updates fix 7 zero-day, 57 flaws
Ballista Botnet infects 6000 Unpatched TP-Link Routers
Attackers can disable USB Restricted Mode, a security feature that limits USB access for locked devices after an hour of inactivity. This allows them to bypass protections against unauthorized data transfers and brute-force passcode attempts.
This vulnerability is especially worrisome for high-risk individuals like journalists, activists, and corporate executives, as their devices often hold sensitive information.
CISA confirmed the vulnerability is actively being exploited, but its connection to ransomware campaigns is not yet verified.
The agency included the flaw in its Known Exploited Vulnerabilities (KEV) catalog on February 12, 2025, requiring federal agencies to implement mitigations by March 5, 2025. Private-sector organizations and individuals are also urged to take similar action.
Apple has not confirmed if a patch is being developed, but CISA advises users to apply updates as soon as they’re available.
