InfoSecBulletin Cybersecurity for mankind
CISA has issued an urgent warning about a critical zero-day vulnerability in Apple iOS and iPadOS, known as CVE-2025-24200, which is currently being exploited in targeted attacks.
An authorization bypass flaw in Apple’s USB Restricted Mode allows attackers with physical access to turn off security protections on locked devices, risking exposure of sensitive data. The flaw is due to an incorrect authorization vulnerability (CWE-863) in Apple’s mobile operating systems.
About thousands of leaked AWS keys Held Full Admin Rights
US Bank investigates LockBit’s Data Breach Claims
Five new malware families actively targeting Asian Gov.t infra
T-Mobile Cuts Cables to Remove Chiness Salt Typhoon Hackers from Network
Splunk, Zyxel Patch Multiple Flaws Enabling RCE and Root Command Execution
“Zombie Card” attack revels expired Visa card may be used for contactless payments
Critical Zimbra RCE Flaw Actively Exploited in the Wild
Operation CameraSwarm
A single hacker compromise 1400+ Dahua camera worldwide
Cl0p Ransomware Listed 40+ Victims of PTC Windchill Campaign
Oracle Issues 943 Security Patches, Including Critical WebLogic Flaw
Attackers can disable USB Restricted Mode, a security feature that limits USB access for locked devices after an hour of inactivity. This allows them to bypass protections against unauthorized data transfers and brute-force passcode attempts.
This vulnerability is especially worrisome for high-risk individuals like journalists, activists, and corporate executives, as their devices often hold sensitive information.
CISA confirmed the vulnerability is actively being exploited, but its connection to ransomware campaigns is not yet verified.
The agency included the flaw in its Known Exploited Vulnerabilities (KEV) catalog on February 12, 2025, requiring federal agencies to implement mitigations by March 5, 2025. Private-sector organizations and individuals are also urged to take similar action.
Apple has not confirmed if a patch is being developed, but CISA advises users to apply updates as soon as they’re available.
