InfoSecBulletin Cybersecurity for mankind

Cisco warned customers to patch two zero-day vulnerabilities that are actively being exploited in attacks and impact the company’s firewall software. The first one (CVE-2025-20333) allows authenticated, remote attackers to execute arbitrary code on devices running vulnerable Adaptive Security Appliance (ASA) and Firewall Threat Defense (FTD) software, while the second …

A flaw in various versions of OnePlus’s OxygenOS lets any app access SMS data and metadata without needing permission or user consent. OnePlus is a Shenzhen-based tech company recognized for producing high-quality smartphones at affordable prices. Unlike other major Chinese brands like Huawei and Xiaomi, OnePlus phones are officially sold …

The UK’s National Crime Agency (NCA) has arrested a man in the UK as part of an investigation into a cyber incident impacting Collins Aerospace. The incident, which was reported on 19 September, affected flights at Heathrow and other European airports over the weekend. NCA officers, supported by the South …