InfoSecBulletin Cybersecurity for mankind

A newly patched security flaw in Broadcom VMware Tools and VMware Aria Operations has been exploited by a threat actor named UNC5174 since mid-October 2024, according to NVISO Labs. The vulnerability identified as CVE-2025-41244 (CVSS score: 7.8) is a flaw that allows local privilege escalation, impacting the following versions – …

Security researchers found a zero-click vulnerability in WhatsApp that lets remote code execution (RCE) on iOS, macOS, and iPadOS. The attack chain uses two vulnerabilities, CVE-2025-55177 and CVE-2025-43300, to compromise a device without user interaction. Researchers from DarkNavyOrg demonstrated a “zero-click” exploit that targets WhatsApp. This attack involves sending a …

Afghanistan has plunged into a nationwide internet blackout, with the Taliban cutting off more than 43 million citizens from global communications as part of what it has described as “morality measures.” Internet watchdog Netblocks said Monday in a post on X that multiple networks had been disconnected through the morning …