InfoSecBulletin Cybersecurity for mankind

A flaw in various versions of OnePlus’s OxygenOS lets any app access SMS data and metadata without needing permission or user consent. OnePlus is a Shenzhen-based tech company recognized for producing high-quality smartphones at affordable prices. Unlike other major Chinese brands like Huawei and Xiaomi, OnePlus phones are officially sold …

The UK’s National Crime Agency (NCA) has arrested a man in the UK as part of an investigation into a cyber incident impacting Collins Aerospace. The incident, which was reported on 19 September, affected flights at Heathrow and other European airports over the weekend. NCA officers, supported by the South …

Cisco has disclosed a zero-day vulnerability, CVE-2025-20352, in its popular IOS and IOS XE software, which is currently under active exploitation. The flaw in the Simple Network Management Protocol (SNMP) can let remote attackers execute code or cause denial-of-service (DoS) on affected devices. The stack overflow vulnerability (CWE-121) exists in …