InfoSecBulletin Cybersecurity for mankind

An urgent warning about three important Apple flaws that are being used by hackers. These security flaws, known as CVE-2025-31277, CVE-2025-43510, and CVE-2025-43520, were added to CISA’s list of Known Exploited Vulnerabilities (KEV). Security experts have connected this group of three flaws to the advanced DarkSword iOS attack method. Hackers …

Hong Kong police can ask for phone or computer passwords from people they think may have broken the National Security Law (NSL). Those who say no might spend a year in jail and pay a fine of up to HK$100,000 ($12,700; £9,600). People who give “false or misleading information” could go …

Microsoft Azure Monitor is being misused in a new phishing scheme that makes bad emails seem real. Attackers are using the service to send back phishing emails that look like real Microsoft security warnings. Threat actors are pretending to be the Microsoft Security Team in fake billing emails. These emails …