InfoSecBulletin Cybersecurity for mankind

The National Institute of Standards and Technology (NIST) has unveiled NIST SP 1308, the “Quick-Start Guide for Cybersecurity, Enterprise Risk Management, and Workforce Management”. Published in March 2026, this report gives a clear way to include cybersecurity risk management (CSRM) in larger enterprise risk management (ERM) plans. The guide highlights …

An urgent warning about three important Apple flaws that are being used by hackers. These security flaws, known as CVE-2025-31277, CVE-2025-43510, and CVE-2025-43520, were added to CISA’s list of Known Exploited Vulnerabilities (KEV). Security experts have connected this group of three flaws to the advanced DarkSword iOS attack method. Hackers …

Hong Kong police can ask for phone or computer passwords from people they think may have broken the National Security Law (NSL). Those who say no might spend a year in jail and pay a fine of up to HK$100,000 ($12,700; £9,600). People who give “false or misleading information” could go …