signalblur📡🛸

@signalblur.bsky.social

Cloud Security Researcher Founder of https://magonia.io #Cloud #Container #NSM #Malware #CTI #ThreatIntel UFO Enthusiast Opinions are my own. He/Him

While he was detained at Dilley for over four months, 13-year-old Gustavo Santiago said he felt as if he would “never get out.” “I just ask that you don’t forget about us,” he told ProPublica in a video call. (Published Feb.)

The Kids Trump Sent to ICE’s Dilley Detention Center

ProPublica went inside the immigrant detention center for families in Dilley, Texas. Children held there told us about the anguish of being ripped from their lives in the United States and the fear of...

propublica.org

Imagine hearing complaining about bar fights in response to losing one from someone whose track record is literally not just starting every single bar fight, but making starting bar fights their purpose in life. This is what every Republican complaining about gerrymandering sounds like right now.

Greg Sargent@gregsargent.bsky.social · 5mo ago

If Republicans are really upset about gerrymandering, then they can join Dems in doing something to end it on both sides. Rep Jamie Raskin tells me he'd be "delighted" to work with Rs on future bills (epic trolling here): newrepublic.com/article/2093...

Trump went from making insane genocidal threats this morning to hyping the “golden age” of Iran hours later, and he received no concessions in between. He’s an absolute basket case who needs to be removed from power before he follows through on one of his mass murder fantasies.

NEW: Under AG Pam Bondi, the DOJ has dropped 23,000 criminal cases — including hundreds of investigations into terrorism, white-collar crime and drugs — while prosecuting 32,000 new immigration cases in just the first six months of Trump’s second term.

Trump’s Justice Department Dropped 23,000 Criminal Investigations in Shift to Immigration

Under Attorney General Pam Bondi, the DOJ abandoned a record number of cases — including hundreds of investigations into terrorism, white-collar crime and drugs — in just the first six months of Presi...

propublica.org

The US government collected over $1 billion in immigration fees then refused to process the applications. No denials. No refunds. Just silence. This is the largest fee fraud in the history of the American immigration system. Here's what's happening. 🧵

‼️Cambodia aims to shut down ALL online scam centers there by the end of April and they're very serious about this. Just last night they arrested 49 scammers, confiscated 687 phones, and countless SIM cards. What's withholding other countries from doing the same?

CISA Warns of Apple Vulnerabilities Linked to DarkSword iOS Exploit Chain Exploited in Attacks

CISA Warns of Apple Vulnerabilities Linked to DarkSword iOS Exploit Chain Exploited in Attacks

An urgent warning regarding three critical Apple vulnerabilities that threat actors are actively exploiting in the wild. These security flaws, officially tracked as CVE-2025-31277, CVE-2025-43510, and CVE-2025-43520, were recently added to CISA’s Known Exploited Vulnerabilities (KEV) catalog. Security researchers have linked this specific triad of vulnerabilities to the sophisticated  DarkSword iOS exploit chain , which attackers use in tandem to compromise and manipulate a wide range of Apple devices. The DarkSword Exploit Mechanism The DarkSword campaign relies on chaining these three distinct vulnerabilities to achieve total system compromise. The attack sequence begins with CVE-2025-31277, a severe buffer overflow vulnerability affecting multiple Apple operating systems. This flaw occurs when the target’s device processes maliciously crafted web content, triggering immediate memory corruption within the web processing engine. This initial entry point provides the attackers with the necessary foothold to execute preliminary arbitrary code on the victim’s device without requiring extensive user interaction. Once initial access is established, the exploit chain leverages CVE-2025-43510 to bypass internal security boundaries. This vulnerability stems from improper lock-state checking, leading to severe memory corruption in which a malicious application can cause unexpected changes to memory shared between processes. By exploiting this flaw, attackers can manipulate  shared memory to elevate their privileges and prepare the operating system to execute the final payload.​ The exploit chain culminates with the execution of CVE-2025-43520. This critical memory corruption issue affects the core of the operating system. Exploiting this local vulnerability allows a malicious application to write directly to kernel memory or cause the system to terminate unexpectedly. By gaining kernel-level write access, threat actors gain complete control over the compromised device, bypassing Apple’s native sandbox protections and enabling persistent surveillance or data exfiltration. The scope of this vulnerability chain is exceptionally broad, affecting nearly the entire modern Apple ecosystem. Because the underlying vulnerable components handle web content processing and fundamental kernel operations across different platforms, the threat extends far beyond just mobile phones. The affected product list is comprehensive, encompassing Apple Safari, iOS, watchOS, visionOS, iPadOS, macOS, and tvOS . This cross-platform impact means network defenders must aggressively assess their entire fleet of corporate and personal devices to prevent lateral movement or data breaches. Mitigations To counter the active exploitation of these vulnerabilities, CISA mandates that federal agencies and highly encourages private organizations to take immediate action. System administrators must apply the latest mitigations and security updates from Apple , including iOS 18.7.2, macOS Sequoia 15.7.2, and watchOS 26.1. If direct patches or mitigations are unavailable for specific legacy systems, CISA explicitly advises organizations to discontinue the use of the vulnerable product to prevent potential network compromise. Under Binding Operational Directive (BOD) 22-01, federal civilian executive branch agencies have a strict deadline to remediate these vulnerabilities by April 3, 2026. Follow us on Google News , LinkedIn , and X for daily cybersecurity updates. Contact us to feature your stories. The post CISA Warns of Apple Vulnerabilities Linked to DarkSword iOS Exploit Chain Exploited in Attacks appeared first on Cyber Security News .

cybersecuritynews.com