Apple Fixes USB, Embargo Leaks Data, Politics Hinder Cybersecurity
It’s the second week of February, and we are back once again with our weekly dose of fresh cyber news. Threat actors around the world are trying their best to sneak into systems and networks to impart critical damage. Meanwhile, cybersecurity experts are doing their best to curb this growing menace. Experts believe that rapid digitization, the lack of trained experts, and the carelessness of users are the primary reasons why cybercrimes are on the rise around the world.
As the global cybercrime cost is expected to hit $10.5 trillion, experts urge you to prioritize cybersecurity in 2025 and stay educated about what’s going on in the cybersecurity ecosystem.
This bulletin talks about the patch that Apple released urgently to fix the USB vulnerability. Our focus will also be on the ransomware attack on Memorial Hospital. You will also get to know about the ongoing situation around the emerging threat landscape in US space programs.
Let’s not waste any more time and get started!
Urgent patch released by Apple to fix USB vulnerability
Apple has taken swift action and released an urgent patch to protect its users against a sophisticated USB vulnerability. The tech giant believes that threat actors may have targeted specific individuals by exploiting this vulnerability (CVE-2025-24200). This vulnerability was affecting the USB-restricted mode on iPhones and iPads.
Basically, when the USB-restricted mode is on, it is not possible to transfer data by accessing your locked device.
However, this vulnerability was actually enabling hackers to physically connect a modified USB cable to your locked device and easily transfer the data. Thus, the vulnerability was leading to major security risks by allowing unauthorized access to threat actors.
The security patch has been released for the following models:
- iPhone XS and later
- iPad Pro 13 inch
- iPad Pro 12.9- inch third generation
- iPad seventh generation and later
- iPad mini fifth generation and later
If you are using any of these devices, then you should update it at the earliest.
Commercial spyware vendors, like Pegasus, make the most out of such vulnerabilities. The target of such attacks is a specific group of individuals. As of now, the average Apple users are not on the radar of attackers. But to play it safe and avoid any kind of future damage, it is advisable to get your device updated.
Embargo ransomware group published 1.15 Terabytes worth of Memorial Hospital data on the dark web!
The Memorial Hospital in Bainbridge is right now busy informing around 120,000 individuals that their personal data has been compromised because of a ransomware attack. The hospital authority got to know about the attack back in November 2024. The daily operations continued without any interruption even though systems were offline and staff was relying on pen and paper to maintain patient records.
The hospital authority is working closely with cybersecurity experts. A forensic investigation is being carried out to find out the scope of the attack. Details around the type of ransomware attack are still unknown. Embargo has claimed responsibility for the attack. A whopping 1.15 Terabytes worth of data has been published on the Tor leak site.
The hospital authority has notified all the victims of the ransomware attack. Along with that, they are also offering one year’s worth of complimentary identity protection services, a $1 million identity fraud loss reimbursement policy, credit monitoring, and identity theft recovery services through IDX.
Current political moves hampering spacecraft protection against cyberattacks in the US!
During his first tenure, President Donald Trump was seen supporting federal space efforts. However, safeguarding space from cyberattackers seems like a distant dream in the second tenure. NASA (National Aeronautics and Space Administration) is trying its best to safeguard space infrastructure by seeking electronic protection for space software and hardware systems.
However, the Trump administration right now is focusing on deregulating private industries.
For instance, Elon Musk’s SpaceX is aiming for easy and convenient requirements for spacecraft manufacturers. The lobbyists for SpaceX are also trying to disband the National Space Council, whose core duty is to come up with strict policies and regulations for US space programs.
Protecting spacecraft from cyberattacks requires robust cybersecurity measures, including authentication protocols like DMARC, DKIM, and SPF, to safeguard communication channels from spoofing and unauthorized access.
Cybersecurity experts believe that commercial contractors must focus on looming cyber threats as well. They should not ignore the emerging threat landscape in the space ecosystem. Space systems are highly interconnected with national and economic security. That’s precisely why it is important to safeguard the US space system from any kind of threat attack. Experts urge to ‘redouble’ efforts in order to stay ahead of the adversaries.
The current off-the-cuff approach of Trump is thus a cause of concern for space security enthusiasts. Experts believe that, as of now, NASA should watch its own cyber-back to keep attackers at arm’s length instead of relying on the government for space cybersecurity enhancement.