Apple Releases Emergency Patch for iOS and iPadOS Vulnerability
Apple has issued an emergency security update for iOS and iPadOS devices to address a critical vulnerability that could allow malicious actors to disable USB Restricted Mode on locked devices. The vulnerability, identified as CVE-2025-24200, was actively exploited in sophisticated physical attacks targeting specific individuals.
USB Restricted Mode is a security feature that prevents data transfer through the Lightning (or USB-C) port when the device has been locked for more than an hour. This feature is designed to protect against hacking tools that attempt to bypass passcodes or extract data via USB connections.
Apple’s latest update, iOS 18.3.1 and iPadOS 18.3.1, includes improved state management to fix the issue. The company has acknowledged that the vulnerability may have been exploited in an extremely sophisticated attack against specific targeted individuals. While Apple did not provide specific details, the wording suggests that the vulnerability might have been used by law enforcement and other state-sponsored agencies to unlock iPhones from individuals of high interest.
The update is available for a range of devices, including iPhone XS and later, iPad Pro 12.9-inch (3rd generation) and later, iPad Pro 11-inch (1st generation) and later, iPad Air (3rd generation) and later, iPad (7th generation) and later, and iPad mini (5th generation) and later.
Apple users are strongly advised to update their devices immediately to protect against potential attacks.
How to install the update:
- Make sure you have Wi-Fi connection and its stable
- Go to “Settings” app on your iPhone or iPad
- Next tap on “General” and then select “Software Update”
- If the update for iOS 18.3.1 or iPadOS 18.3.1 is available, then tap “Update Now”
- Follow the on-screen instructions to complete the process
- Once the update is installed, your device will restart automatically