- Update of the Apleza Vecha for iOS and iPados devices with safety patch
- States that the update corrects a USB restriction mode that disables error
- The error was being abused in nature, says Apple
Apple has launched a new patch for iOS and iPados devices to solve a recently discovered failure, which would normally be extraordinary, if Apple had not described the vulnerability paveled as dramatically as it did.
In a security notice, the company said it would launch iOS 18.3.1 and Ipados 18.3.1 to address CVE-2025-24200, a failure that affects many of its iPhones and iPads that could allow a malicious actor to execute an “attack” attack Physical “That disables the USB restricted mode in a blocked device.
The USB restricted mode is a security feature that prevents data transfer through the Lightning port (or USB-C) when the device has been blocked for more than an hour. This helps protect against piracy tools trying to avoid access codes or extract data through USB connections.
Breaking in closed iPhones
Apple said he solved the problem with improved state management, but added: “Apple is aware of a report that this problem may have been exploited in an extremely sophisticated attack against specific specific individuals.”
The writing here, although it is not specific, suggests that vulnerability could have been used by the Police and other agencies sponsored by the State to unlock iPhones of individuals of great interest.
Apple has a long history of conflict with the United States government. Although the latter demanded, on some occasions, that Apple delivered access to the seized iPhones of alleged terrorists and other criminals, Apple declined vehemently, arguing that such movement would undermine the privacy of all users and, therefore, would ruin the Mark itself.
As a result, the United States government hired cybersecurity agencies of third parties that claimed that they had work methods to break into blocked iPhones. As Techcrunch Recently informed, Amnesty International documented a series of attacks by Serbian authorities where they used Cellebrite, an Israeli digital intelligence company known for their telephone forensic tools that supposedly used to extract data from blocked and encrypted smartphone data, to unlock the phones of activists and journalists in journalists in the country, and then install malware in them.
Through Techcrunch
