Apple Issues Emergency Security Updates for Zero-Day

Apple has released emergency security updates, iOS 18.3.1 and iPadOS 18.3.1, to address a critical zero-day vulnerability, CVE-2025-24200, which was being exploited in sophisticated attacks targeting specific individuals. The flaw, discovered by Bill Marczak from Citizen Lab, allowed attackers with physical access to bypass USB Restricted Mode on locked devices, raising concerns about potential data breaches and espionage. This security update aims to protect users by improving state management to prevent unauthorized access. Apple urges all users to update their devices immediately to mitigate the risk of further exploitation. The vulnerability has drawn attention due to its use in targeted attacks, possibly involving commercial spyware used by law enforcement and government agencies. This update highlights the ongoing challenges tech companies face in securing devices against sophisticated cyber threats.