By 
Apple has released iOS 18.3.1 and iPadOS 18.3.1 to address a zero-day vulnerability that was exploited in highly sophisticated attacks. The flaw allowed attackers to disable USB Restricted Mode, a critical security feature designed to prevent unauthorized access to device data.
USB Restricted Mode Exploit
USB Restricted Mode is a security feature that blocks USB accessories from connecting to a locked device after a set period. The vulnerability, tracked as CVE-2025-24200, could enable a physical attacker to bypass this restriction, posing a serious security risk.
According to Apple’s release notes, the company is aware of reports that this flaw has been exploited in real-world attacks targeting specific individuals. The issue stemmed from an authorization flaw within the Accessibility framework, which Apple has addressed through improved state management.
The update is available for:
- iPhone XS and later models
- iPad Pro, iPad Air, iPad, and iPad mini models
The vulnerability was reported by Bill Marczak from The Citizen Lab at the University of Toronto’s Munk School. Apple has a policy of withholding specific details about security vulnerabilities until patches are fully deployed, ensuring users have adequate protection.
Apple urges all eligible users to install the latest update promptly to mitigate potential threats and maintain device security.
