InfoSecBulletin Cybersecurity for mankind
Apple has issued emergency security updates to fix a zero-day vulnerability, CVE-2025-24200, which is being exploited in targeted attacks on iPhone and iPad users.
The vulnerability lets attackers turn off USB Restricted Mode on a locked device, risking unauthorized access to sensitive data. Apple is aware that this issue may have been used in a highly sophisticated attack on certain individuals.
Microsoft Patches CVSS 10.0 Azure AI Foundry Vulnerability Allowing Privilege Escalation
AWS is unable to restore access to Bahrain, one UAE cloud data zone after war damage
Cisco Warns of Critical ISE 0-Day Flaw and Hackers Allegedly Selling Fortinet FortiGate 1-Day Flaw
Anthropic prepares “Claude Money” to analyze bank account and financial data
GhostCode Phishing Kit Evades Microsoft 365 MFA to Hijack Accounts in 78 Seconds
CISA Warns of Cisco Secure Email Gateway 0-Day Flaw Actively Exploited in Attacks
VPN flaw exposed 246,000 personnel records in japan
Hackers deploy Casbaneiro Trojan that activates on bank websites
German police read Signal, Telegram, WhatsApp messages without breaking encryption
Urgent Patch! cPanel, GitLab Flaws Expose Users to RCE, File and Credential Theft
The company fixed the vulnerability in iOS 18.3.1 and iPadOS 18.3.1 by enhancing state management.
The zero-day vulnerability impacts the following devices:
iPhone XS and later
iPad Pro 13-inch
iPad Pro 12.9-inch (3rd generation and later)
iPad Pro 11-inch (1st generation and later)
iPad Air (3rd generation and later)
iPad (7th generation and later)
iPad mini (5th generation and later)
USB Restricted Mode helps keep your data safe by blocking USB access if your device has been locked for over an hour.
This feature blocks unauthorized access to locked iOS devices to prevent law enforcement from using forensic software. However, a recent vulnerability lets attackers bypass this protection.
Bill Marczak from Citizen Lab, a cybersecurity research group at the University of Toronto, discovered the vulnerability. Citizen Lab is known for identifying advanced cyberattacks.
Apple urges the users to install security updates iOS 18.3.1 and iPadOS 18.3.1 right away to fix the CVE-2025-24200 vulnerability and enhance security.
