# Apple fixes iPhone and iPad bug used in an "extremely sophisticated attack"

**URL:** https://discuss.privacyguides.net/t/apple-fixes-iphone-and-ipad-bug-used-in-an-extremely-sophisticated-attack/24843
**Category:** News
**Tags:** article
**Created:** 2025-02-10T19:43:30Z
**Posts:** 5

## Post 1 by @jonah — 2025-02-10T19:43:30Z

> **[Apple fixes iPhone and iPad bug used in an 'extremely sophisticated attack' |...](https://techcrunch.com/2025/02/10/apple-fixes-iphone-and-ipad-bug-used-in-an-extremely-sophisticated-attack/)**
>
> Unknown attackers may have exploited a zero-day bug to access data on locked phones, according to Apple.

> On Monday, Apple released updates for its mobile operating systems for iOS and iPadOS, which fixed a flaw that the company said “may have been exploited in an extremely sophisticated attack against specific targeted individuals.”

> Based on its language used in its security update, Apple hints that the attacks were most likely carried out with physical control of a person’s device, meaning whoever was abusing this flaw had to connect to the person’s Apple devices with a forensics device like [Cellebrite](https://techcrunch.com/2023/08/19/cellebrite-asks-cops-to-keep-its-phone-hacking-tech-hush-hush/) or [Graykey](https://techcrunch.com/2020/11/09/decrypted-graykey-apple-bugs-capcom-hacked/), two systems that allow law enforcement to unlock and access data stored on iPhones and other devices.

> **[About the security content of iOS 18.3.1 and iPadOS 18.3.1 - Apple Support](https://support.apple.com/en-us/122174)**
>
> This document describes the security content of iOS 18.3.1 and iPadOS 18.3.1

> Impact: A physical attack may disable USB Restricted Mode on a locked device. Apple is aware of a report that this issue may have been exploited in an extremely sophisticated attack against specific targeted individuals.
> 
> Description: An authorization issue was addressed with improved state management.
> 
> CVE-2025-24200: Bill Marczak of The Citizen Lab at The University of Toronto’s Munk School

I’m curious, has Apple _ever_ mentioned an “extremely sophisticated attack” in their release notes before? Not to my knowledge :eyes:

---

## Post 2 by @KevPham — 2025-02-10T21:51:59Z

Citizen Lab strikes again with the CVE report!

---

## Post 3 by @anon64393658 — 2025-02-11T00:22:22Z

Cellebrite is having a bad day.

**Good**

---

## Post 4 by @camilasaunder89 — 2025-02-11T12:45:56Z

Yes this update is recommended for all Apple users. It fixes Critical, Actively Exploited USB Security Flaw.

---

## Post 5 by @anon39279085 — 2025-02-11T12:57:28Z

it is only actively exploited when there’s physical access to the device.  
Anywho do still update but point stands.