Apple Releases Critical Security Update Following Vulnerability Reports
The latest update from the tech giant tackles significant security vulnerabilities in iPhones and iPads, in response to alerts about advanced attacks.
Apple Inc. has released an urgent alert advising millions of its users to update their iPhones and iPads due to the identification of critical security weaknesses.
The announcement, made on February 10, 2024, is a response to significant threats discovered within the devices' software.
This update was prompted by research from Bill Marczak at The Citizen Lab at the University of Toronto's Munk School, who pointed out that the vulnerabilities might be exploited in highly advanced attacks targeting specific individuals.
In their statement, Apple mentioned, "We are aware of a report indicating that this issue may have been leveraged in an incredibly sophisticated attack against specifically targeted individuals." The company chooses not to publicly share details about security issues until comprehensive investigations are concluded.
Reports, including one from _Forbes_, indicate that the iOS 18.3.1 update addresses a crucial flaw in the Accessibility features that could inadvertently disable the USB Restricted Mode on locked devices during a physical attack.
This Restricted Mode, first implemented in iOS 11.4.1, is intended to prevent unauthorized data access via USB connections when a device is locked.
The vulnerability raises alarms about tools used by hackers, such as Grayshift's GreyKey, which is allegedly operated by contractors with previous connections to U.S. intelligence agencies and a former Apple security engineer.
The latest update is applicable for the following devices:
- iPhone XS and newer
- iPad Pro (13-inch and newer)
- iPad Pro (12.9-inch 3rd generation and newer)
- iPad Pro (11-inch 1st generation and newer)
- iPad Air (3rd generation and newer)
- iPad (7th generation and newer)
- iPad Mini (5th generation and newer)
In related news, the Federal Bureau of Investigation (FBI) has recently issued a warning about a scam impacting both iPhone and Android users.
This scam reportedly consists of fraudulent text messages claiming to be from toll agencies, demanding immediate payment for supposed unpaid tolls.
Victims receive messages encouraging them to click on payment links, which lead to fake websites designed to steal sensitive banking information.
The FBI has noted that this scam may be spreading across various regions, urging users to remain vigilant to avoid potential financial losses.
The announcement, made on February 10, 2024, is a response to significant threats discovered within the devices' software.
This update was prompted by research from Bill Marczak at The Citizen Lab at the University of Toronto's Munk School, who pointed out that the vulnerabilities might be exploited in highly advanced attacks targeting specific individuals.
In their statement, Apple mentioned, "We are aware of a report indicating that this issue may have been leveraged in an incredibly sophisticated attack against specifically targeted individuals." The company chooses not to publicly share details about security issues until comprehensive investigations are concluded.
Reports, including one from _Forbes_, indicate that the iOS 18.3.1 update addresses a crucial flaw in the Accessibility features that could inadvertently disable the USB Restricted Mode on locked devices during a physical attack.
This Restricted Mode, first implemented in iOS 11.4.1, is intended to prevent unauthorized data access via USB connections when a device is locked.
The vulnerability raises alarms about tools used by hackers, such as Grayshift's GreyKey, which is allegedly operated by contractors with previous connections to U.S. intelligence agencies and a former Apple security engineer.
The latest update is applicable for the following devices:
- iPhone XS and newer
- iPad Pro (13-inch and newer)
- iPad Pro (12.9-inch 3rd generation and newer)
- iPad Pro (11-inch 1st generation and newer)
- iPad Air (3rd generation and newer)
- iPad (7th generation and newer)
- iPad Mini (5th generation and newer)
In related news, the Federal Bureau of Investigation (FBI) has recently issued a warning about a scam impacting both iPhone and Android users.
This scam reportedly consists of fraudulent text messages claiming to be from toll agencies, demanding immediate payment for supposed unpaid tolls.
Victims receive messages encouraging them to click on payment links, which lead to fake websites designed to steal sensitive banking information.
The FBI has noted that this scam may be spreading across various regions, urging users to remain vigilant to avoid potential financial losses.