Apple Releases Critical Security Update Following Reports of Vulnerabilities
The tech giant's newest update tackles significant security vulnerabilities in iPhones and iPads, in response to alerts about advanced attacks.
Apple Inc. has released an urgent advisory urging millions of users to update their iPhones and iPads after critical security vulnerabilities were discovered.
This announcement, made on February 10, 2024, is part of a response to serious threats found in the devices' software.
The necessity for the update arose from research conducted by Bill Marczak of The Citizen Lab at the Munk School of the University of Toronto, who pointed out that these vulnerabilities could be exploited in highly sophisticated attacks aimed at specific individuals.
In a statement, Apple expressed, "We are aware of a report suggesting that this issue may have been exploited in an extremely sophisticated attack against targeted individuals." The company typically does not release specifics regarding security matters until a complete investigation is finalized.
According to various reports, including one from _Forbes_, the iOS 18.3.1 update addresses a major flaw in the Accessibility features that could potentially disable the USB Restricted Mode on locked devices during a physical attack.
This Restricted Mode, which was first introduced in iOS 11.4.1, is intended to block unauthorized data access via USB connections when a device is locked.
The vulnerability has raised alarms about tools commonly used by hackers, such as Grayshift's GreyKey, which is reportedly operated by contractors previously associated with U.S. intelligence agencies and a former Apple security engineer.
The latest update can be installed on the following devices:
- iPhone XS and later
- iPad Pro (13-inch and later)
- iPad Pro (12.9-inch 3rd generation and later)
- iPad Pro (11-inch 1st generation and later)
- iPad Air (3rd generation and later)
- iPad (7th generation and later)
- iPad Mini (5th generation and later)
In related news, the Federal Bureau of Investigation (FBI) has recently issued a warning about a scam impacting both iPhone and Android users.
This scam allegedly involves misleading text messages that claim to be from toll agencies, demanding immediate payment for supposed outstanding tolls.
Victims receive messages urging them to click on payment links, which lead to fraudulent websites designed to collect sensitive banking information.
The FBI has noted that this scam may be on the rise in various regions, advising users to remain vigilant to prevent potential financial loss.