Apple rolled out an important update on Monday (10) for various devices such as iPhones, iPads, Macs, Apple Watches, and Vision Pro. The iOS 18.3.1 and iPadOS 18.3.1 updates address a security issue related to the USB restriction mode, which could potentially lead to unauthorized access to sensitive data.
Summary of necessary information.
- Apple launched iOS 18.3.1 and iPadOS 18.3.1 to address a critical security vulnerability.
- Invaders could potentially gain access to protected data using forensic tools like Cellebrite and GrayKey due to a vulnerability.
- The latest update can now be downloaded on iPhone XS and newer models, as well as compatible iPad models.
What occurred?
The vulnerability was found by Bill Marczak, a researcher at Citizen Lab, University of Toronto. It was related to the USB restriction mode that prevents data transfer when an iPhone or iPad is locked for seven days. Apple has enhanced this protection in newer versions, causing inactive devices to restart after 72 hours.
Hackers could bypass the security feature by using tools like Cellebrite and GrayKey, allowing them to access protected data without the device owner’s password if they had physical access to the device.
Forensic tools like the ones used in this attack are not limited to governments or intelligence agencies, as shown by a report from Amnesty International in December 2024. In Serbia, authorities employed these tools to access phones of journalists and activists and inject malware.
How did Apple address the issue?
Apple has enhanced the security of USB restriction mode in iOS 18.3.1 and iPadOS 18.3.1 to prevent unauthorized disabling and strengthen device state management for better protection.
The latest edition is accessible to:
- iPhones XS and above;
- iPad Pro models (13-inch, 12.9-inch, and 11-inch), iPad Air 3, iPad 7, and iPad mini 5.
What should be done at this moment?
We strongly advise updating your iPhone or iPad promptly to safeguard your security from potential vulnerabilities. To do so, navigate to Settings > General > Software Update and install the latest version available.