Apple Patches Actively Exploited iOS Zero-Day CVE-2025-24200 in Emergency Update
Briefly

Apple has issued urgent security updates for iOS and iPadOS following the discovery of a serious vulnerability (CVE-2025-24200), which allows malicious actors to disable USB Restricted Mode on locked devices. This authorization issue could enable cyber-physical attacks that necessitate physical access to the device. USB Restricted Mode is critical for protecting sensitive data from digital forensics tools. Apple has not disclosed further details but acknowledged that the flaw was exploited in sophisticated attacks targeting select individuals. The update is available for multiple devices, strengthening security against exploitation.
Apple's latest security update addresses a serious vulnerability (CVE-2025-24200) that allows disabling USB Restricted Mode on locked devices, posing significant risks.
The flaw, discovered by researcher Bill Marczak, could be exploited through physical access and was noted to have been used in sophisticated targeted attacks.
Read at The Hacker News
[
|
]