Apple has just released an urgent update for iPhones and iPads, addressing a security flaw that has already been exploited in real-world attacks. If you haven’t updated yet, now is the time.
Apple just dropped iOS 18.3.1 and iPadOS 18.3.1, and it’s not just another routine update. The software patches a security vulnerability that was actively exploited—meaning bad actors have already used it in real-world attacks.
This flaw could allow someone with physical access to your iPhone or iPad to disable USB Restricted Mode, a security feature designed to block unauthorized data transfers. Apple says the exploit targeted specific individuals in what it describes as a “sophisticated attack.”
Apple addressed the issue with improved state management, making it harder for attackers to bypass security measures. The same patch is also available in iPadOS 17.7.5 for older iPads that can’t run iPadOS 18.
If you have an iPhone that supports iOS 18, install the 18.3.1 update immediately. The same goes for iPads—whether you need iPadOS 18.3.1 or 17.7.5 depends on your model.
While this exploit required physical access, it’s a reminder that even Apple’s tight security can have gaps. Staying up to date is your best defense.