iOS 18.3.1 Update Released With Fix for Critical, Actively Exploited USB Security Flaw

Apple says it has fixed a security flaw may have been used in an "extremely sophisticated attack against targeted individuals".

Advertisement
Written by David Delima | Updated: 11 February 2025 11:04 IST
Highlights
  • Apple has patched a critical security flaw with the iOS 18.3.1 update
  • The update is available for iPhone XS and newer models
  • iOS 18.3.1 arrives weeks after Apple rolled out the update to iOS 18.3

Apple introduced USB Restricted Mode in 2018

Photo Credit: Pexels/ Sora Shimazaki

iOS 18.3.1 began rolling out to users on Monday, and the latest update for supported iPhone models arrives with an important patch for a critical security flaw. The vulnerability allowed some attackers to gain access to a user's iPhone, even while it was locked. Apple has also confirmed that the security flaw may have been exploited to target some individuals. Users with eligible iPhone models should update to the latest version of iOS, which includes a fix for the vulnerability.

iOS 18.3.1 Update Fixes USB Restricted Mode Vulnerability

Apple's release notes for the iOS 18.3.1 and iPadOS 18.3.1 update state that the company has fixed a vulnerability in the Accessibility service on its mobile and tablet operating systems. According to Apple, the security flaw would allow a physical attack on a locked device, which could be used to disable USB Restricted Mode.

Advertisement

The iPhone maker introduced USB Restricted Mode with iOS 11.4.1 in 2018, and the feature is designed to block all communication with a connected USB accessory. Users need to unlock their device to connect it to their accessory, which won't work if the device has not been unlocked within the past hour.

The latest release notes state that Apple is aware that the security flaw may have been used in an "extremely sophisticated attack against targeted individuals". It's worth noting that an attacker would need to have physical access to a user's device in order to gain access to the device.

Advertisement

Apple has credited Bill Marczak, a researcher at The Citizen Lab at The University of Toronto's Munk School with identifying the security flaw. Marczak has also urged users with eligible iPhone and iPad models to update to the latest iOS 18.3.1 update, which should include a fix for the vulnerability.

iOS 18.3.1 is available for the latest iPhone 16 series, as well as older models going back to the iPhone XS. iPhone and iPad users can launch the Settings app and tap on General > Software Update > Install Now in order to install the update.

 

Get your daily dose of tech news, reviews, and insights, in under 80 characters on Gadgets 360 Turbo. Connect with fellow tech lovers on our Forum. Follow us on X, Facebook, WhatsApp, Threads and Google News for instant updates. Catch all the action on our YouTube channel.

Advertisement

Related Stories

Popular Mobile Brands
  1. Android 17 Beta Rolls Out to Motorola Edge 60 Pro With These Features
  2. Honor X6e Launched With 7,500mAh Battery
  3. Redmi Turbo 6 Max Render Leaks Ahead of Launch
  4. Here's How Much the Vivo S2 Could Cost in India: See Expected Features
  5. Redmi K100 Series Phone Visits Geekbench With This Flagship Snapdragon SoC
  6. JBL Bar 1000MK2 Review: More Than Just an Audio System
  1. Redmi Turbo 6 Max Render Leaks Ahead of Launch: Expected Specifications
  2. Gemini Can Now Read, Summarise, and Draft Replies to Comments in Google Docs 
  3. Paytm Introduces Split Bills for Shared Group Expenses on Its App
  4. India's Telecom User Base Rises in June, Airtel Tops Subscriber Additions: TRAI
  5. Crypto Hacks Top $1 Billion in H1 2026 as Ethereum and Solana Lead Losses: Report
  6. 1inch Introduces Aqua to Unite DeFi Liquidity on 13 Chains
  7. Wuchang: Fallen Feathers Sequel Announced by 505 Games With Original Creator's New Studio Involved
  8. WhatsApp Reportedly Testing Home Screen Voice Message Widget for Android Users
  9. Samsung Galaxy S26 FE Charging Speed Upgrade Seems Unlikely as Phone Reportedly Appears on a Certification Site
  10. Google Launches Gemini-Powered Ask Google Pay in India With a Dedicated In-App AI Chatbot
Download Our Apps
Available in Hindi
© Copyright Red Pixels Ventures Limited 2026. All rights reserved.