Fact Checked by 
Apple dropped an iOS 18.3.1 update on Monday (Feb. 10), just a few weeks after rolling out iOS 18.3, amid a security issue. The tech giant says it fixes a vulnerability that may have been actively exploited in a “highly sophisticated attack.” In other words, this isn’t an update you want to skip as an iPhone user.
Thankfully, this isn’t one of those attacks that hackers can pull off remotely. Instead, they’d need physical access to your device. According to Apple’s release notes for iOS 18.3.1, “A physical attack may disable USB Restricted Mode on a locked device.”
Update your iPhones.. again! iOS 18.3.1 out today with a fix for an ITW USB restricted mode bypass (via Accessibility) https://t.co/jcrsab7RGu pic.twitter.com/ER42QQcsLj
— Bill Marczak (@billmarczak) February 10, 2025
In simple terms, if someone gets their hands on your iPhone or iPad, they could potentially bypass Apple’s security and access all your data. USB Restricted Mode is a security feature that blocks USB accessories from connecting to your iPhone through the Lightning port if your device has been locked for more than an hour. It basically helps prevent hackers (or even law enforcement tools) from using specialized devices to break into your phone.
Apple hasn’t shared many other details on exactly how this flaw is being exploited, but the wording of the statement is interesting: “Apple is aware of a report that this issue may have been exploited in an extremely sophisticated attack against specific targeted individuals.”
ReadWrite has previously reported another Apple software fix for iPhone, iPad, and Mac users. In November, the company said it is aware of two vulnerabilities that “may have been actively exploited on Intel-based Mac systems.”
How to download iOS 18.3.1 update
To get the update, head to Settings > General > Software Update, tap Update Now, and follow the on-screen steps.
Apple also provided fresh updates for other operating systems including the macOS Sequoia 15.3.1, macOS Sonoma 14.7.4, macOS Ventura 13.7.4, watchOS 11.3.1, and visionOS 2.3.1. According to Apple’s security updates page, these releases don’t fix any currently known vulnerabilities (CVEs), but that could change as new security issues get disclosed.
ReadWrite has reached out to Apple for comment.
Featured image: Canva
