Apple Urges iPhone and iPad Users to Install Emergency Security Update
A critical WebKit vulnerability, already exploited in targeted attacks, has prompted Apple and U.S. cybersecurity officials to call for immediate updates to devices.
- Apple has released iOS 18.3.2 and iPadOS 18.3.2 to address a serious WebKit vulnerability, tracked as CVE-2025-24201, which could allow malicious web content to bypass security protections.
- The U.S. Cybersecurity and Infrastructure Security Agency (CISA) has added this flaw to its Known Exploited Vulnerabilities catalog and set a compliance deadline of April 3 for federal agencies.
- The vulnerability has been exploited in sophisticated, targeted attacks against specific individuals using older versions of iOS, but experts warn it could be used more broadly if left unpatched.
- The issue impacts a wide range of Apple products, including iPhones, iPads, and macOS devices, and users are strongly advised to update their software immediately to mitigate the risk.
- Experts recommend additional protective measures such as enabling two-factor authentication, using strong passcodes, and regularly reviewing app permissions to enhance device security.