Apple issues urgent iOS security warning

Critical iOS Vulnerability exploited in advanced cyberattack

Apple has recently released a critical security update following the discovery of an extremely sophisticated vulnerability that could potentially compromise millions of iOS devices. According to security researchers, the vulnerability has been exploited by threat actors to bypass Apple's security measures and install malware without the user’s knowledge.

A complex and targeted exploit

The serious security flaw was identified by Bill Marczak, a senior researcher at Citizen Lab, which specializes in analyzing sophisticated cyber threats. The vulnerability, designated as CVE-2025-24200, exploits a flaw in iOS’ handling of USB connections. Apple has confirmed that this flaw has been actively used in attacks, highlighting the severity of the threat.

Experts describe the attack as a "zero-click exploit," meaning the victim does not need to interact with a malicious file or link to be compromised. These types of attacks are particularly dangerous because they can be used to install spyware or surveillance tools on target devices without the user’s awareness.

Apple responds swiftly – but is it enough?

As part of its response, Apple has issued an emergency update to close the security loophole and protect users from further exploitation. The company has also urged users to enable additional security features and remain cautious about potential threats, as sophisticated attacks like this continue to evolve.

However, the question remains whether the update alone is enough to prevent similar attacks in the future. Zero-click exploits have become an increasing threat to mobile devices, and this is not the first time companies has had to deal with zero-click attacks. A recent example is a different zero-click attack targeting WhatsApp users, which you can read more about here.

Who is behind these attacks?

Although it is still unclear who is specifically responsible for exploiting CVE-2025-24200, such attacks are often linked to state-sponsored groups or Advanced Persistent Threats (APTs). These groups have access to significant resources and develop exploits that can bypass even the most robust security measures. State-sponsored hacking has become an increasing concern, as governments and affiliated groups leverage cyber capabilities for espionage and cyber warfare. However, it remains unclear whether this specific exploit has been used in targeted campaigns or on a broader scale. Learn more about state-sponsored hacking here.

Android users have also been exposed to security threats recently, including vulnerabilities discovered in DeepSeek's Android app, which you can explore in more detail here.

How to protect yourself

To minimize the risk, we recommend the following steps:

• Update your device: Ensure that you install the latest iOS update immediately.

• Enable USB restriction mode: This feature can prevent unauthorized access via a USB device.

• Watch for unusual behavior: If your device suddenly behaves strangely, it may be a sign of compromise.

• Follow strong security practices: Avoid connecting unknown devices to your phone and use a strong password.

The future of iOS security

Although Apple has patched this vulnerability, this case highlights how even the most secure systems can be vulnerable to advanced attacks. It underscores the importance of continuous security updates, vigilance, and a proactive approach to cybersecurity.

At Moxso, we closely monitor developments and recommend that both businesses and individuals stay informed about the latest threats and security measures.