The flaw, an authorization bypass in Apple’s USB Restricted Mode, enables attackers with physical access to disable security protections on locked devices, potentially exposing sensitive data. CVE-2025-24200, cataloged under CWE-863 (Incorrect Authorization), resides in the state management of USB Restricted Mode—a security feature introduced in iOS 11.4.1 to block USB communication with accessories if the device remains locked for over an hour. Organizations reliant on Apple devices for sensitive operations should enforce physical security protocols to deter unauthorized access. Cyber Security News is a Dedicated News Platform For Cyber News, Cyber Attack News, Hacking News & Vulnerability Analysis. Security researchers, including Bill Marczak of the University of Toronto’s Citizen Lab, identified the flaw and reported it to Apple. While Apple has not linked the exploits to specific surveillance vendors, the sophistication aligns with tactics employed by firms like NSO Group, whose Pegasus spyware has historically exploited similar vulnerabilities. Gurubaran is a co-founder of Cyber Security News and GBHackers On Security. Apple confirmed the vulnerability was leveraged in “extremely sophisticated” attacks against high-value individuals, though specifics about the threat actors remain undisclosed. CISA has added the vulnerability to its Known Exploited Vulnerabilities Catalog, advising users to patch the issue before March 5, 2025.
This Cyber News was published on cybersecuritynews.com. Publication date: Mon, 17 Feb 2025 12:45:04 +0000