Apple has rolled out an urgent security update iOS 18.3.2 to address a zero-day vulnerability, CVE-2025-24201, which could allow hackers to bypass security measures and access sensitive user data.
What’s the Issue?
The vulnerability lies in WebKit, the browser engine used by Safari, Mail, and the App Store. It exploits an out-of-bounds write issue, enabling malicious web content to bypass Apple’s Web Content sandbox. Apple confirmed that the flaw has already been exploited in targeted attacks, particularly on devices running iOS versions older than 17.2. Cybersecurity experts suggest these attacks may involve state-sponsored hackers or advanced cybercriminal groups.
Affected Devices
The security flaw impacts a wide range of Apple devices, including:
- iPhones: iPhone XS and later models
- iPads: iPad Pro (all models from 3rd gen), iPad Air (3rd gen and later), iPad (7th gen and later), and iPad Mini (5th gen and later)
Apple has urged users to update their devices immediately to mitigate risks.
How to Update
To install the iOS 18.3.2 or iPadOS 18.3.2 update:
- Open Settings.
- Tap General.
- Select Software Update.
- Download and install the latest version.
The device will restart once the update is complete.
Additional Security Tips
To further protect your Apple devices, experts recommend:
- Enabling two-factor authentication (2FA) for your Apple ID.
- Using a strong alphanumeric passcode instead of a simple PIN.
- Activating Face ID or Touch ID for added security.
- Regularly reviewing app permissions.
- Downloading apps only from the Apple App Store.
- Using Apple’s App Privacy Report to monitor app activity.
- Keeping Find My iPhone enabled.
- Using a password manager for secure credential storage.
Why It Matters
Zero-day vulnerabilities like CVE-2025-24201 are particularly dangerous as they are exploited before developers can release fixes. While Apple has not disclosed the full scope of the attacks, cybersecurity experts stress the importance of timely updates to prevent data breaches.
Apple has advised all users to install the latest update immediately to ensure their devices remain secure.