Skip to main content

Apple Fixes Zero-Day Exploited In 'Extremely Sophisticated' Attacks

3 months 1 week ago
Apple has released emergency security updates for iOS 18.3.1 and iPadOS 18.3.1 to patch a zero-day vulnerability (CVE-2025-24200) that was exploited in "extremely sophisticated," targeted attacks. The flaw, which allowed a physical attack to disable USB Restricted Mode on locked devices, was discovered by Citizen Lab and may have been used in spyware campaigns; users are strongly advised to install the update immediately. BleepingComputer reports: USB Restricted Mode is a security feature (introduced almost seven years ago in iOS 11.4.1) that blocks USB accessories from creating a data connection if the device has been locked for over an hour. This feature is designed to block forensic software like Graykey and Cellebrite (commonly used by law enforcement) from extracting data from locked iOS devices. In November, Apple introduced another security feature (dubbed "inactivity reboot") that automatically restarts iPhones after long idle times to re-encrypt data and make it harder to extract by forensic software. The zero-day vulnerability (tracked as CVE-2025-24200 and reported by Citizen Lab's Bill Marczak) patched today by Apple is an authorization issue addressed in iOS 18.3.1 and iPadOS 18.3.1 with improved state management. The list of devices this zero-day impacts includes: - iPhone XS and later, - iPad Pro 13-inch, iPad Pro 12.9-inch 3rd generation and later, iPad Pro 11-inch 1st generation and later, iPad Air 3rd generation and later, iPad 7th generation and later, and iPad mini 5th generation and later

Read more of this story at Slashdot.

BeauHD

Bus

3 months 1 week ago
The bus was traveling on a busy section of highway when it veered off a bridge and plunged about 65 feet into a ravine.

Microchip Company Ceases Operations, Pet Owners Urged To Re-Register

3 months 1 week ago
An anonymous reader quotes a report from CBS News: Animal shelters, rescues, and veterinarian clinics around the U.S. are posting on social media telling pet owners to check their four-legged friends' microchips after learning a major microchip company [called Save This Life] is no longer providing services. [...] If you're unsure which company your cats or dogs' chips are registered with, check them. "You can go to your local veterinarian office, a local police station, or even a local animal shelter like HARP, and we can help check that for you and scan your animal. And then you take that number that's on there and there's a tool online where you can go look it up," [said Dan Cody, Executive Director of Humane Animal Rescue of Pittsburgh]. He said you check the number by using the AAHA Universal Microchip Lookup Tool at this link. If you discover your pet's microchip was registered to the company that's ceased operations, you'll need to register with a different company. "So, if you find that you are affected by this, you're going to want to go to one of these other websites that do the registrations. So, things like AKC Reunite, and PetLink. 24PetWatch these are all large companies who've been around for a long time and have good reputations," said Cody. The American Kennel Club shared a post from its AKC Reunite Facebook page, encouraging people to enroll in microchips with AKC Reunite. The post said in part, "If your dog or cat has a microchip number that starts with 991 or 900164 then it could be a Save This Life microchip. Save This Life suddenly closed, and your pet may not be protected." Cody said if your furry best friend isn't microchipped, take them to a vet or shelter like HARP to get one implanted under their skin so they have a permanent ID. Microchipping can be done at HARP's East Side and North Side Veterinary Medical Center by appointment.

Read more of this story at Slashdot.

BeauHD