Apple has issued an urgent security warning to millions of iPhone and iPad users, urging them to update their devices immediately following a serious security breach that could allow hackers to gain full admin access.
“Extremely Sophisticated” Attack Exploits USB Restricted Mode Flaw
The security flaw stems from an issue with USB Restricted Mode, a key security feature designed to block unauthorized access to locked Apple devices after one hour of inactivity.
Apple confirmed that the vulnerability was exploited in a highly sophisticated attack targeting specific individuals.
“A physical attack may disable USB Restricted Mode on a locked device,” Apple stated.
“Apple is aware of a report that this issue may have been exploited in an extremely sophisticated attack against specific targeted individuals.”
What This Means for iPhone and iPad Users
Hackers could potentially use this flaw to gain “full admin access”, allowing them to install and run malicious software under the device owner’s name—essentially giving cybercriminals complete control over the compromised device.
While no confirmed cases of device takeovers have been reported yet, security experts warn that the vulnerability presents a serious risk if left unpatched.
Devices Affected by the Security Breach
The security flaw impacts the following Apple devices:
- iPhone XS and later models
- iPad Pro 13-inch
- iPad Pro 12.9-inch (3rd generation and later)
- iPad Pro 11-inch (1st generation and later)
- iPad Air (3rd generation and later)
- iPad (7th generation and later)
- iPad Mini (5th generation and later)
Users of these devices are strongly advised to install the latest iOS security update as soon as possible.
Background: Why Was USB Restricted Mode Created?
USB Restricted Mode was first introduced in iOS 11.4.1 nearly seven years ago in response to hacking tools like GrayKey, developed by Grayshift, a company operated by U.S. intelligence agency contractors and a former Apple security engineer.
GrayKey was designed to bypass iPhone security by connecting via USB cables, allowing authorities or hackers to crack device passcodes within hours or days.
How to Protect Your Device
To ensure security, Apple urges all users to:
- Update to the latest iOS version immediately.
- Avoid using unauthorized third-party accessories that connect via USB.
- Be cautious of physical access to your device, especially in public places.
Apple has not disclosed whether this security vulnerability was exploited by state-sponsored actors or criminal hacking groups, but has assured users that patches have been deployed to address the issue.
This is a developing story, and further updates will follow as more information emerges.
