At iPhone users, Apple urges its latest iOS patch to download after the company has identified a large security error.
The solution is intended to protect Apple customers against an 'extremely advanced attack' that exploits a critical vulnerability to Zero-Day.
The vulnerability, called CVE-2025-24201, was identified within Webskit-de Browser engine used in Safari and all other internet browsers made for the iPhone or iPad.
Hackers used the mistake as an open door and created malignant websites that would give them access to other smartphone areas outside the web browser of a victim after a visit to these fake pages.
Apple urges users to download iOS 18.3.2, which is now available.
Users must go to the settings and check for the general software update.
The tech giant warned that the problem could influence anyone with the iPhone XS and later models.
Apple has warned that 9 of their products, including iPhones and iPads, must be updated immediately to protect against potential hacking
Zero-Daagse Vulnerabors are software-weak points that are completely unknown to the supplier who makes the program, which means that there is no patch that corrects the error when it is first discovered and hackers are able to exploit them.
In a statement on Tuesday, Apple said: 'This is an additional solution for an attack that was blocked in iOS 17.2'
The tech giant added that the newest zero-day vulnerability in web kit was probably used in a cyber attack on 'specific targeted individuals', using Apple's software updates that were older than iOS 17.2.
Apple released iOS 17.2 in December 2023. Since then, the company has moved to iOS 18, with various updates for their iPhone software that has been released since the debut. So everyone who still uses 17.2 was already several software updates behind.
The company did not say who was specifically the target, how long the attacks lasted or how Apple discovered the attacks.
Apple does not believe that the cyber criminals involved focus on the entire customer base of the company.
Tech experts, however, warned that everyone would still have to install the latest security updates, because the attack could be devastating to anyone who was the target.
Apple also noted that the patch was released for iPad, Including the iPad Pro 13-inch, iPad Pro 12.9-inch 3rd generation and later models, iPad Pro 11-inch 1st generation and later models, iPad Air 3rd generation and later models, and the iPad 7th generation and its later models.
The critical zero-day vulnerability can enable hackers to direct Apple users with malignant websites that can take over their smartphones
The iPad mini 5th generation and later models, Mac computers with macOS sequoia and the Apple Vision Pro are also in danger.
Everyone with these products is encouraged to check their device settings for the latest Apple software -updates, including iOS 18.3.2, iPados 18.3.2, macOS Sequoia 15.3.2, Visionos 2.3.2 and Safari 18.3.1.
This is the third vulnerability of Zero-Day that Apple has had to patch since the beginning of 2025. The first was discovered and patched by Apple in January and the second was only imprisoned a month ago on 10 February.
That incident included many of the same iPhone models aimed at the latest security event, in which Apple again said that the incident was an 'extremely advanced attack on specific targeted individuals' in February.
The difference in February was that the vulnerability allowed a hacker to physically eliminate the USB -restricted mode of a telephone while it was locked – which means that a criminal still had access to his victim's device to use this problem.
According to GeekThe new Zero-Day vulnerability revolves around an outdoor bodder Writing Probage that affects Apple's web browsers.
This error in the software enables Hackers to make malignant web content that can break from the 'sandbox' of the web content and get control of the iphone or iPad of the victim.
In simpler terms, the error in Apple's software created a way for hackers to sneak the protective barriers that discourage the apps on your smart device.
The use of fake web pages to separate from the protected zones in a smartphone could enter Hackers software areas outside the normal limits of the person's web browser – take over the phone.
In a recent interview, James Knight from DigitalWarfare.com said that regularly checking software updates is one of the most important things you can do to protect yourself against software problems and hackers.
“Work the phone, update the laptop, even update your smart fridge, patch all,” Knight told DailyMail.com.
'Update regularly, your browser and your software. That is really very important. '
