Apple has released a security update to address a vulnerability that could have allowed third parties to bypass restricted mode on locked iPhones and iPads. The flaw, which Apple described as part of an “extremely sophisticated attack,” may have been used to target specific individuals.
The issue, detailed on Apple’s website, reportedly allowed unauthorised access to locked devices by disabling restricted mode. This security feature is designed to block data access when a device has been locked for more than an hour, limiting the functionality of the Lightning port to prevent unauthorised entry.
Though Apple has not disclosed specifics on when or where the flaw was exploited, experts suggest it could have been leveraged by digital forensics tools similar to those used by law enforcement. Cellebrite, a widely known phone-cracking technology, has previously been used in investigations, including the recent case involving the attempted assassination of former US President Donald Trump.
The vulnerability affects a range of Apple devices, including the iPhone XS and later models, as well as multiple generations of iPads, according to Apple’s advisory.
The flaw was discovered by Bill Marczak, a researcher at The Citizen Lab, an organisation renowned for exposing spyware threats against journalists, dissidents, and civil society members.
Apple has urged users to update their devices immediately to mitigate any potential risks associated with the flaw.
