Accessibility links
  • Skip to main content
News Icon NEWS FILTER
All News Security Education Videos Scams & Phishing Your Security Mobile Security Identity Theft Corporate Security
Search Icon SEARCH
 

Email Icon SUBSCRIBE TO WEEKLY NEWSLETTER
Apple Releases Critical Update to Thwart Zero-Day Flaw
Facebook   X   LinkedIn   Email

Apple Releases Critical Update to Thwart Zero-Day Flaw

April 26, 2025

Apple has recently rolled out iOS 18.3.2, a critical update addressing a significant security vulnerability identified as CVE-2025-24201. This issue was discovered earlier this year and remained a zero-day flaw until now. Apple has acknowledged reports indicating that this security gap may have been exploited in highly sophisticated attacks targeting specific individuals, particularly on devices running versions prior to iOS 17.2.

This flaw resides within WebKit, the engine powering Safari and other web-based applications across Apple's ecosystem. The vulnerability could potentially allow malicious actors to perform unauthorized actions on your device.

Devices affected include:

  • iPhone XS and later
  • iPad Pro 13-inch
  • iPad Pro 12.9-inch 3rd generation and later
  • iPad Pro 11-inch 1st generation and later
  • iPad Air 3rd generation and later
  • iPad 7th generation and later
  • iPad mini 5th generation and later

The iOS 18.3.2 update is available for iPhone XS and later models, as well as compatible iPads. To ensure your device is protected, it's imperative to install this update promptly. Neglecting to do so could leave your device susceptible to potential exploits that compromise your personal data and overall security.

To update your device, navigate to Settings > General > Software Update and follow the on-screen instructions. Regularly updating your device ensures you receive essential security patches and feature enhancements, maintaining the integrity and performance of your products. And while this is specific to Apple, any time you are issued an operating system update, especially security related ones, for your devices, take them seriously. Apply them right away.

Stay vigilant and proactive in safeguarding your digital life by keeping your devices current with the latest updates.


Has Your Account Been Compromised? Five Cyber Smart Tips Everyone Can Use

Your Security

Has Your Account Been Compromised? Five Cyber Smart Tips Everyone Can Use

The transition to living life through our devices has become very real for scores of people and businesses. By now, the coronavirus has changed our lives in ways we never expected. This transition includes doing most things from home. Unfortunately, adapting to online life also gives bad actor’s a cornucopia of targets to exploit. There are proactive steps to take when you suspect an account may be compromised, including ways to help keep it from happening to begin with. READ FULL STORY

Email Identity Crisis! Top Brands For Email Phishing And How To Tell The Difference

Scams & Phishing

Email Identity Crisis! Top Brands For Email Phishing And How To Tell The Difference

Some say impersonation is the greatest form of flattery, but it this case, it’s all about email phishing. Cybercriminals use some companies more than others because they’re well-known globally and have better odds for success. According to APWG’s Phishing Activity Trends Report, the U.S. saw over one million email phishing attacks in the first quarter of this year alone, the highest total on record so far. A look at who these companies are and how to avoid email phishing in their name benefits us all. READ FULL STORY

One Billion+ Android App Downloads Are Hiding Banking Trojans. Is One Yours?

Mobile Security

One Billion+ Android App Downloads Are Hiding Banking Trojans. Is One Yours?

With over one billion trojan banking malware downloads from 639 apps on Google Play Store, it’s time for mobile Android users to pay attention. After all, it’s ultimately the victims who end up paying the price for Google not finding the malware before making it available on their Play Store. Despite Google’s recently improved efforts to keep malware out of their App Store, like introducing Play Protect, it appears there’s a lot more work to be done. READ FULL STORY

Microsoft Patches 4 Zero-Day Vulnerabilities In September Patch Tuesday

Corporate Security

Microsoft Patches 4 Zero-Day Vulnerabilities In September Patch Tuesday

In Patch Tuesday in September 2024, Microsoft released fixes for 79 issues, including patches four actively exploited zero-day vulnerabilities affecting multiple Windows components. These vulnerabilities have serious security implications for administrators and users alike. Zero-day exploit is one for which it’s known, but for which there is no fix. These are particularly dangerous since attackers often jump on those opportunities to take advantage of victims. READ FULL STORY

Users Not Patching MS Defender Flaw Still Risk Info-Theft

Your Security

Users Not Patching MS Defender Flaw Still Risk Info-Theft

When an organization alerts its users a patch for a security flaw is available, the smartest response is a speedy installation. Months ago, Microsoft did just that. The tech titan released a security patch for its Defender users, yet evidence shows the flaw is still being abused. That means some Defender users still haven’t applied the patch, putting them at real risk of personal data theft. Currently stealing information from users in the U.S., Spain, and Thailand, this Defender vulnerability is rated as “high severity." READ FULL STORY








Close
Fraud News & Alerts!

Keep up with the latest cyber security news through our weekly Fraud News & Alerts updates. Each week you will receive an email containing the latest cyber security news, tips and breach notifications.



You're all set!

You will receive your first official security update email within the next week.

A welcome email has also just been sent to you. If you do not receive this email within the next few minutes, please check your Junk box or spam filter to confirm our emails are not being blocked.


 
Help  
Enter any word or words you like.        

The email newsletter will arrive from news@stickleyonsecurity.com


Loading
Please wait...