Apple fixes security flaw allowing third-party access to locked devices

Apple patched a vulnerability (CVE-2025-24200) in iOS and iPadOS that allowed attackers to disable restricted mode on locked devices—potentially permitting unlocking and data extraction via tools similar to Cellebrite. The flaw affected a range of recent iPhones and iPads, was reported by The Citizen Lab researcher Bill Marczak, and has been added to CISA’s Known Exploited Vulnerabilities list, suggesting targeted, sophisticated exploitation.