New iOS 18.4.1 Warning: Update Your iPhone In 13 Days

Introduction to the iOS 18.4.1 Update

The U.S. government is warning about the two vulnerabilities fixed in iOS 18.4.1, both of which are being exploited in real-life attacks on iPhones. Apple has already highlighted the importance of updating to iOS 18.4.1, the emergency iPhone upgrade issued just days ago.

Government Warning and Deadline

Government agency the Cybersecurity and Infrastructure Security Agency (CISA) has added both the flaws fixed in iOS 18.4.1 to its Known Exploited Vulnerabilities Catalog. In simple terms, this is an index of issues known to be used in real-life attacks that could be a risk to government agencies, businesses, and individuals alike. CISA is also giving government agencies a deadline of May 8 to update to iOS 18.4.1, to ensure the security of iPhones and other Apple devices being used in these scenarios.

The Flaws Patched in the iOS 18.4.1 iPhone Update

The iOS 18.4.1 deadline is specifically for government agencies, but the agency advises businesses to use it as a benchmark too — and so should individuals who could be at risk from iPhone attacks. Apple’s iOS 18.4.1 fixes two flaws that affect iPhones running operating system versions of iOS 18.4 or earlier.

Details of the Flaws

The first is CVE-2025-31200, a memory corruption vulnerability that affects multiple Apple products. If exploited in attacks, the flaw fixed in iOS 18.4.1 could allow an adversary to execute code on your device. The agency advises “applying mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.” The second flaw patched in iOS 18.4.1, CVE-2025-31201, is an arbitrary read and write vulnerability. “Apple iOS, iPadOS, macOS, and other Apple products contain an arbitrary read and write vulnerability that allows an attacker to bypass Pointer Authentication,” CISA warned.

Impact and Risks

Pointer Authentication is a security mechanism designed to resist memory disclosure attacks. Bypassing it gives an attacker the opportunity to launch attacks and access to parts of the device’s memory. Apple says the flaws fixed in iOS 18.4.1 were used in targeted attacks on iOS devices. Some have speculated that these could have involved spyware, a type of malware that allows adversaries to see and hear everything you do on your device. The issues fixed in iOS 18.4.1 were likely targeted against journalists, government officials, dissidents, and businesses in certain sectors.

Update to iOS 18.4.1 to Keep Your iPhone Secure

As CISA says, the types of vulnerabilities included in its KEV are “frequent attack vectors for malicious cyber actors and pose significant risks to the federal enterprise.” As well as FCEB agencies, CISA “strongly urges all organizations to reduce their exposure to cyberattacks by prioritizing timely remediation of Catalog vulnerabilities as part of their vulnerability management practice.” In other words, update to iOS 18.4.1 as soon as possible and before the deadline. Go to Settings > General > Software Update and upgrade your iPhone to iOS 18.4.1 now.

Conclusion

In conclusion, the iOS 18.4.1 update is crucial for the security of your iPhone. The two vulnerabilities fixed in this update are being exploited in real-life attacks, and updating to iOS 18.4.1 is the best way to protect your device. The U.S. government is warning about these vulnerabilities, and government agencies have a deadline to update. Individuals and businesses should also prioritize updating to iOS 18.4.1 to reduce their exposure to cyberattacks.

FAQs

• What are the two vulnerabilities fixed in iOS 18.4.1?
  The two vulnerabilities are CVE-2025-31200, a memory corruption vulnerability, and CVE-2025-31201, an arbitrary read and write vulnerability.
• Are these vulnerabilities being exploited in real-life attacks?
  Yes, according to the U.S. government and Apple, these vulnerabilities are being exploited in real-life attacks on iPhones.
• What is the deadline for government agencies to update to iOS 18.4.1?
  The deadline for government agencies to update to iOS 18.4.1 is May 8.
• How can I update my iPhone to iOS 18.4.1?
  Go to Settings > General > Software Update and upgrade your iPhone to iOS 18.4.1.
• Is updating to iOS 18.4.1 important for individuals and businesses?
  Yes, updating to iOS 18.4.1 is important for individuals and businesses to reduce their exposure to cyberattacks and protect their devices.