Introduction to the iOS 18.4.1 Update

The U.S. government is warning about the two vulnerabilities fixed in iOS 18.4.1, both of which are being exploited in real-life attacks on iPhones. Apple has already highlighted the importance of updating to iOS 18.4.1, the emergency iPhone upgrade issued just days ago.

Government Warning and Deadline

Government agency the Cybersecurity and Infrastructure Security Agency (CISA) has added both the flaws fixed in iOS 18.4.1 to its Known Exploited Vulnerabilities Catalog. In simple terms, this is an index of issues known to be used in real-life attacks that could be a risk to government agencies, businesses, and individuals alike. CISA is also giving government agencies a deadline of May 8 to update to iOS 18.4.1, to ensure the security of iPhones and other Apple devices being used in these scenarios.

The Flaws Patched in the iOS 18.4.1 iPhone Update

The iOS 18.4.1 deadline is specifically for government agencies, but the agency advises businesses to use it as a benchmark too — and so should individuals who could be at risk from iPhone attacks. Apple’s iOS 18.4.1 fixes two flaws that affect iPhones running operating system versions of iOS 18.4 or earlier.

Details of the Flaws

The first is CVE-2025-31200, a memory corruption vulnerability that affects multiple Apple products. If exploited in attacks, the flaw fixed in iOS 18.4.1 could allow an adversary to execute code on your device. The agency advises “applying mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.” The second flaw patched in iOS 18.4.1, CVE-2025-31201, is an arbitrary read and write vulnerability. “Apple iOS, iPadOS, macOS, and other Apple products contain an arbitrary read and write vulnerability that allows an attacker to bypass Pointer Authentication,” CISA warned.

Impact and Risks

Pointer Authentication is a security mechanism designed to resist memory disclosure attacks. Bypassing it gives an attacker the opportunity to launch attacks and access to parts of the device’s memory. Apple says the flaws fixed in iOS 18.4.1 were used in targeted attacks on iOS devices. Some have speculated that these could have involved spyware, a type of malware that allows adversaries to see and hear everything you do on your device. The issues fixed in iOS 18.4.1 were likely targeted against journalists, government officials, dissidents, and businesses in certain sectors.

Update to iOS 18.4.1 to Keep Your iPhone Secure

As CISA says, the types of vulnerabilities included in its KEV are “frequent attack vectors for malicious cyber actors and pose significant risks to the federal enterprise.” As well as FCEB agencies, CISA “strongly urges all organizations to reduce their exposure to cyberattacks by prioritizing timely remediation of Catalog vulnerabilities as part of their vulnerability management practice.” In other words, update to iOS 18.4.1 as soon as possible and before the deadline. Go to Settings > General > Software Update and upgrade your iPhone to iOS 18.4.1 now.

Conclusion

In conclusion, the iOS 18.4.1 update is crucial for the security of your iPhone. The two vulnerabilities fixed in this update are being exploited in real-life attacks, and updating to iOS 18.4.1 is the best way to protect your device. The U.S. government is warning about these vulnerabilities, and government agencies have a deadline to update. Individuals and businesses should also prioritize updating to iOS 18.4.1 to reduce their exposure to cyberattacks.

FAQs

• What are the two vulnerabilities fixed in iOS 18.4.1?
  The two vulnerabilities are CVE-2025-31200, a memory corruption vulnerability, and CVE-2025-31201, an arbitrary read and write vulnerability.
• Are these vulnerabilities being exploited in real-life attacks?
  Yes, according to the U.S. government and Apple, these vulnerabilities are being exploited in real-life attacks on iPhones.
• What is the deadline for government agencies to update to iOS 18.4.1?
  The deadline for government agencies to update to iOS 18.4.1 is May 8.
• How can I update my iPhone to iOS 18.4.1?
  Go to Settings > General > Software Update and upgrade your iPhone to iOS 18.4.1.
• Is updating to iOS 18.4.1 important for individuals and businesses?
  Yes, updating to iOS 18.4.1 is important for individuals and businesses to reduce their exposure to cyberattacks and protect their devices.

Introduction to Unusual Requests for Evidence

United States immigration officials are issuing Requests for Evidence for H-1B and employment-based immigrant petitions, asking for home addresses and biometrics. Attorneys are worried because U.S. Citizenship and Immigration Services have not made such requests before. These requests are connected to USCIS claims that the agency has “adverse information” on individuals. It remains unclear if Trump administration officials have added employment-based visa applicants to its plans to identify and deport people lawfully in the United States, or if the requests serve another purpose.

Immigration Cases Start Receiving Unusual Requests For Evidence

When filing petitions for H-1B visas and I-140s for employment-based green cards, attorneys have received Requests for Evidence referencing “potentially adverse information.” The requests ask for the beneficiary’s residential address so that USCIS can collect their biometric information. “This is highly unusual because biometrics are not typically required for these case types,” said Vic Goel of Goel & Anderson. “The RFEs also fail to explain the nature of the adverse information, leaving employers and attorneys in the dark. It appears that DHS may be using AI tools to flag individuals based on undisclosed data, possibly from social media or other government databases," Goel said.

Nature of the Requests for Evidence

In one Request for Evidence, a USCIS adjudicator wrote: “We have encountered potentially adverse information related to the beneficiary. To continue processing your application or petition, we required an updated address for the beneficiary so that we may collect biometric data.” It then asks that “the beneficiary’s current and updated residential address” be submitted. “These RFEs are unusual because they don’t follow the process that USCIS historically has applied,” said Kevin Miner of Fragomen. “Information exchange for most employment-based petitions is done in writing. The company files a petition and explains why the foreign national qualifies for the H-1B or other work-authorized status that is being requested. If USCIS has questions after reviewing that filing, the agency issues a Request for Evidence explaining what remains unclear about the eligibility, and the company then responds.”

Concerns Among Immigration Attorneys

Miner points out that these Requests for Evidence differ because they do not ask substantive questions. Instead, the requests only state that “adverse information” about the beneficiary exists and the agency needs biometrics. Attorneys note that biometrics are not a typical part of the H-1B, I-140 or other employment-based petition process. U.S. Citizenship and Immigration Services has not provided any notice about a process change. USCIS did not respond to a request for comment to explain the purpose of the Requests for Evidence.

Immigration Attorneys Weigh The Best Course Of Action

When a government agency introduces new policies without notice, employers, attorneys and affected individuals are left wondering how to proceed. That applies to the current situation. “For now, I recommend not responding directly to the RFE by providing the beneficiary’s address or scheduling biometrics,” said Goel. “This is because this information is already in the record, and more pointedly because it is unclear why USCIS is asking for it. Instead, the attorney or petitioner should respond by citing 8 CFR 103.2(b)(16)(i), which requires USCIS to disclose any derogatory information being used as a basis for an adverse decision.”

Future Implications

Miner agrees with that approach to the Requests for Evidence. “Like responding to any other request for the government, the employer should endeavor to provide USCIS with the information it needs to be able to make an appropriate decision on the employer’s request,” Miner said. “In some instances, this could include asking USCIS as part of the RFE response to provide more information about what sort of adverse information it has identified about the beneficiary so that the employer can try to address those concerns. Because USCIS has only recently begun issuing these requests, we don’t yet know what further steps USCIS will take once the employer responds to the request.” Goel said that, without transparency about the source and substance of the information, “petitioners are unable to meaningfully respond or defend” against potentially erroneous allegations.

Conclusion

The USCIS Requests for Evidence occur while the Trump administration deports international students for minor infractions, protests and op-eds, raising alarm bells for employers and universities concerned about attracting talent to the United States. The last thing employers want is a new policy that makes it more challenging to hire or retain talent. The H-1B visa category is already the most restrictive in the U.S. immigration system, with only 20% of new H-1B applications turned into approved workers under the 85,000 annual limit. Companies and immigration attorneys are in a “wait and see” mode, unsure if these unusual Requests for Evidence foreshadow new restrictive measures.

FAQs

• Q: What is the purpose of the Requests for Evidence issued by USCIS for H-1B and employment-based immigrant petitions?
  A: The purpose is unclear, but it involves collecting biometric data due to “potentially adverse information” about the beneficiaries.
• Q: Are biometrics typically required for H-1B or employment-based green card petitions?
  A: No, biometrics are not typically required for these types of petitions.
• Q: How should employers or attorneys respond to these unusual Requests for Evidence?
  A: It is recommended not to respond directly by providing the beneficiary’s address or scheduling biometrics. Instead, cite 8 CFR 103.2(b)(16)(i) to request disclosure of any derogatory information.
• Q: What are the implications of these Requests for Evidence for international students and the U.S. immigration system?
  A: The implications are uncertain but may further restrict the already limited H-1B visa category and make it more challenging for employers to hire or retain international talent.

Hard disk drives contain valuable materials that are used in their construction and operation. This includes rare-earth magnetics that are used in the rotary actuator that allows the heads to write and read information from tracks of data on the disk surfaces. The rare earth elements used in HDDs include Neodymium, Praseodymium and Dysprosium, used because of their unique magnetic properties.

Economic Value of Rare Earth Elements

Rare earths have a significant economic value and in light of recent embargos of the types of rare earths that are used in constructing HDDs, recovering the rare earths from end-of-life HDDs will have significant economic value. Besides their use in HDD motors, rare earth elements are used in electric vehicles, wind turbines and advanced electronics.

Creating a Circular Economy for Storage Devices

We have written in the past about creating a circular economy for storage devices. As an example of this effort, Western Digital, Microsoft’s cloud data centers and a couple of materials recycling companies recently reported extracting rare earths from about 47,000 pounds of shredded end-of-life HDDs and other materials. The recycling partners are Critical Materials Recovery and PedalPoint Recycling.

The Recycling Process

The hard drives were collected from several Microsoft data centers in the United States and sent to the recycling partners. Shreds of HDDs, SSDs, and caddies were sent to PedalPoint where they were sorted and processed. The magnets and steel were then sent to CMR to figure out the best way to sort and size the materials and extract the rare earth elements using CMR’s environmentally friendly and economically competitive acid-free recycling process.

Mass Production Ecosystem

The four companies went through multiple pilots to create a mass production ecosystem at scale for retrieval of rare earths, which was completed in December 2024. Together the companies transformed close to 50,000 pounds of end-of-life drives, mounting caddies, and other materials into critical, high-value materials, all while significantly reducing environmental impact.

Rare Earth Recycling Methodology

The figure below from the white paper on this project shows the acid-free dissolution and recovery of rare earth elements using a copper salt solution. This method is said to be ideal for leaching from low-concentrated rare earth feedstocks, such as from shredded HDDs. This method recovers more than 90% of the REEs from the HDD feedstock to produce a more than 99.5% pure rare earth oxides.

Benefits of Domestic Recycling

The WDC release says that more than 85% of rare earth elements primary production occurs outside the US and the domestic recycling rate is low. The largest hyperscalers in the world have collaborated to create an advanced eco-friendly sorting system. The non-acid based recycling process not only recapture rare earths but also gold, copper, aluminum and steel. The current rate earth element recycling in the US is less than 10%. This system recaptured about 80% by mass of the raw recycled feedstock. With domestic recycling of rare earth, access to these materials can minimize transportation emissions and decrease the dependency on imported materials. In addition, using this recycling method, obtaining these materials is estimated to generate about 95% less greenhouse gas emissions compared to traditional mining and processing practices.

Conclusion

WDC, Microsoft and a couple of recycling companies have shown a high efficiency, acid-free process for extracting rare earth elements from shredded hard disk drives. Recycling valuable materials from storage devices can improve the local supply chain and avoid environmental impacts.

FAQs

Q: What are the rare earth elements used in HDDs?
A: The rare earth elements used in HDDs include Neodymium, Praseodymium and Dysprosium.
Q: What is the significance of recovering rare earths from end-of-life HDDs?
A: Recovering rare earths from end-of-life HDDs has significant economic value and can minimize transportation emissions and decrease the dependency on imported materials.
Q: What is the current rate of rare earth element recycling in the US?
A: The current rate of rare earth element recycling in the US is less than 10%.
Q: What are the benefits of using the acid-free recycling process?
A: The acid-free recycling process can recover more than 90% of the REEs from the HDD feedstock and generate about 95% less greenhouse gas emissions compared to traditional mining and processing practices.