There’s a lot of fearmongering but here’s the vulnerability (I believe it’s the same one), from another article:

The CVE, now publicly listed, was a logic flaw in how iOS processed maliciously crafted media shared via iCloud Link. Apple patched the vulnerability in iOS 18.3.1 on February 10, adding stronger validation checks.

It was a malicious link delivered via iMessage. You can configure iOS to stop automatically loading link previews which may have prevented the attack

It’s also a good reminder that the vast majority of these cyber attacks have at least some element of social engineering. Stay sensible, lock down your devices, keep them up to date, block unknown USB devices without approval, don’t open random links.

They WANT you to feel hopeless and defeated. They WANT you to think “Well that’s it, we have no privacy anymore”. If you give into that mindset, you let them win

That’s only one half, the person you’re talking to might not be running a secure device

I’m sure Londoners were consulted on this prior and given the chance to vote on whether they wanted these implemented /s