New Exploit Bypasses Apple’s Boot Defenses, Affects Millions of iPhones
New Usbliter8 exploit bypasses Apple's boot defenses on millions of iPhones and Apple Watches.
A new BootROM exploit called Usbliter8 has been disclosed by Paradigm Shift, affecting iPhones with A12 and A13 chips and Apple Watches with S4 and S5 chips. The exploit bypasses Apple's SecureROM, the foundational code for the secure boot chain, by chaining a USB controller bug and a firmware configuration weakness. While it requires physical USB access and cannot directly access user data, it allows for full code execution before the OS loads and could potentially compromise the Secure Enclave.
AI summary of the linked source. Not reviewed by an editor. How this works
Run Apple?
Get an email when a new story names Apple, usually within the hour.
Free. Your list stays private and never appears in a subject line. One click stops it. How Vendor Watch worksPrivacy
The lesson from this incident
Full lessonThe Usbliter8 exploit targets a hardware-level vulnerability in Apple's SecureROM by chaining a USB controller bug with a firmware configuration weakness, effectively breaking the trusted boot chain before the operating system ever loads. Because the flaw resides in BootROM — read-only memory baked into the chip — Apple cannot patch it remotely via a software update, leaving A12 and A13 devices permanently exposed at the firmware level. While physical USB access is currently required, the ability to execute arbitrary code before OS load and potentially compromise the Secure Enclave represents a severe trust boundary violation. This highlights the enduring risk of hardware-rooted vulnerabilities that outlive standard patch cycles and demand compensating controls around physical device security.
Vendors in this story
How we list vendors
Indicators of Compromise
Extracted by AI from the linked source. Not reviewed by an editor. How this works
- malware — Usbliter8
- mitre_attack — T1059.003
- mitre_attack — T1547.001