[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$f7Tn05Q4vBlANbsOoJso4gMhlnkDVvqfb1LfVacT7zE0":3},{"article":4,"iocs":49,"watch_terms":61,"solutions":62,"lesson":70},{"id":5,"title":6,"slug":7,"summary":8,"ai_summary":9,"brief":10,"url":11,"image_url":12,"published_at":13,"ingested_at":14,"relevance_score":15,"entities":16,"category_id":31,"category":32,"article_tags":36},"9155d892-b732-4ddf-9e4f-3c36d947f898","New Exploit Bypasses Apple’s Boot Defenses, Affects Millions of iPhones","new-exploit-bypasses-apple-s-boot-defenses-affects-millions-of-iphones-154c5f","The vulnerability exploited by the Usbliter8 exploit cannot be patched and a PoC exploit has been released by researchers. The post New Exploit Bypasses Apple’s Boot Defenses, Affects Millions of iPhones appeared first on SecurityWeek.","A new BootROM exploit called Usbliter8 has been disclosed by Paradigm Shift, affecting iPhones with A12 and A13 chips and Apple Watches with S4 and S5 chips. The exploit bypasses Apple's SecureROM, the foundational code for the secure boot chain, by chaining a USB controller bug and a firmware configuration weakness. While it requires physical USB access and cannot directly access user data, it allows for full code execution before the OS loads and could potentially compromise the Secure Enclave.","New Usbliter8 exploit bypasses Apple's boot defenses on millions of iPhones and Apple Watches.","https:\u002F\u002Fwww.securityweek.com\u002Fnew-exploit-bypasses-apples-boot-defenses-affects-millions-of-iphones\u002F","https:\u002F\u002Fwww.securityweek.com\u002Fwp-content\u002Fuploads\u002F2025\u002F05\u002FiPhone-iOS-Updates-Security.jpeg","2026-06-22T10:03:06+00:00","2026-06-22T12:00:08.101355+00:00",8,[17,20,22,24,26,28],{"name":18,"type":19},"iPhone XS","product",{"name":21,"type":19},"iPhone XR",{"name":23,"type":19},"iPhone 11",{"name":25,"type":19},"Apple Watch S4",{"name":27,"type":19},"Apple Watch S5",{"name":29,"type":30},"Apple","vendor","80544778-fabb-4dcd-aa35-17492e5dcf4f",{"id":31,"icon":33,"name":34,"slug":35},null,"Vulnerabilities","vulnerabilities",[37,39,44],{"category":38},{"id":31,"icon":33,"name":34,"slug":35},{"category":40},{"id":41,"icon":33,"name":42,"slug":43},"d6f63bb8-0801-486a-be7f-171400700454","IoT\u002FOT","iot-ot",{"category":45},{"id":46,"icon":33,"name":47,"slug":48},"e7b231c8-5f79-4465-8d38-1ef13aea5a14","Threat Intelligence","threat-intelligence",[50,54,58],{"type":51,"value":52,"context":53},"malware","Usbliter8","Name of the BootROM exploit",{"type":55,"value":56,"context":57},"mitre_attack","T1059.003","Potential for arbitrary code execution",{"type":55,"value":59,"context":60},"T1547.001","Potential to load unsigned firmware",[29,18,21],{"controls":63,"vendors":64},[],[65],{"slug":66,"name":29,"logo_path":67,"roles":68},"apple","\u002Fvendor-logos\u002Fapple.png",[69],"affected",{"slug":71,"title":72,"body":73,"framework_refs":74,"framework_notes":86},"bootrom-exploit-bypasses-apple-secure-boot-on-millions-of-iphones","BootROM Exploit Bypasses Apple Secure Boot on Millions of iPhones","The Usbliter8 exploit targets a hardware-level vulnerability in Apple's SecureROM by chaining a USB controller bug with a firmware configuration weakness, effectively breaking the trusted boot chain before the operating system ever loads. Because the flaw resides in BootROM — read-only memory baked into the chip — Apple cannot patch it remotely via a software update, leaving A12 and A13 devices permanently exposed at the firmware level. While physical USB access is currently required, the ability to execute arbitrary code before OS load and potentially compromise the Secure Enclave represents a severe trust boundary violation. This highlights the enduring risk of hardware-rooted vulnerabilities that outlive standard patch cycles and demand compensating controls around physical device security.",[75,76,77,78,79,80,81,82,83,84,85],"CIS Control 1 – Inventory and Control of Enterprise Assets","CIS Control 4 – Secure Configuration of Enterprise Assets","CIS Control 7 – Continuous Vulnerability Management","CIS Control 12 – Network Infrastructure Management","NIST SP 800-155 – BIOS\u002FFirmware Integrity Measurement","NIST SP 800-124 Rev. 2 – Guidelines for Managing Mobile Device Security","NIST CSF PR.AC-3 – Remote Access Management","NIST CSF PR.DS-1 – Data-at-Rest Protection","NIST SP 800-53 SI-7 – Software, Firmware, and Information Integrity","ISO\u002FIEC 27001:2022 – A.8.9 Configuration Management","ITIL – Change and Release Management (hardware lifecycle)",{}]