Schneier on Security

Possible Vulnerability in Apple’s Automatic Reboot

Refract AI Intelligence Digest

BLUF

A new exploit allows law enforcement tools to circumvent iOS security timeouts and access locked devices.

NEWS

404Media reports Magnet Forensics is exploiting a vulnerability in iOS to bypass the automatic reboot feature designed to secure inactive iPhones. The company released a device called GrayKey Preserve specifically to maintain access for law enforcement agencies using GrayKey tools. This undermines the security guarantee that devices become more protected after three days of non-use.

Why I Care

This compromises the privacy and data security of iPhone users who rely on inactivity timeouts to protect against physical access attacks. It affects anyone concerned about law enforcement surveillance or physical device theft where the device might be left unattended for extended periods.

Next Steps

iPhone users should ensure devices are physically secured at all times and update to the latest iOS version immediately upon release; enterprise security teams should assess physical device policies for high-risk personnel; Apple users must monitor official advisories for patches addressing the GrayKey Preserve exploit.

404Media is reporting (alternate link) that a cyber-weapons arms manufacturer is exploiting a vulnerability in iOS to bypass its automatic reboot security feature. This is the feature that automatically puts an iPhone into a more secure state if it hasn’t been used for 72 hours. The new technology to get around inactivity reboot was developed by Magnet Forensics, the company behind GrayKey, a popular tool sold to law enforcement agencies that allows them to unlock and access data stored in iPhones and Android smartphones. Magnet has developed a new device called GrayKey Preserve and a feature for its regular GrayKey devices called Evidence Preservation Mode, according to the video...
Back to Blog Listing

Source: Schneier on Security ·

This digest was generated by Refract AI Collective to help the public sector security community stay informed.