PPhying中文
Curated security research, vulnerabilities, advisories and tools for practitioners.

Tethered jailbreaks are back

blog.trailofbits.com | vulnerability | #hardware-security | #mobile-security | #ios | #jailbreak | #exploit | #apple | #iphone | #bootrom | #checkm8
📄 Raw .md⬇️ Download .md🔗 Original ↗

Summary

Analysis of checkm8, axi0mX's Boot ROM exploit affecting iPhone 4S through X: the immutable Secure ROM flaw enables tethered jailbreaks and is unpatchable, so only A12/A13 devices are safe.
Published
Collected

Related coverage

research · calif.io
Learning to Jailbreak an iPhone with Claude (Part 1)
Claude helped me take apart an iOS Safari exploit, and retune it for my Mac. It even wrote its own variant.
vulnerability · calif.io
[CVE-2025-31207] Taking Apart iOS Apps: Anti-Debugging and Anti-Tampering in the Wild
# Taking Apart iOS Apps: Anti-Debugging and Anti-Tampering in the Wild Five apps, and what each of them does to stop you attaching a debugger. Huy Nguyen March 17, 2026 applereversing Contents 1....
Medium · vulnerability · github.com
CVE-2026-84636: Apple iOS/macOS SCDynamicStore Wi-Fi SSID Info Disclosure PoC
Wi-Fi SSID data is strictly guarded as sensitive location telemetry on iOS. This PoC shows that third-party applications could bypass sandbox entitlement checks via SCDynamicStore to silently track user network environments and physical locations.
vulnerability · calif.io
[CVE-2026-20643] Reverse engineering Apple's silent security fixes
Diffing a Background Security Improvement to recover the fixes Apple shipped without disclosing them.
blog · bishopfox.com
Unified Code, Unified Risks: Uncovering Vulnerabilities in .NET MAUI Applications
Bishop Fox shows how to bypass .NET MAUI's platform packaging to extract readable C# assemblies from Android and iOS apps, then use that shared-assembly insight to uncover critical vulnerability patterns in common business logic.
research · calif.io
Apple Internals: Endpoint Security ships in iOS 27.2 beta
# Apple Internals: Endpoint Security ships in iOS 27.2 beta Is antivirus coming to iPhone? Josh Maine September 18, 2026 apple Contents 1. Apple Internals: Endpoint Security ships in iOS 27.2 beta...
Back