A new unpatchable flaw in Apple chips opens the door to an iPhone jailbreak

A cybersecurity firm specializing in offensive strategies has unveiled a significant vulnerability in Apple chips that may enable hackers to compromise older iPhones. This revelation could pave the way for researchers focused on iOS security, including those affiliated with governmental bodies, to devise effective jailbreak methods, provided they uncover additional vulnerabilities to exploit in conjunction with this one. The concept of an iPhone jailbreak refers to the practice of bypassing Apple's stringent security measures to gain unrestricted access to its mobile operating system. Despite Apple's remarkable efforts to fortify iPhones against hacks, this incident serves as a stark reminder of the persistent threats posed by advanced hackers. On Friday, Paradigm Shift, based in Barcelona, published a blog post detailing the vulnerability, which they have named "usbliter8." Accompanying this announcement was a proof of concept demonstrating how the vulnerability can be exploited, although it necessitates physical access to the targeted device. The flaw impacts iPhones equipped with Apple’s A12 and A13 chips, which were released in 2018 and 2019, affecting older models including the XS, XR, and up to the iPhone 11. While the emergence of usbliter8 is crucial for the cybersecurity community and those developing hacking tools, it does not imply that older iPhones can be easily hacked by the average user. The vulnerability targets the iPhone's Boot ROM, the initial code that runs during startup, serving as a key defense mechanism against unauthorized access. Hackers need to exploit this Boot ROM to execute a successful breach, which usbliter8 now facilitates by bypassing subsequent security protocols. Paradigm Shift advised users that since these vulnerabilities exist in unmodifiable code, transitioning to newer hardware remains the most effective way to mitigate risks. The Boot ROM, once programmed into the chip, cannot be altered or patched, leaving it exposed to potential exploits. Companies that provide tools for hacking seized iPhones, such as Cellebrite and Magnet Forensics, likely possess methods akin to usbliter8 to infiltrate these devices. However, hackers must still employ additional techniques to access the data stored on the phone. Although public jailbreaks were once commonplace, they have diminished significantly over the past decade. Jailbreaking often serves as a preliminary step for researchers aiming to discover further vulnerabilities within the system, yet there is little incentive for them to disclose such information publicly, as this could prompt Apple to rectify the flaws. Paradigm Shift has not responded to inquiries regarding the usbliter8 vulnerability, leaving many questions about its implications for iPhone security unanswered.