medium

Leaked Cellebrite document describes 'Advanced Unlocks', a possible iPhone zero-day AFU vector with ~8 m wireless range

1 fonte(s) · 1 atualização(ões) · publicado 20/10/2026 08:03 · coletado há 19 horas

Researcher Justin.sh reports on a leaked confidential Cellebrite document describing a new 2026 product called Advanced Unlocks (AU), distinct from the vendor's long-marketed "advanced unlocking services". Cellebrite describes AU as a "next-generation AFU vector that is more resilient to Apple's OS changes". It reportedly works with Apple Stolen Device Protection enabled, which tightens USB restrictions. It runs from a dedicated appliance with a stated range of about 8 meters. Schneier tags the item as a possible zero-day, but the article does not identify the underlying vulnerability, a CVE or the exact mechanism. AFU means after first unlock.

Technical Details

AU targets iPhones in the after first unlock (AFU) state.
The attack does not depend on USB access, since it works with Stolen Device Protection on.
It uses a dedicated appliance with a stated range of about 8 meters, which suggests a wireless or proximity-based vector. The article does not confirm the vector.
No CVE, exploit details or IOCs are given. The zero-day characterization is speculative and based on a leaked document.

Linha do tempo

schneier.com ↗ · pub. 20/10/2026 08:03 · coletado 20/10 09:00 primeiro registro

Leaked Cellebrite document describes 'Advanced Unlocks', a possible iPhone zero-day AFU vector with ~8 m wireless range
ler a análise desta fonte ocultar
Researcher Justin.sh reports on a leaked confidential Cellebrite document describing a new 2026 product called Advanced Unlocks (AU), distinct from the vendor's long-marketed "advanced unlocking services". Cellebrite describes AU as a "next-generation AFU vector that is more resilient to Apple's OS changes". It reportedly works with Apple Stolen Device Protection enabled, which tightens USB restrictions. It runs from a dedicated appliance with a stated range of about 8 meters. Schneier tags the item as a possible zero-day, but the article does not identify the underlying vulnerability, a CVE or the exact mechanism. AFU means after first unlock.

Technical Details
- AU targets iPhones in the after first unlock (AFU) state.
- The attack does not depend on USB access, since it works with Stolen Device Protection on.
- It uses a dedicated appliance with a stated range of about 8 meters, which suggests a wireless or proximity-based vector. The article does not confirm the vector.
- No CVE, exploit details or IOCs are given. The zero-day characterization is speculative and based on a leaked document.