An iPhone hacking team has released a new jailbreak tool for almost every iPhone, including the most recent models, using the same vulnerability that Apple said was under active attack by hackers last month.
The Unc0ver team released its latest jailbreak this weekend and says it works on iOS 11 (iPhone 5s and later) to iOS 14.3, which Apple released in December.
Jailbreaking is a cat-and-mouse game between security researchers who want greater control and customizations over their phones and Apple, which says it locks down iPhones for security. Hackers build jailbreak tools by finding and exploiting vulnerabilities that can lift some of the restrictions that Apple puts in place, like installing apps outside of its app store, which most Android users are already used to.
In a tweet, the jailbreak group said it used its “own exploit” for CVE-2021-1782, a kernel vulnerability that Apple said was one of three flaws that “may have been actively exploited” by hackers. By targeting the kernel, the hackers can get deep hooks into the underlying operating system. We wrote our own exploit based on CVE-2021-1782 for #unc0ver to optimize exploit speed and stability.
Apple fixed the vulnerability in iOS 14.4, released last month, preventing the jailbreak from working on later versions. It was a rare admission that the iPhone was under active attack by hackers, but the company declined to say who they were and targeting. Apple also granted anonymity to the researcher who submitted the bug.
The group’s last jailbreak, which supported iPhones running iOS 11 to iOS 13.5, was fixed in a matter of days last year. Apple works quickly to understand and improve the vulnerabilities found by jailbreak groups since these same vulnerabilities can be exploited maliciously.
Security experts generally advise iPhone users against jailbreaking because it makes the device more vulnerable to attacks. And while keeping your phone up to date may introduce security fixes that remove the jailbreak, it’s one of the best ways of keeping your device secure.
Early Stage is the premiere ‘how-to’ event for startup entrepreneurs and investors. You’ll hear first-hand how some of the most successful founders and VCs build their businesses, raise money and manage their portfolios. We’ll cover every aspect of company-building: Fundraising, recruiting, sales, legal, PR, marketing, and brand building. Each session also has audience participation built-in – there’s ample time included in each for audience questions and discussion.