Security
A potential new Cellebrite iPhone radio zero-day vulnerability has been identified.
Publication: Schneier on Security
Author: Bruce Schneier
Source published: 20/10/2026, 11:03:13 UTC
Briefing created: 20/10/2026, 11:22:39 UTC
Based on a feed excerpt; full article content has not been acquired. Source evidence retrieved 20/10/2026, 11:15:23 UTC.
Briefings
A leaked Cellebrite document titled Advanced Unlocks (AU) describes a new security vector for 2026 that enables remote device unlocking via a dedicated appliance with an 8-meter USB range. This 'next-generation AFU vector' is designed to be more resilient than previous methods, specifically targeting Stolen Device Protection enabled devices. The evidence indicates AU works with Stolen Device Protection enabled, which tightens USB restrictions, but the specific technical mechanism for the 8-meter range remains unconfirmed.
Key points
- Cellebite calls its new product 'Advanced Unlocks' (AU), a next-generation AFU vector for 2026 that enables remote device unlocking via a dedicated appliance.
- The evidence states AU works with Stolen Device Protection enabled, which tightens USB restrictions, but the specific technical mechanism for the 8-meter range remains unconfirmed.
Context
This finding matters as it suggests a potential new attack vector for mobile device security, potentially bypassing standard Stolen Device Protection mechanisms through a dedicated appliance with a defined 8-meter USB range.
Limitations
Evidence is limited to a leaked document from Justin.sh; specific technical details about the 8-meter range mechanism are unconfirmed. The evidence does not include author names, quotes, or causal claims beyond the stated product description.
Generated by Bittrees-hosted qwen35-2b sha256:aaf42c8b7c3c on 20/10/2026, 11:22:39 UTC. Based on publisher-provided feed evidence; may not cover the full original article. Check the source for details.
View archived briefing on IPFS
bafybeicbpovs4p3tr7qk3ybvxrjpulgd6wgzdw2ol7bvl3iqvb2hidiq7i