A small update surfaced this Tuesday evening for everyone that has been avidly looking forward to the public release of Linus Henze’s jailbreak untether for iOS & iPadOS 14.5.1 and below.
Hacker Justin Sherman announced over the weekend that a proof of concept and a full write-up for a kernel-level exploit supporting iOS & iPadOS 14.6-14.7 could be imminent, but what does it mean for iPhone and iPad owners, especially those who wish to use it for jailbreaking?
The Pangu Team is a name you might remember if you’ve been jailbreaking iPhones and iPads since ye olde days of iOS 9. Despite not releasing a public jailbreak since then, the Pangu Team continues to be hands-on with respect to iOS-related security research.
A wonderful example of that happened just this weekend in Chengdu, China at the TianfuCup (TFC) 2021, where the Pangu Team appears to be taking home the first-place prize in the contest by successfully pwning Apple’s brand-new iPhone 13 Pro running iOS 15 via a remote jailbreak. The earnings? A juicy $330,000 cash prize.
Security researcher Saar Amar on Monday published a proof of concept (PoC) of a kernel-level vulnerability dubbed CVE-2021-30883 that was patched by Apple’s iOS & iPadOS 15.0.2 software updates.
The write-up reignited hope that we’d see a jailbreak for recent iterations of Apple’s mobile operating systems, and perhaps unsurprisingly, some security researchers have already started going hands-on with it.
When Apple released iOS & iPadOS 15.0.2 on Monday, one of the major changes was a security patch for a vulnerability reported in IOMobileFrameBuffer in which memory corruption could have resulted in an app executing arbitrary code with kernel-level privileges.
It was only about a week after Apple released iOS & iPadOS 14.8 with patches for the zero-click exploits that were actively weaponized in the wild and by the Pegasus spyware that iOS developer Mario Cheung released a jailbreak tweak called FORCEDEXIT to address the issue on pwned handsets running affected firmware versions.
Today, Cheung seems to be at it again with a new and free jailbreak tweak dubbed EntitlementFix, which allegedly fixes three additional 0-day exploits known to impact jailbreakable versions of Apple’s mobile operating systems.
Last week, Apple released iOS & iPadOS 14.8 to the general public with important security patches for a zero-click exploit that could have resulted in arbitrary code execution.
Advanced fraud protection for Apple Card owners is now available as part of the iOS 15 update, which automatically rotates the card's three-digit security code every now and then.
Excitement is swirling around in the jailbreak community Monday evening after hacker and iOS developer @__spv took to Twitter to share thought-provoking Tweets related to untethered jailbreaks.
If you plan on installing iOS 15 when it releases publicly, you may want to temporarily turn off the new iCloud Private Relay feature because it's currently in beta and Apple says that people using it may experience various website issues.
It seemed like jailbreak-viable kernel exploits and security vulnerabilities for iOS & iPadOS 14 had all but disappeared over the course of the past several months, but with iOS & iPadOS 15 right around the corner, that appears to be changing.
For the past several years, the overwhelming majority of jailbreaks have been semi-untethered, meaning that you could still use a handset hacked liberated by said tools after a reboot, albeit in a non-jailbroken state.
The lack of untethered jailbreaks — or those that remain fully jailbroken following a reboot — has been a pain point for jailbreakers for as long as anyone can remember. For that reason, a Tweet shared by @LinusHenze Monday afternoon might be of particular interest…