All the hubbub lately surrounding kernel vulnerabilities for the iPhone and iPad has been in relation to the now-turned kernel exploit for iOS & iPadOS 15.0-15.1.1. But a fresh announcement shared Wednesday afternoon to Twitter by @Synacktiv is turning quite a few heads.
Ever since a kernel-level exploit for iPhones and iPads running iOS & iPadOS 15.0-15.1.1 officially dropped, major players of the jailbreak community have been looking into the feasibility of incorporating it into a public jailbreak. Odyssey Team lead developer CoolStar was among one of the first to publicly acknowledge this, however they also warned about how changes made under the hood would make jailbreaking later firmware on A12 and newer devices more of a challenge.
It’s not very often that we bear witness of jailbreak add-ons made especially for Apple Pay, but that’s exactly what you can expect from an upcoming released dubbed Sydney by iOS developer bank5ia.
If you’ve been following the developments surrounding iOS & iPadOS security research lately, then there’s no way you could have missed Brightiup’s CVE-2021-30955 kernel bug for iOS & iPadOS 15.0-15.1.1. Soon after the write-up, hackers and security researchers alike began making proof-of-concepts (PoCs), and later came the full-blown exploit from @b1n4r1b01.
The AltStore team released an updated version of the AltStore side-loading application for iPhones and iPads this Monday afternoon, officially bringing the software up to version 1.4.9.
With the news of an iOS & iPadOS 15.0-15.1.1-compatible kernel exploit being released, many iPhone and iPad users who’ve been wanting to jailbreak their handset have subsequently started seeking ways to upgrade to iOS or iPadOS 15.1 or 15.1.1 while they still can. While DelayOTA can be a solid option for anyone who hasn’t saved .shsh2 blobs, those who have can alternatively use futurerestore to update to these firmware versions.
Hacker @b1n4r1b01 attracted heaps of attention Tuesday morning after publishing a full kernel exploit for iOS & iPadOS 15.0-15.1.1 that was based on Brightiup’s CVE-2021-30955 kernel bug write-up.
Those closely following the iOS & iPadOS software security sector might remember an iOS & iPadOS 15.0-15.1.1 kernel bug write-up published by Kunlun Lab security researcher @realBrightiup just last week. A day later, Alibaba Security Pandora Lab security researcher @Peterpan980927 showed off a proof-of-concept (PoC) using that write-up as a template.
Anyone who uses Zebra on their jailbroken iPhone or iPad to manage their jailbreak add-on installations might be interested to learn that an update for the popular alternative to native package manager apps such as Cydia and Sileo was released Sunday evening.
Jailbreakers who are using the Saily package manager on their pwned iPhones and iPads might be excited to learn that a new version was released this Friday morning with a small list of changes.
Just yesterday, we shared Kunlun Lab security researcher @realBrightiup’s write-up about CVE-2021-30955, a kernel bug that could have resulted in arbitrary code execution with kernel-level privileges via the app sandbox if exploited on iOS or iPadOS 15.0-15.1.1.
If you’re using checkra1n to jailbreak an A11-equipped handset with iOS or iPadOS 14, then you can’t have a native passcode or use biometric authentication methods like Face ID or Touch ID.