AI

New BootROM Break for Apple A12 and A13: Why “usbliter8” Cannot Be Patched Away

<p>A new hardware-level security issue has entered the Apple ecosystem. Researchers from Paradigm Shift have published an exploit called “usbliter8” that enables code execution inside the SecureROM stage of Apple’s A12 and A13 chips.</p><p></p><p>This kind of vulnerability is very different from an ordinary software bug. SecureROM is the first boot code permanently written into the chip during manufacturing. It sits at the beginning of the device’s chain of trust and cannot be rewritten later. That means a flaw at this level cannot be fully removed with a standard iOS, iPadOS, watchOS, or firmware update.</p><p></p><p>That is what makes usbliter8 significant: when the exploit succeeds, it gains control before Apple’s signed boot process has a chance to take over.</p>