Summary
Security researchers at Paradigm Shift have publicly disclosed “usbliter8,” a new unpatchable BootROM exploit affecting Apple’s A12 and A13 chips along with S4 and S5 SoCs. The exploit and a working proof-of-concept were released on June 18, 2026, following coordinated disclosure with Apple Product Security.
The vulnerability resides in the Synopsys DWC2 USB controller hardware — permanently burned into silicon and impossible to fix via software updates. Exploitation requires physical access: the target device must be placed in DFU mode and connected via USB to a specialized RP2350-based microcontroller board. Once triggered, usbliter8 achieves arbitrary code execution within the SecureROM, the very first code that runs at boot, enabling an attacker to bypass Apple’s entire signed boot chain.
Affected devices include iPhone XS, XR, and 11 lines, the iPhone SE (2nd gen), several iPad models, and Apple Watch Series 4 and 5. While the physical access requirement limits mass exploitation, the implications for high-security environments and forensics are significant.
Source
The Hacker News — Unpatchable usbliter8 Exploit Breaks Apple SecureROM
9to5Mac — New Unpatchable Exploit Targets A12 and A13 Chips
SecurityWeek — New Exploit Bypasses Apple’s Boot Defenses
Commentary
This is checkm8’s successor, and it matters for the same reasons the original did. An unpatchable BootROM exploit means the affected devices will carry this vulnerability for their entire lifespan. For the average consumer, the physical access requirement makes this largely academic. For anyone in government, journalism, activism, or corporate espionage target demographics, it’s a different story entirely.
The forensics implications are massive — usbliter8 could enable extraction of data from locked devices in ways Apple’s security model was designed to prevent. Law enforcement and intelligence agencies will undoubtedly be interested. For red teamers and security researchers, this opens up hardware-level analysis of Apple’s boot chain on relatively modern silicon. The A12/A13 generation is still widely deployed, and these devices won’t age out of circulation for years. If you’re responsible for device security in a high-threat environment, it’s time to start planning hardware refreshes.