SECURITY
SECURITY
SECURITY
New jailbreak tool works on recent iOS versions, including the latest 13.5 release
The hacker group UncOver has released a new jailbreak tool for iOS devices that includes the most recent 13.5 release of the operating system.
Jailbreaking is the process of hacking an iOS device to allow users to remove software restrictions put in place by Apple. A jailbroken phone allows users to install third-party software not available in the App Store and gives them the ability to customize the devices.
The new jailbreak release, Unc0ver 5.0.0. jailbreaks iOS from versions 11.0 onward and exploits a “zero-day” vulnerability that Apple Inc. is not aware of. The tool is said to be the first zero-day jailbreak release since iOS 8.
#unc0ver v5.0.0 will be the first 0day jailbreak released since iOS 8!
Every other jailbreak released since iOS 9 used 1day exploits that were either patched in the next beta version or the hardware.
This will be a big milestone for jailbreaking.
— @Pwn20wnd (@Pwn20wnd) May 23, 2020
Notably, a jailbreak was released for some iOS devices in August, but that tool, released by Pwn20wnd, exploited a vulnerability in iOS devices that had been patched by Apple from iOS version 12.3 and later. Pwn20wnd, as a member of the Unc0ver team, discovered the zero-day vulnerability used in the new jailbreaking tool.
The tool can be used from iOS, macOS, Windows and Linux. Unc0ver said that the jailbreak is stable and doesn’t drain battery life or prevent the use of Apple services such as iCloud, Apple Pay or iMessage. “This jailbreak basically just adds exceptions to the existing rules,” Pwn20wnd told Wired. “It only enables reading new jailbreak files and parts of the file system that contain no user data.”
Although early reviews for the release are positive, jailbreaking an iOS device still presents a potential security risk. iOS may not have the same freedom to install apps and customize appearance that Android has, but Apple has always countered that it provides a higher level of security. By opening the door to nonreviewed iOS apps, users run the risk of installing malware and other nefarious apps on their devices.
Apple has yet to respond to the news but it can be easily guessed that they’ll be looking to identify the zero-day vulnerability used by Unc0ver and seeking to patch it as soon as possible. In the smaller jailbreak in August, Apple delivered a patch for the exploited vulnerability in seven days. Presuming that new vulnerability can be patched, a similar reaction can be expected again.
Image: Unc0ver
A message from John Furrier, co-founder of SiliconANGLE:
Support our mission to keep content open and free by engaging with theCUBE community. Join theCUBE’s Alumni Trust Network, where technology leaders connect, share intelligence and create opportunities.
- 15M+ viewers of theCUBE videos, powering conversations across AI, cloud, cybersecurity and more
- 11.4k+ theCUBE alumni — Connect with more than 11,400 tech and business leaders shaping the future through a unique trusted-based network.
Are you AWS customer? Support SiliconANGLE Financially by buying your AWS services from our Marketplace portal page and links.
About SiliconANGLE Media
SiliconANGLE Media is a recognized leader in digital media innovation, uniting breakthrough technology, strategic insights and real-time audience engagement. As the parent company of SiliconANGLE, theCUBE Network, theCUBE Research, CUBE365, theCUBE AI and theCUBE SuperStudios — with flagship locations in Silicon Valley and the New York Stock Exchange — SiliconANGLE Media operates at the intersection of media, technology and AI.
Founded by tech visionaries John Furrier and Dave Vellante, SiliconANGLE Media has built a dynamic ecosystem of industry-leading digital media brands that reach 15+ million elite tech professionals. Our new proprietary theCUBE AI Video Cloud is breaking ground in audience interaction, leveraging theCUBEai.com neural network to help technology companies make data-driven decisions and stay at the forefront of industry conversations.
