Skip to content
June 22, 2026
  • Linkedin
  • Twitter
  • Facebook
  • Youtube

Daily CyberSecurity

Zero-hour alerts. Unmatched analysis.

Primary Menu
  • Home
  • CVE Watchtower
  • Cyber Criminals
  • Data Leak
  • Linux
  • Malware
  • Vulnerability
  • Submit Press Release
  • Vulnerability Report
Light/Dark Button
  • Home
  • News
  • Technology
  • iPhone X may be cracked
  • Technology

iPhone X may be cracked

Do Son February 28, 2018 3 minutes read
Add as a preferred
source on Google

According to Forbes, a well-known U.S. business magazine, a U.S. government contractor claims it can unlock almost all iPhone devices on the market.

This could be a huge breakthrough for law enforcement agencies that used to dispute Apple for a long time to unlock their device from suspects but could also raise a major privacy issue for Apple device users.

According to Forbes, Cellebrite is a wholly-owned subsidiary of Japan’s Sun Corporation and headquartered in Israel. Its clients include the two major law enforcement agencies in the United States: the FBI and USICE, and one of Cellebrite’s businesses are helping customers unlock their mobile devices.

For law enforcement officials, the ability to crack Apple’s iOS devices is key to law enforcement officials, who often blame Apple and other mobile device makers for taking strong encryption of their products without providing law enforcement.

The Forbes article quotes an unnamed source as saying that Cellebrite has told its clients that its engineers now have the power to break the security of running iOS 11 Apple devices. IOS 11 is released with the latest iPhone X and iPhone 8 smartphones and offers new features designed to make it harder for anyone to break into the iPhone, including law enforcement.

Forbes also pointed out that Cellebrite has not officially announced that it already has the capacity, but its sales representatives have sent a marketing material to law enforcement officials and private forensics companies around the world. The material does not provide specific details but shows that the company is able to unlock most iPhone and Android devices (which may include Samsung Galaxy and Note series, Alcatel, Google Nexus, HTC Huawei, LG, Motorola, ZTE and many other manufacturers Produced by Android smartphone).

Cellebrite’s Marketing Materials wrote: “Cellebrite unlocking is the industry’s leading and unique solution to breaking down most of the latest and most advanced devices on the market, breaking down Apple iOS devices including the iPhone, iPad, iPad mini and iPad Pro iPod touch and operating system from iOS 5 to iOS 11. ”

 

Although Cellebrite is advertising its own capabilities, it is unclear what kind of information can be extracted from the latest iOS devices.

Although we still cannot judge the authenticity of the story, or if Cellebrite can really crack iPhone X and iPhone 8, the legend of Cellebrite crunched “iPhone Security Mythology” has already been released in 2016.

Israel’s Yedioth Ahronoth reported in 2016 that in order to crack a homicide, FBI invited Cellebrite to crack the suspect’s iPhone 5C. And in 2017, according to Spanish media reports, Cellebrite once again helped the FBI successfully cracked iPhone 6’s Secure Enclave. It was also reported that in November last year, the Department of Homeland Security (DHS) cracked the iPhone X of a suspect in an arms trafficking case, possibly with the assistance of a Cellebrite expert.

Apple and Cellebrite have not made any comment at this moment after the publication of Forbes.

Related coverage

  • Google open .app suffix top-level domain registration
  • Collateral Damage: Anthropic’s Aggressive DMCA Dragnet Snares Thousands of Innocent GitHub Forks
  • ChatGPT Market Share Slips Below 50% As Rivals Grow
  • The AI Hectocorn: Anthropic Hits $350B Valuation as Microsoft and NVIDIA Hedge Their Bets
  • Googlebook Debuts with AluminumOS and Surprising x86 Intel Support

Support Our Threat Intelligence

If you find our CVE report and cybersecurity news helpful, consider supporting our work.

Buy Me a Coffee Logo Buy Me a Coffee PayPal
Crypto QR Code
USDT (TRC20):
TN8BdV8cp4T1Cd28gK9qTAnZknzzuwyUtm
USDT (ERC20):
0x3725e1a7d3bc5765499fa6aaafe307fabcd75bce

Share this article:

Facebook Post LinkedIn Telegram
Written by
@DdoS · Security Researcher

Do Son

Do Son is the Founder and Editor of SecurityOnline.info. Working in cybersecurity since 2013, he reports on vulnerabilities, malware, and emerging threats, providing timely analysis to help organizations and individuals stay ahead of evolving risks.

Tags: iPhone X

Search

Translation

CVE WATCHTOWER
🚨

Receive alerts for vulnerabilities being exploited in the wild.

⚡

Get notified instantly when a Proof of Concept (PoC) exploit is published.

🔍

Access critical info on vulnerabilities even when marked as "RESERVED".

🧠

Insights powered by decades of expertise and global intelligence sources.

🎯

Customize alerts with up to 10 keywords for your specific tech stack.

📊

Export the raw CVE database for SIEM integration and reporting.

Upgrade Package

🔴 Live Critical Threats

  • CVE-2026-28381CVSS 9.6
    The Snowflake datasource allows for GET/PUT commands, which can allow any user...
  • CVE-2026-10561CVSS 10.0
    IBM Langflow OSS 1.0.0 through 1.9.3 has an vulnerability due to an...
  • CVE-2026-7664CVSS 9.8
    IBM Langflow OSS 1.0.0 through 1.8.4 could allow unauthenticated attackers to access...
  • CVE-2026-56395CVSS 9.6
    SiYuan before v3.6.1 fails to sanitize package metadata and README content in...
  • CVE-2026-56265CVSS 9.8
    Crawl4AI before 0.8.7 contains an authentication bypass vulnerability due to a hardcoded...
  • CVE-2026-5366CVSS 9.9
    Prefect version 3.6.23 is vulnerable to remote code execution due to improper...
  • CVE-2024-58351CVSS 9.8
    Flowise before 2.1.4 allows configuration to be injected into the Chainflow during...
  • CVE-2022-50972CVSS 9.8
    WooCommerce 7.1.0 contains a remote code execution vulnerability that allows attackers to...
  • CVE-2019-25763CVSS 9.8
    WordPress Ultimate Addons for Beaver Builder 1.2.4.1 contains an authentication bypass vulnerability...
  • CVE-2026-11551CVSS 9.8
    The Branda plugin for WordPress is vulnerable to privilege escalation via account...
Powered by CVE WATCHTOWER

🚨 Active Exploits in the Wild

  • CVE-2026-20230CVSS 8.6
    A vulnerability in Cisco Unified Communications Manager (Unified CM) and Cisco Unified Communications Manager Session Management Edition (Unified...
  • CVE-2026-4020CVSS 7.5
    The Gravity SMTP plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and...
  • CVE-2026-10735
    Multiple plugins by ShapedPlugin contain a backdoor in various versions. This makes it possible for unauthenticated attackers to...
  • CVE-2026-20262CVSS 6.5
    A vulnerability in the web UI of Cisco Catalyst SD-WAN Manager, formerly SD-WAN vManage, could allow an authenticated,...
  • CVE-2026-54420CVSS 8.5
    LiteSpeed cPanel plugin before 2.4.8 (as distributed in LiteSpeed WHM PlugIn before 5.3.2.0) mishandles symlinks provided by a...
  • CVE-2026-53435CVSS 8.8
    In Jenkins 2.567 and earlier, LTS 2.555.2 and earlier, it is possible for attackers to have Jenkins deserialize...
  • CVE-2026-10795CVSS 8.1
    The UpdraftPlus: WP Backup & Migration Plugin plugin for WordPress is vulnerable to Authentication Bypass in all versions...
  • CVE-2026-11645
    Out of bounds read and write in V8 in Google Chrome prior to 149.0.7827.103 allowed a remote attacker...
  • CVE-2026-50751CVSS 9.3
    A logic flow weakness in Remote Access and Mobile Access certificate validation in deprecated IKEv1 key exchange allows...
  • CVE-2026-20245CVSS 7.8
    A vulnerability in the CLI of Cisco Catalyst SD-WAN Manager, formerly SD-WAN vManage, could allow an authenticated, local...
Powered by CVE Watchtower

Our Websites
  • Penetration Testing Tools
  • The Daily Information Technology
  • Daily CyberSecurity

    • About SecurityOnline.info
    • Advertise with us
    • Announcement
    • Contact
    • Contributor Register
    • Login
    • About SecurityOnline.info
    • Advertise on SecurityOnline.info
    • Contact Us

    When you purchase through links on our site, we may earn an affiliate commission. Here’s how it works

    • Disclaimer
    • Privacy Policy
    • DMCA NOTICE
    • Linkedin
    • Twitter
    • Facebook
    • Youtube
    © 2017 - 2026 Daily CyberSecurity. All Rights Reserved.