Skip to content
November 15, 2026
  • Bluesky
  • Facebook
  • Linkedin
  • Mastodon
  • RSS
  • Twitter
  • Youtube

Daily CyberSecurity

Zero-hour alerts. Unmatched analysis.

Primary Menu
  • Home
  • ADVISORIES
    • Microsoft
    • Fortinet
    • Ivanti
    • Cisco
    • Linux
    • Citrix
  • CVE Data
    • CVE Watchtower
    • Top Exploited CVEs
    • CVE Stats by Vendor
    • Q3 2026 Report
    • CVE Alerts
    • CVE Alert Settings
    • Pricing
  • Cyber Criminals
  • Data Leak
  • Free Tools
    • CVSS 3.1 Calculator
    • Certificate Viewer
    • DNS Lookup
    • Encoder & Hash Generator
    • IP / Subnet Calculator
    • Whois Lookup
  • Malware
  • Vulnerability News
  • Submit Press Release
Light/Dark Button
  • Home
  • News
  • Technology
  • iPhone X may be cracked
  • Technology

iPhone X may be cracked

Do Son February 28, 2018 3 minutes read

According to Forbes, a well-known U.S. business magazine, a U.S. government contractor claims it can unlock almost all iPhone devices on the market.

This could be a huge breakthrough for law enforcement agencies that used to dispute Apple for a long time to unlock their device from suspects but could also raise a major privacy issue for Apple device users.

According to Forbes, Cellebrite is a wholly-owned subsidiary of Japan’s Sun Corporation and headquartered in Israel. Its clients include the two major law enforcement agencies in the United States: the FBI and USICE, and one of Cellebrite’s businesses are helping customers unlock their mobile devices.

For law enforcement officials, the ability to crack Apple’s iOS devices is key to law enforcement officials, who often blame Apple and other mobile device makers for taking strong encryption of their products without providing law enforcement.

The Forbes article quotes an unnamed source as saying that Cellebrite has told its clients that its engineers now have the power to break the security of running iOS 11 Apple devices. IOS 11 is released with the latest iPhone X and iPhone 8 smartphones and offers new features designed to make it harder for anyone to break into the iPhone, including law enforcement.

Forbes also pointed out that Cellebrite has not officially announced that it already has the capacity, but its sales representatives have sent a marketing material to law enforcement officials and private forensics companies around the world. The material does not provide specific details but shows that the company is able to unlock most iPhone and Android devices (which may include Samsung Galaxy and Note series, Alcatel, Google Nexus, HTC Huawei, LG, Motorola, ZTE and many other manufacturers Produced by Android smartphone).

Cellebrite’s Marketing Materials wrote: “Cellebrite unlocking is the industry’s leading and unique solution to breaking down most of the latest and most advanced devices on the market, breaking down Apple iOS devices including the iPhone, iPad, iPad mini and iPad Pro iPod touch and operating system from iOS 5 to iOS 11. ”

 

Although Cellebrite is advertising its own capabilities, it is unclear what kind of information can be extracted from the latest iOS devices.

Although we still cannot judge the authenticity of the story, or if Cellebrite can really crack iPhone X and iPhone 8, the legend of Cellebrite crunched “iPhone Security Mythology” has already been released in 2016.

Israel’s Yedioth Ahronoth reported in 2016 that in order to crack a homicide, FBI invited Cellebrite to crack the suspect’s iPhone 5C. And in 2017, according to Spanish media reports, Cellebrite once again helped the FBI successfully cracked iPhone 6’s Secure Enclave. It was also reported that in November last year, the Department of Homeland Security (DHS) cracked the iPhone X of a suspect in an arms trafficking case, possibly with the assistance of a Cellebrite expert.

Apple and Cellebrite have not made any comment at this moment after the publication of Forbes.

Add Daily CyberSecurity as a preferred source on Google

Related coverage

  • Firefox Bolsters Security: New Scan Detects Crypto Wallet Thieves!
  • Cloudflare DMARC Management Reaches General Availability
  • Cloudflare PACT Protocol: A Privacy-First Era of Verification
  • Firefox Redesign Compact Mode Returns With AI Off Switch
  • Beyond Text: How Google Gemini’s New Multimodal RAG Turns Images and PDFs into Actionable Intelligence
  • Brave Search API Shifts Its New Plans to Prepaid Billing
Track all actively exploited CVEs →

Support Our Threat Intelligence

Find our tech and OS security coverage helpful? Support our work today and unlock a 100% ad-free reading experience!

Buy Me a Coffee Logo Buy Me a Coffee
Select your plan
Free Pro Team

Hover over a plan to see its benefits.

Get Zero-Hour Vulnerability Alerts

Critical CVEs, CVSS scores, and PoC updates — straight to your inbox every week.

We respect your inbox. Unsubscribe anytime.

SHARE
Share on FacebookShare on XShare on LinkedInShare on TelegramShare on BlueskyShare on Mastodon
Written by
@DdoS · Security Researcher

Do Son

Do Son is the Founder and Editor of Daily CyberSecurity. Working in cybersecurity since 2013, he reports on vulnerabilities, malware, and emerging threats, providing timely analysis to help organizations and individuals stay ahead of evolving risks.

Tags: iPhone X

🚨 Active Exploits in the Wild

  • CVE-2024-58406CVSS 8.7
    Huatian Dynamic OA8000 collaborative office system contains an unauthenticated path traversal vulnerability in /OAapp/jsp/trace/ntkodownload.jsp, where the filename request...
    Watchtower Verified📅 Updated: Nov 13, 2026
  • CVE-2026-114713CVSS 8.6
    The labeled-response module in UnrealIRCd 6.0.0 before 6.2.7.1 does not escape the IRCv3 "label" message tag when echoing...
    CISA KEV📅 Added to KEV: Nov 13, 2026
  • CVE-2026-123039CVSS 7.8
    The Gaia OS DynamicCLI daemon runs as root and listens on a world-writable local socket (/tmp/dynamic_socket) without authenticating...
    CISA KEV📅 Added to KEV: Nov 13, 2026
  • CVE-2026-20320CVSS 7.5
    A vulnerability in the Open Client Interface (OCI) XML Parser of Cisco BroadWorks could allow an unauthenticated, remote...
    CISA KEV📅 Added to KEV: Nov 10, 2026
  • CVE-2026-111793CVSS 4.3
    Openwave Webtop Media Transcoder does not enforce administrator-defined file type restrictions to restrict the file-types to be converted....
    CISA KEV📅 Added to KEV: Nov 10, 2026
  • CVE-2026-111560CVSS 8.6
    Improper neutralization of shell metacharacters in the timezone configuration field in certain Barracuda appliance products using common Barracuda...
    CISA KEV📅 Added to KEV: Nov 10, 2026
  • CVE-2026-116606CVSS 9.3
    An authentication bypass in Barracuda Email Security Gateway versions earlier than 9.4.0.030 allows an unauthenticated remote attacker to...
    CISA KEV📅 Added to KEV: Nov 10, 2026
  • CVE-2026-125350
    Use after free in XML. Reported by anonymous on 2026-11-06. Google is aware that an exploit for CVE-2026-125350...
    CISA KEV📅 Added to KEV: Nov 10, 2026
Powered by CVE Watchtower

Search

CVE ALERTS
📈

EPSS Spike Alerts
Catch risk spikes before they make headlines.

🎯

Custom EPSS/CVSS
Set score thresholds to effectively filter noise.

🛡️

Exploit Intel
Real-world exploit signals beyond the KEV catalog.

🐙

GitHub Issues
Auto-create alert tickets without duplication.

📬

Weekly Digest
Clean summaries, eliminating email spam.

🏷️

Watchlist Groups
Tag vulnerabilities by team (Infra/AppSec/SOC).

🔀

Smart Routing
Route chat channels based on severity levels.

🚨

RBP Tracker
Early warning detection and tracking system.

Get free CVE alerts Pro from $7/mo

Critical Vulnerabilities

  • CVE-2026-129483CVSS 9.3
    Cyrus SASL through 2.1.28 contains an authentication bypass vulnerability in the SRP server mechanism because srp_server_mech_step2 does not...
    📅 Updated: Nov 15, 2026
  • CVE-2026-129453CVSS 9.4
    A vulnerability was found in DrayTek Vigor2960 1.5.1.6. This issue affects the function check_file_exist of the file /cgi-bin/mainfunction.cgi...
    📅 Updated: Nov 15, 2026
  • CVE-2026-124560CVSS 9.3
    A vulnerability was found in D-Link DIR-878 1.20B05. This affects the function GetCAPTCHAsetting of the file bin/prog.cgi of...
    📅 Updated: Nov 15, 2026
  • CVE-2026-129452CVSS 9.4
    A vulnerability has been found in DrayTek Vigor2960 1.5.1.6. This vulnerability affects the function set_table of the file...
    📅 Updated: Nov 15, 2026
  • CVE-2026-129451CVSS 9.4
    A flaw has been found in DrayTek Vigor2960 up to 1.5.1.6. This affects the function app_guest_export of the...
    📅 Updated: Nov 15, 2026
  • CVE-2026-129450CVSS 9.4
    A vulnerability was detected in DrayTek Vigor2960 1.5.1.6. Affected by this issue is the function sub_1E084 of the...
    📅 Updated: Nov 15, 2026
  • CVE-2026-129449CVSS 9.4
    A security vulnerability has been detected in DrayTek Vigor2960 up to 1.5.1.6. Affected by this vulnerability is the...
    📅 Updated: Nov 15, 2026
  • CVE-2026-129349CVSS 9.1
    When authentication caching is enabled on DefaultLdapRealm, after a user logs in successfully once, subsequent logins for that...
    📅 Updated: Nov 15, 2026
Powered by CVE Watchtower

Daily CyberSecurity

  • About Daily CyberSecurity
  • Advertise with us
  • Announcement
  • Contact
  • Contributor Register
  • Login
  • Disclaimer
  • DMCA
  • Privacy Policy

When you purchase through links on our site, we may earn an affiliate commission. Here’s how it works

  • CVE Watchtower
  • CVE Statistics by Vendor 2026
  • Q3 2026 Report
  • Top Exploited CVEs
  • Bluesky
  • Facebook
  • Linkedin
  • Mastodon
  • RSS
  • Twitter
  • Youtube
© 2017 - 2026 Daily CyberSecurity. All Rights Reserved.