Leaked Cellebrite note describes an iPhone Advanced Unlocks product
Original title: Possible new Cellebrite iPhone Radio Zero-Day
The leaked note says a dedicated appliance can reach after-first-unlock iPhones from about 8 meters, including with Stolen Device Protection on.
Bruce Schneier relays reporting by Justin.sh on a confidential Cellebrite document describing Advanced Unlocks, a 2026 product distinct from Cellebrite’s older “advanced unlocking services.” Cellebrite is quoted calling it a next-generation after-first-unlock vector meant to be more resilient to Apple OS changes and usable with Stolen Device Protection enabled. The note says a dedicated appliance has a stated range of about 8 meters. No CVE or independent technical confirmation is included.
Unconfirmed: The capability is described only in a confidential document leaked to Justin.sh and has not been independently verified.
- A press release earlier this year is cited as confirming Advanced Unlocks as a 2026 product.
- Cellebrite’s term AU is not the long-marketed advanced unlocking services.
- The document describes an after-first-unlock vector rather than a named CVE.
Impact: Possible after-first-unlock access to nearby iPhones
| Product | Affected |
|---|---|
| Apple iPhone | — |
- Vendors
- CellebriteApple
- Products
- iPhoneAdvanced Unlocks
From the original article
1 min read at schneier.comJustin. sh is reporting on a confidential Cellebrite document that has been leaked to him: Cellebrite calls it Advanced Unlocks (AU from here on), not to be confused with the “advanced unlocking services” they’ve marketed for years. A press release from earlier this year confirms AU is a new product for 2026.
By Bruce Schneier · schneier.com
A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.