Cellebrite's 'Advanced Unlocks' Reportedly Exploits New iPhone Zero-Day via Radio Vector
A confidential document, reportedly leaked from **Cellebrite**, reveals a new, more robust iPhone unlocking solution dubbed 'Advanced Unlocks' (AU). This next-generation tool allegedly bypasses **Apple's** enhanced security measures, including Stolen Device Protection, by leveraging a novel radio-based zero-day exploit.
Cybersecurity researcher **Justin.sh** has brought to light details from a purportedly leaked internal **Cellebrite** document, outlining a significant advancement in their mobile device forensic capabilities.
### Introducing Advanced Unlocks (AU)
**Cellebrite** is reportedly rolling out a new product in 2026, internally referred to as 'Advanced Unlocks' (AU). This new offering is distinct from their previously marketed 'advanced unlocking services,' as confirmed by a press release earlier this year.
### A Resilient Next-Generation Vector
The leaked document describes AU as a "next-generation AFU vector that is more resilient to **Apple's** OS changes." AFU, or 'After First Unlock,' refers to the state where a device has been unlocked at least once since booting, making subsequent access easier. The implication here is that AU can bypass even more stringent security measures.
### Bypassing Stolen Device Protection
One of the most concerning capabilities attributed to AU is its ability to operate even when **Apple's** **Stolen Device Protection** is enabled. This feature significantly tightens USB restrictions, making physical data extraction much harder. The fact that AU can circumvent this suggests a profound bypass mechanism.
### The Radio Zero-Day Exploit
Perhaps the most striking detail is the method of operation: AU is reportedly enabled by a dedicated appliance with an astonishing stated range of about 8 meters. This strongly suggests a radio-based zero-day exploit, allowing for remote or proximate unlocking without direct physical connection via USB, a significant departure from traditional forensic methods.