[CLSTR]
API
< Back to all clusters
[TECHNOLOGY] · United States · 21 sources

started · updated

Part of situation: Magnet Forensics iPhone security bypass development (2 clusters)

Magnet Forensics claims new tools can bypass Apple iPhone inactivity reboot

Magnet Forensics GrayKey Preserve iPhone security iOS 18.1 digital forensics

Magnet Forensics, the developer of the GrayKey tool used by law enforcement, has reportedly developed new methods to bypass Apple’s security features in iOS 18.1. A leaked training video, appearing to date from early 2025, details two primary solutions: a new hardware device called GrayKey Preserve and a software feature named Evidence Preservation Mode for existing GrayKey hardware.

Apple recently introduced an inactivity reboot feature that automatically restarts an iPhone if it remains unlocked for 72 hours. This reboot shifts the device from the After First Unlock (AFU) state, where more data is accessible, to the highly secure Before First Unlock (BFU) state, where encryption keys are locked within the Secure Enclave.

Magnet Forensics claims its new tools can maintain an iPhone in the AFU state even after a reboot or power loss. The GrayKey Preserve device reportedly works by isolating the device—disabling cellular, Wi-Fi, and Bluetooth connections—to prevent the internal timer from triggering a reboot. Additionally, the Evidence Preservation Mode is designed to prevent the automatic deletion of cached location data, recently deleted iMessages, and photos, allowing investigators more time to extract data before it is purged by the operating system.

Entities

404 Media · Apple · GrayKey · GrayKey Preserve · Magnet Forensics · iOS · iPhone

Claims

What the coverage asserts, and how many sources carry each claim.

Sources

La police contournerait le redémarrage automatique des iPhone selon des fuites [www.allotech-dz.com]
گزارش: پلیس ظاهراً یکی از امن‌ترین قابلیت‌های iOS را دور زده است | دیجینوی [diginoy.com]
Graykey Preserve e il riavvio a 72 ore: la capacità dichiarata e i limiti ancora da provare [www.sbircialanotizia.it]
La police pourrait disposer de nouveaux moyens pour accéder aux données des iPhone verrouillés [worldissmall.fr]
Ferramenta de perícia contorna reinício automático do iPhone [www.spacemoney.com.br]
Un iPhone bloccato si riavvia dopo 72 ore, ma le autorità possono comunque recuperare dati [www.hwupgrade.it]
Un video trapelato destinato alla polizia mostra come GrayKey aggira un’impostazione di sicurezza di iPhone | iSpazio [www.ispazio.net]
Tvůrce GrayKey prý obchází restart iPhonu po 72 hodinách nečinnosti [superapple.cz]
GrayKey e il reboot automatico di iPhone | SoTutto. it [sotutto.it]
Police May Have Found a Way to Keep Seized iPhones More Accessible [www.sofx.com]
Magnet Forensics 宣佈能繞過 iPhone 的「不活動重啟」安全功能 [www.techritual.com]
Il tuo iPhone si riavvia da solo per proteggerti, ma GrayKey potrebbe aggirarlo [gizchina.it]
GrayKey Preserve: Neue Methode soll iPhones nach 72 Stunden entsperrt halten [www.ad-hoc-news.de]
Παραβίαση ασφαλείας στα iPhone: Το εργαλείο που «παγώνει» τον χρόνο και υποκλέπτει δεδομένα [www.techgear.gr]
GrayKey iPhone güvenlik katmanını aşıyor [www.teknoblog.com]
GrayKey bei 1. 200 Behörden: Video behauptet Umgehung von iPhone-Schutz [borncity.com]
GrayKey maker claims tools can hold seized iPhones in unlockable state past Apple’s 72-hour reboot [macdailynews.com]
Polislerin kilitli iPhone'a erişememesi tarihe karıştı: Apple'ın güvenlik özelliği aşıldı! [www.donanimhaber.com]
'Politie kan 'inactivity reboot' iPhones via nieuw apparaat omzeilen' [www.security.nl]
新取证工具曝光，声称可绕过苹果 iOS 18. 1 引入的闲置自动重启保护机制 - IT之家 [www.ithome.com]
GrayKey maker can reportedly bypass the iPhone’s ‘Inactivity Reboot’ [9to5mac.com]