Researchers Boot Jailbroken iOS 27 on iPhone 11 Pro Using usbliter8

🕵️ RESEARCH & DEEP DIVES

• Researchers Boot Jailbroken iOS 27 on iPhone 11 Pro Using usbliter8 Exploit
  Researchers booted a jailbroken iOS 27 on iPhone 11 Pro using the usbliter8 SecureROM exploit.

  • Targets Apple iPhone 11 Pro with A13 processor running iOS 27 beta 2 (build 24A5370h)
  • Exploits usbliter8 SecureROM vulnerability via USB Device Firmware Upgrade (DFU) mode
  • Requires physical device access, USB connection, and specialized hardware (RP2350-based Raspberry Pi Pico 2)
  • Custom firmware bypasses iOS security controls including USB Restricted Mode and sandbox restrictions
  • Resulting jailbreak disables key services like Secure Enclave Processor, Wi-Fi, baseband, and Bluetooth
  Sources 📎 Coverage: cybersecuritynews.com · 👁 via Cyber Security News

• New JSON RCE Bug Threatens Java Ecosystem
  A critical JSON remote code execution bug is emerging in the Java ecosystem.

  • Affects Java applications parsing JSON data
  • Enables remote code execution via malicious JSON input
  • Details on affected versions and exploitation methods remain undisclosed
  Sources 📎 Coverage: risky.biz · 👁 via Risky Business News

📋 ADVISORIES

• PyPI Blocks File Uploads on Releases Older Than 14 Days to Prevent Package Poisoning
  PyPI now blocks new file uploads on package releases older than 14 days to prevent supply-chain attacks.
  • Applies to Python Package Index (PyPI) package releases and maintainers
  • Prevents uploading new files to releases older than 14 days to stop malicious file additions
  • Targets attacks exploiting compromised maintainer tokens or CI/CD pipelines
  • Implemented in PyPI Warehouse codebase on July 8, 2022, after analyzing historical release patterns
  • Triggered by incidents like LiteLLM and Telnyx compromises in 2022 highlighting supply-chain risks
  Sources 📎 Coverage: cybersecuritynews.com · 👁 via Cyber Security News