🕵️ RESEARCH & DEEP DIVES
-
Researchers Boot Jailbroken iOS 27 on iPhone 11 Pro Using usbliter8 Exploit
Researchers booted a jailbroken iOS 27 on iPhone 11 Pro using the usbliter8 SecureROM exploit.- Targets Apple iPhone 11 Pro with A13 processor running iOS 27 beta 2 (build 24A5370h)
- Exploits usbliter8 SecureROM vulnerability via USB Device Firmware Upgrade (DFU) mode
- Requires physical device access, USB connection, and specialized hardware (RP2350-based Raspberry Pi Pico 2)
- Custom firmware bypasses iOS security controls including USB Restricted Mode and sandbox restrictions
- Resulting jailbreak disables key services like Secure Enclave Processor, Wi-Fi, baseband, and Bluetooth
📎 Coverage: cybersecuritynews.com · 👁 via Cyber Security News
-
New JSON RCE Bug Threatens Java Ecosystem
A critical JSON remote code execution bug is emerging in the Java ecosystem.- Affects Java applications parsing JSON data
- Enables remote code execution via malicious JSON input
- Details on affected versions and exploitation methods remain undisclosed
📎 Coverage: risky.biz · 👁 via Risky Business News
📋 ADVISORIES
- PyPI Blocks File Uploads on Releases Older Than 14 Days to Prevent Package Poisoning
PyPI now blocks new file uploads on package releases older than 14 days to prevent supply-chain attacks.- Applies to Python Package Index (PyPI) package releases and maintainers
- Prevents uploading new files to releases older than 14 days to stop malicious file additions
- Targets attacks exploiting compromised maintainer tokens or CI/CD pipelines
- Implemented in PyPI Warehouse codebase on July 8, 2022, after analyzing historical release patterns
- Triggered by incidents like LiteLLM and Telnyx compromises in 2022 highlighting supply-chain risks
📎 Coverage: cybersecuritynews.com · 👁 via Cyber Security News