iOS 18 added secret and smart security feature that reboots iThings after three days
ID: 7fa6e95d-ce78-519a-b1cd-844cc5d07d1f
STIX ID: report--7fa6e95d-ce78-519a-b1cd-844cc5d07d1f
Feed Name: The Register (Security)
iOS 18 introduces an undocumented “inactivity reboot” that automatically restarts iPhones after 72 hours of no use, reverting them to the more secure BFU state; researcher Jiska Classen’s reverse engineering shows the Secure Enclave signals the AppleSEPKeyStore kernel module, which triggers a user-space reboot managed by SpringBoard, with logs sometimes showing SystemMemoryReset. This mitigation shrinks the time window for attackers and increases pressure on forensic analysts (who may still access limited BFU/system artifacts and KTX thumbnails), while claims of older devices being remotely triggered to reboot appear unfounded.
Your team is not currently subscribed to this feed. You must subscribe to it in order to see this post.
