Patch Me If You Can: The Truth About Smartphone Vulnerabilities

The report examines leaked Cellebrite and GrayKey forensic tools that demonstrate widespread smartphone vulnerabilities—particularly AFU (After First Unlock) and bootloader/USB exploits—that enable data extraction, evidence tampering, and temporary bypasses of anti-theft mechanisms; it highlights risks to users and organizations, documents active leakage of tool capabilities and cracked software, and recommends technical mitigations (e.g., inactivity reboot to BFU, stronger hardware/bootloader protections) and user best practices.