Report alleges iOS vulnerability exploited to bypass automatic reboot security feature

A report by 404Media alleges that Magnet Forensics, the company behind the GrayKey forensic toolset, has developed methods to bypass an iOS security feature that automatically reboots and secures an iPhone after 72 hours of inactivity. According to the report, Magnet has introduced a new device called GrayKey Preserve and a feature for existing GrayKey devices called Evidence Preservation Mode, both of which are designed to preserve data that iOS would otherwise delete or make inaccessible after inactivity or after a set period.

The report cites a leaked video in which a Magnet employee describes the new capability as "an absolute game changer for iOS forensics" and specifically mentions targeting the iPhone’s inactivity reboot feature. The employee also states that the tools can preserve data such as cached locations, recently deleted photos, and iMessages "for an infinite amount of time," countering iOS’s automatic deletion mechanisms.

The alleged bypass targets a security feature intended to place an iPhone into a more secure state after a defined period of inactivity, thereby limiting access to sensitive data. The report suggests that this capability could be used by law enforcement agencies equipped with Magnet’s tools.

The claims are based on reporting by 404Media, which also previously documented GrayKey’s ability to unlock and access data on iPhones and Android smartphones. The new allegations have not been independently verified by Apple or other third parties at the time of reporting.