A leaked Magnet Forensics video reportedly shows a new way to stop some iPhones from entering a more secure state after 72 hours of inactivity. The report says GrayKey Preserve and Evidence Preservation Mode can bypass Apple's automatic reboot feature and keep otherwise temporary data, such as cached locations and recently deleted photos or iMessages, available for forensic extraction. No CVE, affected iOS versions, or patch details were provided.
Why it matters: This matters to iPhone users, defenders, and civil-liberties groups because a security feature meant to protect unattended devices may be bypassed in practice. Apple administrators and high-risk users should watch for Apple guidance or patches, especially where devices face seizure, loss, or forensic access attempts.
Bruce Schneier
2026.10.06
100% relevant
This article appears to be the first specific report here about Magnet Forensics' GrayKey Preserve or Evidence Preservation Mode bypassing Apple's automatic reboot protection, so it establishes a distinct new story.
← Back to all stories