Unpatchable 'usbliter8' Exploit Breaks Apple A12 and A13 SecureROM Boot Chain
2026-06-20T01:24:08Z•186017f3b8228622a603df56767c14f13423d61dd5730c2aa1013ab7abc3a055
ai agent exploitapple a12apple a13autojackbeats studio budscve-2025-20701cve-2026-42530cve-2026-48907cve-2026-50656f5fortibleedfortigatefortinetgentlekillerjcejoomlamicrosoft defendernginxraasransomwareremote code executionsecureromsocgholish takedown`,`supply chain attack`,`npm compromise`,`masunpatchable exploitusbliter8
What happened
Multiple high-impact security developments: an unpatchable SecureROM exploit (usbliter8) affecting Apple A12/A13 devices enables arbitrary SecureROM code execution; Microsoft researchers detail AutoJack, a browser-based chain that lets a web page coerce AI browsing agents into spawning host processes; widespread FortiGate compromise campaign (FortiBleed) and an actively exploited Joomla JCE flaw (CVE-2026-48907) with evidence of abuse; F5/NGINX critical RCE fixes (including CVE-2026-42530); Microsoft discloses a Defender elevation-of-privilege zero-day (CVE-2026-50656); Apple patches Beats ear
Why it matters
A reviewed impact interpretation has not been published for this record.
Evidence and limitations
- Source ID
- the_hacker_news
- Record identifier
- 186017f3b8228622a603df56767c14f13423d61dd5730c2aa1013ab7abc3a055
- Enrichment time
- 2026-06-20T01:24:08Z
- AI-assisted enrichment
- Yes
This record may overlap with other records. Its enrichment can be incomplete or wrong, and machine assistance was used. Validate consequential decisions against the linked source and your own environment.