$0 patch. Wrong budget line.
The usbliter8 exploit targets a hardware vulnerability in the USB controller and BootROM of iPhone A12 and A13 devices, allowing arbitrary code execution that cannot be corrected via software. This permanent exploit affects millions of iPhones, with no software patch available to fix the issue.
What everyone reads as a simple vulnerability problem is actually a hardware assurance failure. 42% of exploited vulnerabilities in 2025 were weaponized before public disclosure, according to the CrowdStrike Global Threat Report 2026. The geopolitical implications of such exploits are far-reaching, with nation-state actors potentially exploiting these vulnerabilities for strategic gain.
The defensive math: -> Implement a comprehensive mobile device security policy that accounts for unpatchable hardware vulnerabilities, with a 30-day review cycle to assess emerging threats. -> Conduct a risk assessment of all iPhone A12 and A13 devices in use, prioritizing those with access to sensitive data or systems, and aim to replace them within the next 6 months. -> Develop an incident response plan that includes procedures for responding to hardware-based exploits, with a goal of reducing the mean time to respond by 50% within the next quarter.
Can you quantify the risk of unpatchable hardware vulnerabilities in your organization's mobile device fleet?