However, the company says there is no significant user impact, as the UFED app can be used to extract the data and then pass it to Physical Analyzer for analysis. This security patch strengthens the protection of the solutions.Īs part of the update, the Advanced Logical iOS extraction flow is now available in Cellebrite UFED only. This message is to inform you that we have new product updates available for the following solutions:Ĭellebrite UFED 7.44.0.205 and Cellebrite Physical Analyzer 7.44.2 have been released to address a recently identified security vulnerability. However, it appears that it was unable to protect against the method Signal was using to corrupt the Physical Analyzer software, as it told users that the app no longer allows data extraction from iPhones using this software. Cellebrite Physical Analyzer announcementĬellebrite responded by updating its software to close some of the security holes. These files are never used for anything inside Signal and never interact with Signal software or data, but they look nice, and aesthetics are important in software. In completely unrelated news, upcoming versions of Signal will be periodically fetching files to place in app storage. The company chose an ironic tone in making this announcement. Indeed, even some non-Signal users chose to install the app simply to get this protection. The post said that the company was now doing this for all Signal users. This would not only render useless the scan of the connected iPhone, but also corrupt the results of both past and future scans using the same machine.Īll that was required, Signal said in a blog post, was to place a carefully crafted file onto the device. It was able to exploit one of these to allow any iPhone to corrupt the data on any machine running the software. The messaging company carried out its own analysis of the software, finding a surprising number of security vulnerabilities. Signal managed to get its hands on the software suite, including the Physical Analyzer module, which offers the deepest dive into the data stored on a smartphone. The company’s products are used by law enforcement agencies around the world, including those in some unsavory nation states likely to be using them to crack down on political dissidents. Signal discovered multiple security vulnerabilities in Cellebrite’s software, and was able to find a way to booby-trap iPhones to corrupt the results of a scan using Physical Analyzer …Ĭellebrite offers hardware and software designed to allow users to break into smartphones, and extract data from them. This follows the discovery and exploitation of a vulnerability by secure messaging app Signal. The Cellebrite Physical Analyzer – the most intrusive phone-cracking tool offered by the company – no longer supports the direct extraction of iPhone data, according to a document shared with us.

Ufed reader troubleshooting