A legal battle is shaking the cybersecurity world after a researcher revealed a permanent vulnerability in Apple's A12 and A13 chips. Digital forensics firm Magnet Forensics has filed a lawsuit against cybersecurity startup Paradigm Shift, accusing it of revealing trade secrets through a boot ROM exploit, a flaw that cannot be fixed with a software update.
Trade secrets theft allegations involve former employee Mario Del Gaudio
According to the complaint filed in a Georgia federal court, the vulnerability disclosed by Paradigm Shift is substantially the same as the one former Magnet Forensics employee Mario Del Gaudio was working on before joining Paradigm Shift. Del Gaudio allegedly brought confidential information with him, and Magnet Forensics claims that publishing the technical details constitutes a misappropriation of trade secrets. The company seeks damages and permanent removal of the content.
Sponsored Protocol
A12 and A13 chips power iPhone XS and iPhone 11 with permanent vulnerability
The A12 and A13 chips are used in devices such as the iPhone XS, iPhone XR, iPhone 11, and iPhone 11 Pro. The flaw resides in the boot ROM, a piece of read-only memory that contains the system's startup code. Because the boot ROM cannot be altered after production, the vulnerability is considered unpatchable via an iOS update. This means affected devices remain exposed to potential hardware-level attacks, although exploitation requires physical access and advanced skills.
Implications for security and the legal landscape of research
This case raises critical questions about the boundary between legitimate security research and intellectual property protection. Paradigm Shift had published a detailed technical post, later removed after the lawsuit, sparking debate among experts. On one hand, vulnerability disclosure helps improve collective security; on the other, if the information stems from trade secrets, it can trigger legal disputes. The situation echoes other battles, such as those between Apple and jailbreak developers. For more details, you can read the original report on MacRumors.
Sponsored Protocol
Affected devices and possible countermeasures
The iPhone XS, XS Max, XR, and the iPhone 11 series are primarily impacted. Other devices with these chips, such as some iPads and iPod touches, may also be vulnerable. Apple has not released official statements, but the company is likely evaluating alternative solutions, such as monitoring for any exploits in the wild. Concerned users can adopt basic security measures, like avoiding connecting their device to untrusted computers and keeping software up to date, though that does not fix the hardware-level flaw. For broader context on boot ROM vulnerabilities, see the Wikipedia page on boot ROM.
Sponsored Protocol
The lawsuit between Magnet Forensics and Paradigm Shift is currently unfolding. The court's decision could set an important precedent for the cybersecurity industry, influencing how hardware vulnerabilities are discovered, shared, and monetized. Meanwhile, the research community awaits whether the exploit will be independently disclosed or remain buried under legal battles.
Source: https://www.macrumors.com/2026/07/24/unpatchable-iphone-11-exploit-sparks-legal-battle
