iPhone AFU and BFU States, iOS 18 Reboots, and Forensic Lab Implications

No time to read?
Get a summary

Authorities in the United States and Canada have flagged an issue with iPhones recovered from detainees. Some devices reportedly reboot on their own, a behavior that makes unlocking them significantly more challenging. The finding appears in an official document reviewed by investigators and described in broad terms for forensic discussion. Cited: internal records.

At this time, the exact cause of these auto-reboots remains unconfirmed. Detroit police officials have suggested a possible new safeguard in iOS 18 that restarts a phone if it remains offline for an extended period. Apple has not publicly acknowledged any auto-restart feature linked to iOS 18. Cited: internal records.

The document notes that several iPhones in the laboratory were kept in an “first unlocked” AFU state. These devices were maintained in flight mode or inside a Faraday enclosure to guard against remote data deletion. An iPhone that had been previously unlocked by its owner using a password or other method may be more susceptible to unlocking with specialized forensic tools. After a reboot, some devices reportedly enter a “before first unlock” BFU state, complicating subsequent hacking efforts. Cited: internal records.

According to the dossier, three iPhones running iOS 18 were delivered to the facility on October 3. The working hypothesis is that these newer devices interact with AFU devices already present in the laboratory, triggering a reboot when they are not connected to the operator’s network for extended intervals. This phenomenon could affect not only seized devices but also the personal smartphones of staff. Cited: internal records.

Law enforcement officers recommended isolating AFU-stored iPhones to prevent interference with other devices running iOS 18 and to limit cross-device effects. They also advised maintaining a careful inventory of iPhones kept in laboratories to ensure these units do not reboot unexpectedly. Cited: internal records.

Earlier reports described a separate issue where a glitch in iCloud allegedly caused notes on iPhones to disappear. While not necessarily linked to auto-restarts, this bug highlighted the broader challenges investigators face when accessing data on devices running modern iOS versions. Cited: internal records.

The above concerns reflect ongoing questions about how new iPhone security features interact with forensic workflows. In practice, investigators emphasize tight handling procedures, while agencies in North America monitor for any official clarification from manufacturers. The goal is to preserve evidence integrity while acknowledging the evolving landscape of device safeguards. Cited: internal records.

In summary, multiple iPhones associated with law enforcement and lab environments show a pattern of unexpected reboots linked to iOS 18 contexts. The precise mechanics remain under review, with officials urging caution and disciplined procedures to avoid interference with other equipment and to maintain accurate inventories. As investigations progress, officials plan to share clarified guidance once verifiable details become available. Cited: internal records.

No time to read?
Get a summary
Previous Article

Ovechkin narrows Gretzky gap as Capitals beat Predators in tight NHL tilt

Next Article

Paige VanZant UFC career and modern combat sports path