# Hackers claim they can jailbreak Macs, MacBooks with Apple's T2 security chip | Tech News (HT Tech)

> This jailbreaking involves combining two exploits - the Checkm8 exploit from last year and the Blackbird vulnerability unveiled this August. And it's both dangerous and unpatchable.

# Hackers claim they can jailbreak Macs, MacBooks with Apple's T2 security chip

## This jailbreaking involves combining two exploits - the Checkm8 exploit from last year and the Blackbird vulnerability unveiled this August. And it's both dangerous and unpatchable.

Aug 20 2022, 23:21 IST

![Follow on Facebook](https://images.hindustantimes.com/tech/static/revamp/images/png/follow-us-facebook.png)

![Follow on Facebook](https://images.hindustantimes.com/tech/static/revamp/images/png/follow-us-facebook-hover.png)

![Share](https://images.hindustantimes.com/tech/static/revamp/images/png/Share.png)

![Share](https://images.hindustantimes.com/tech/static/revamp/images/png/Shareclicked.png)

![Share on WhatsApp](https://images.hindustantimes.com/tech/static/revamp/images/png/whatsapp.png)

![Share on WhatsApp](https://images.hindustantimes.com/tech/static/revamp/images/png/whatsapp-hover.png)

![Share on Twitter](https://images.hindustantimes.com/tech/static/revamp/images/png/twitter.png)

![Share on Twitter](https://images.hindustantimes.com/tech/static/revamp/images/png/twitter-hover.png)

![Share on Facebook](https://images.hindustantimes.com/tech/static/revamp/images/png/facebook.png)

![Share on Facebook](https://images.hindustantimes.com/tech/static/revamp/images/png/facebook-hover.png)

![Bookmark](https://images.hindustantimes.com/tech/static/revamp/images/png/Bookmark.png)

![Bookmarked](https://images.hindustantimes.com/tech/static/revamp/images/png/Bookmarked.png)

![The dangers of running this process is rather obvious. Any Mac or MacBook left unattended can be hacked by pretty much anyone who can connect a USB-C cable, reboot the device and then run Checkra1n 0.11.0 on it. And it can pretty much happen anywhere.](https://images.hindustantimes.com/tech/img/2020/10/06/1600x900/364192524_0-14_1601966010565_1601966088281.jpg)

The dangers of running this process is rather obvious. Any Mac or MacBook left unattended can be hacked by pretty much anyone who can connect a USB-C cable, reboot the device and then run Checkra1n 0.11.0 on it. And it can pretty much happen anywhere. (Bloomberg)

![Author Photo](https://images.hindustantimes.com/tech/static/revamp/images/png/HTTech-new-circle-logo.png)

### By HT TECH

Security researchers have claimed that by combining two exploits that were initially developed to jailbreak iPhones, they can also jailbreak Macs and MacBooks that come with Apple’s latest T2 security chips.

The process is admittedly complex, but the technique of combining the two exploits has been mentioned on Twitter and Reddit over the past few weeks, reports ZDNet. And it has also been tested and confirmed by several of Apple’s top security and jailbreaking experts.

> checkm8 + blackbird and the T2 SEP is all yours...— Siguza (@s1guza) September 5, 2020

If the exploits are used right, the jailbreaking technique in question will allow users and hackers to gain full control over devices to modify core OS behaviour or retrieve sensitive information, encrypted data and even plant malware.

Also read

click here.

What are Apple’s T2 chips?

Apple’s T2 chip is a special co-processor that is installed along with the main Intel CPU on the Apple iMac, Mac Pro, Mac Mini and MacBooks - basically, all of Apple’s modern computers.

The T2 ships were introduced in 2017 and have been a part of all Apple devices sold since 2018. The T2’s role is to function as a separate CPU and by default they handle audio processing and various low-level I/O functions to help take some load off the main CPU.

These chips also serve as security chips (Secure Enclave Processor or SEP) that process sensitive data like cryptographic operations, KeyChain passwords, TouchID authentication along with the device’s encrypted storage and secure boot capabilities. They essentially play a significant role in every Apple desktop device.

How does this jailbreak work?

According to ZDNet, security researchers have figured out a way to break T2s and have found a way to run code inside the security chip during its boot-up routine and alter its normal behaviour.

This breaking in involves combining two other exploits that were initially designed to jailbreak iOS devices - Checkm8 and Blackbird. The hack works because some of the shared hardware and software features between T2 chips and iPhones and their underlying hardware.

As per a post from Belgian security firm ironPeak, jailbreaking a T2 chip involves connecting to a Mac or a MacBook using an USB-C and running version 0.11.0 of the Checkra1n jailbreaking software during the Mac's boot-up process.

> With @checkra1n 0.11.0, you can now jailbreak the T2 chip in your Mac. An incredible amount of work went into this and it required changes at multiple levels.There's too many people to tag, but shoutout to everyone who worked on getting this incredible feature shipped.— Jamie Bishop (@jamiebishop123) September 22, 2020

According to ironPeak, this works because “Apple left a debugging interface open in the T2 security chip shipping to customers, allowing anyone to enter Device Firmware Update (DFU) mode without authentication”.

"Using this method, it is possible to create an USB-C cable that can automatically exploit your macOS device on boot," ironPeak explained in its post.

Once you run this software, attackers/users can get root access on the T2 chip and modify, take control of any process running on the device. They can even recover encrypted data.

The dangers?

The dangers of running this process is rather obvious. Any Mac or MacBook left unattended can be hacked by pretty much anyone who can connect a USB-C cable, reboot the device and then run Checkra1n 0.11.0 on it. And it can pretty much happen anywhere.

Alternately, this new method of jailbreaking also opens newer avenues for law enforcement investigation tools that could allow investigators to access suspects’ Apple laptops and computers to retrieve information, even encrypted ones.

Also Read: Hacker finds out security flaw in Apple iPhones, iPads and MacBooks that gives access to webcams

Sorry, this jailbreak is unpatchable

Since this whole jailbreak is hardware-related, all T2 chips are considered to be unpatchable. The only way to deal with the aftermath of this is to reinstall BridgeOS, the operating system that runs in T2 chips.

"If you suspect your system to be tampered with, use Apple Configurator to reinstall bridgeOS on your T2 chip described here. If you are a potential target of state actors, verify your SMC payload integrity using .e.g. rickmark/smcutil and don't leave your device unsupervised," ironPeak said in its post.

Catch all the Latest Tech News, Mobile News, Laptop News, Gaming news, Wearables News , How To News, also keep up with us on Whatsapp channel,Twitter, Facebook, Google News, and Instagram. For our latest videos, subscribe to our YouTube channel.

06 Oct, 12:13 IST

apple mac

apple

macbook

![HT Tech Awards](https://tech.hindustantimes.com/ht-tech-power-list-awards-2026/httech-awards-banner-new.webp)

### Related Stories

29 Sept 2026

71,601,965,896,334

NEXT ARTICLE BEGINS

![View all](https://images.hindustantimes.com/tech/static/revamp/images/png/view-all-icon.png)

## Tips & Tricks

![Ghibli-style art](https://images.hindustantimes.com/tech/img/2025/03/28/414x233/ChatGPT_Ghibli_style_images_1743161814450_1743161814596.jpg)

### How to turn your photos into Ghibli-style art with ChatGPT for free: Step-by-step guide

![How to create an invitation using iPhone’s new Apple Invites app- Step-by-step guide](https://images.hindustantimes.com/tech/img/2025/02/14/414x233/invites_1738728829564_1739543695649.png)

### How to create an invitation using iPhone’s new Apple Invites app- Step-by-step guide

![Apple TV app arrives on Android phones and tablets: What you get and how to install it](https://images.hindustantimes.com/tech/img/2025/02/13/414x233/unnamed_1739426557335_1739426567634.jpg)

### Apple TV app arrives on Android phones and tablets: What you get and how to install it

![Vodafone Idea OTT plans](https://images.hindustantimes.com/tech/static/revamp/images/png/ht-tech-bg-img-90-66.png)

### Vodafone Idea users can now stream 17 OTT apps with one subscription: Here's how

![Android data transfer methods](https://images.hindustantimes.com/tech/static/revamp/images/png/ht-tech-bg-img-90-66.png)

### How to transfer data from one Android to another using Google backup, USB-C cable, and more

## Editor’s Pick

![iPhone 16e launched with A18 chip, Apple AI—bringing flagship power on a budget: Check specs, price](https://images.hindustantimes.com/tech/static/revamp/images/png/ht-tech-bg-img-90-66.png)

### iPhone 16e launched in India: All details about the new budget mobile from Apple

![DeepSeek was founded in China with only a fraction of the budget of the top AI companies in the US.](https://images.hindustantimes.com/tech/static/revamp/images/png/ht-tech-bg-img-90-66.png)

### DeepSeek AI: How it works, who’s behind it, how it’s different from ChatGPT, and its big US market impact explained

![iPhone 17 Air likely to get this feature that iPhone 17 Pro models may miss out on](https://images.hindustantimes.com/tech/static/revamp/images/png/ht-tech-bg-img-90-66.png)

### iPhone 17 Air likely to get this feature that iPhone 17 Pro models may miss out on

![Google Whisk AI explained: How remixing works, availability, and how it differs from Gemini](https://images.hindustantimes.com/tech/static/revamp/images/png/ht-tech-bg-img-90-66.png)

### Google Whisk AI explained: How remixing works, availability, and how it differs from Gemini

![iOS 18.4 beta arriving soon: Know why it is the biggest iPhone update](https://images.hindustantimes.com/tech/static/revamp/images/png/ht-tech-bg-img-90-66.png)

### iOS 18.4 beta arriving soon: Know why it is the biggest iPhone update

## Trending Stories

![Airtel 5G SIM card will now be delivered in 10 minutes with Blinkit- How to order](https://images.hindustantimes.com/tech/static/revamp/images/png/ht-tech-bg-img-90-66.png)

### Airtel 5G SIM card will now be delivered in 10 minutes with Blinkit- How to order

![Infinix Note 50s 5G+](https://images.hindustantimes.com/tech/static/revamp/images/png/ht-tech-bg-img-90-66.png)

### Infinix Note 50s 5G+ set to launch in India with 64MP camera and MediaTek Dimensity 7300 SoC

![Xiaomi X Pro QLED Series sale starts in India: Check price, availability, and more](https://images.hindustantimes.com/tech/static/revamp/images/png/ht-tech-bg-img-90-66.png)

### Xiaomi X Pro QLED Series sale starts in India: Check price, availability, and more

![Apple Intelligence AI training](https://images.hindustantimes.com/tech/static/revamp/images/png/ht-tech-bg-img-90-66.png)

### Apple plans to train AI using your on-device data without accessing personal content or emails: Report

![CMF Buds 2](https://images.hindustantimes.com/tech/static/revamp/images/png/ht-tech-bg-img-90-66.png)

### CMF Buds 2 key features and price revealed ahead of April 28 launch: Details inside

keep up with tech

![Facebook](https://images.hindustantimes.com/tech/static/revamp/images/png/tech-facebook.png)

![Twitter](https://images.hindustantimes.com/tech/static/revamp/images/png/tech-twitter.png)

![WhatsApp](https://images.hindustantimes.com/tech/static/revamp/images/png/tech-whatsApp.png)

![Facebook](https://images.hindustantimes.com/tech/static/revamp/images/png/tech-facebook.png)

## Gaming

![Check out these five gaming monitors under  <span class='webrupee'>₹</span>20,000,](https://images.hindustantimes.com/tech/static/revamp/images/png/ht-tech-bg-img-90-66.png)

### Top 5 gaming monitors under ₹20000 you should consider

![gaming consoles](https://images.hindustantimes.com/tech/static/revamp/images/png/ht-tech-bg-img-90-66.png)

### Grab gaming consoles at discounted rates during Amazon Great Indian Festival: Up to 72% off

![Pokémon GO Wild Area 2025](https://images.hindustantimes.com/tech/static/revamp/images/png/ht-tech-bg-img-90-66.png)

### Pokémon GO Wild Area 2025 to bring Grimmsnarl family, Shiny Hatenna, and global challenges

![Shade Silver](https://images.hindustantimes.com/tech/static/revamp/images/png/ht-tech-bg-img-90-66.png)

### Shade Silver free on Steam for a limited time: Here’s how to get it

![Call of duty](https://images.hindustantimes.com/tech/static/revamp/images/png/ht-tech-bg-img-90-66.png)

### Call of Duty: Black Ops 7 skips Switch 2 at launch, release date and price leak

![View all](https://images.hindustantimes.com/tech/static/revamp/images/png/view-all-icon.png)

## Trending News

### Airtel 5G SIM card will now be delivered in 10 minutes with Blinkit- How to order

![Airtel 5G SIM card will now be delivered in 10 minutes with Blinkit- How to order](https://images.livemint.com/static/static/1x1_img.gif)

### Infinix Note 50s 5G+ set to launch in India with 64MP camera and MediaTek Dimensity 7300 SoC

![Infinix Note 50s 5G+](https://images.livemint.com/static/static/1x1_img.gif)

### Xiaomi X Pro QLED Series sale starts in India: Check price, availability, and more

![Xiaomi X Pro QLED Series sale starts in India: Check price, availability, and more](https://images.livemint.com/static/static/1x1_img.gif)

### Apple plans to train AI using your on-device data without accessing personal content or emails: Report

![Apple Intelligence AI training](https://images.livemint.com/static/static/1x1_img.gif)

### CMF Buds 2 key features and price revealed ahead of April 28 launch: Details inside

![CMF Buds 2](https://images.livemint.com/static/static/1x1_img.gif)

## Trending Gadgets

Mobiles

Laptops

Tablets

![HT Tech](https://images.hindustantimes.com/tech/static/revamp/images/png/HT_tech-new.gif)

- https://tech.hindustantimes.com/tech/news/hackers-claim-they-can-jailbreak-macs-macbooks-with-apple-s-t2-security-chip-71601965896334.html