Elcomsoft Achieves Full Filesystem Extraction for Apple TV 4K on tvOS 26

Elcomsoft, purveyor of forensic extraction tools, announced that they were the first to achieve a full filesystem extraction for the Apple TV 4K running tvOS 26, marking the first forensic extraction of one of Apple's latest operating systems, according to them. They plan to release support in their iOS Forensic Toolkit later.

The first-generation Apple TV 4K runs the same A10X SoC found in the iPad Pro 2, bringing into question what security features Apple's streaming devices miss out on from newer chips.

They highlight the difficulties of extracting data when the device lacks a USB C port, however there is apparently a hidden lightning connection in the ethernet port. Apple sells the Apple TV in two configurations: one without an ethernet port and one with one, so maybe the one without an ethernet port is a bit more secure against forensic extraction.

When we think of security, we tend to focus on securing our phones and desktop computers. But as more and more IoT devices enter our lives, we need to start thinking about the security of those as well.

The Apple TV syncs a lot of data from your iCloud, such as photos. The device doesn't sync as much data as an iPhone or a Mac, but it's certainly enough to be worried about.

They highlight the fact that the Apple TV can't be protected with a password, leaving your data at risk.

It's time to take the security of our IoT devices seriously and demand stronger protections from the companies making these products.