started · updated
Calif.io demonstrates untethered jailbreak on iPhone 18 Pro
At the Hexacon offensive security conference in Paris, the security firm Calif.io demonstrated an untethered jailbreak on an iPhone 18 Pro running iOS 27.0.1. Unlike traditional jailbreaks that require a computer connection or a specific exploit trigger after a reboot, this demonstration showed that the device could be restarted, unlocked with a standard passcode, and immediately access an SSH session with root privileges.
This type of jailbreak bypasses Apple’s signature verification, application sandboxing, and protected boot chain. By maintaining root access through a restart, the exploit demonstrates a significant bypass of modern hardware and software protections, including kernel controls and pointer authentication codes.
Calif.io has not yet released the specific vulnerabilities, technical details, or the software tools used to achieve this exploit, meaning the method cannot currently be replicated by the public.
Entities
Apple · Calif.io · Hexacon · Paris · iPhone 18 Pro
Claims
What the coverage asserts, and how many sources carry each claim.
- [● 3 SOURCES] The jailbreak maintains root access even after the device is restarted. raidrush.net · www.ithome.com · techblog.gr
- [○ 1 SOURCE] The device used was an iPhone 18 Pro running iOS 27.0.1 (Build 24A446). raidrush.net
- [● 2 SOURCES] The demonstration took place at the Hexacon offensive security conference in Paris. www.ithome.com · techblog.gr
- [● 3 SOURCES] The vulnerabilities and tools used for the jailbreak have not been released to the public. raidrush.net · www.ithome.com · techblog.gr
- [● 3 SOURCES] Calif.io demonstrated an untethered jailbreak on an iPhone 18 Pro running iOS 27.0.1. raidrush.net · www.ithome.com · techblog.gr