What is jailbreaking?
Your iPhone is designed to keep you, and every app, inside a box. Apps are sandboxed, the system files are locked, and only Apple-approved code runs.
Jailbreaking means finding bugs that let you break out of that box and bypass Apple’s security restrictions. In the most powerful cases you get root access, which is full control of the operating system.
Researchers do this to study how secure the phone really is. But the same kind of access is exactly what an attacker would want, because with root they can read, change or install anything.
Tethered
The jailbreak only works while the phone is connected to a computer. When you restart, the phone goes back to normal and the jailbreak is gone.
Untethered
No computer needed, and it survives a restart. You reboot and the jailbreak is still there. It’s much rarer and much harder to pull off.
What Calif actually did
Here’s how it happened, in order.
- 16 OCT 2026 · HEXACON, PARISOn stage, Calif showed an untethered jailbreak on an iPhone 18 Pro running iOS 27.0.1. The phone rebooted and root access came back on its own, with no computer attached.
- 23 OCT 2026 · IPHONE DUO LAUNCH DAYThe foldable iPhone Duo, running iOS 27.1, was jailbroken on the day it went on sale. The demo video shows Home Screen widgets spinning out of place, something a locked-down iPhone shouldn’t allow. Reports say the exploit was delivered through Signal and iMessage.
- 26 OCT 2026 · APPLE RESPONDSApple shipped iOS 27.2 and credited Calif. According to researcher Stefan Esser, it fixes most of the flaws involved.
Calif hasn’t released a public jailbreak tool or published the bugs it used. A proof of concept may come later.
Why this is a big deal
Most jailbreaks in recent years only worked on older iPhones running older versions of iOS. This one hit Apple’s newest hardware.
- Brand-new hardware, modern iOS. These were Apple’s latest phones on current software, not a five-year-old device nobody has updated.
- It got past Memory Integrity Enforcement (MIE). MIE is Apple’s hardware-level memory protection, built into its newest chips specifically to stop spyware-style attacks. Reports say Calif’s exploit chain bypassed it.
- It survives a reboot. Restarting your phone has long been a basic defence against many attacks. An untethered jailbreak survives the restart.
- AI was part of the toolkit. Reports say AI helped Calif find and build its exploits. That suggests attack research is speeding up, and defence will have to keep pace.
So, should you be worried?
Honestly? Not really, at least not because of this demo alone.
- Calif works on the defensive side. They reported the bugs, and Apple has already fixed most of them.
- There’s no public tool, so nobody can download this and use it against your phone.
- Apple says none of the 163 vulnerabilities fixed in iOS 27.2 were known to have been exploited.
The bugs behind advanced jailbreaks are the same kind of weaknesses that well-funded attackers, including state-sponsored groups, look for to plant spyware. Journalists, activists and executives are the usual targets.
And the fact that researchers are still finding ways around Apple’s newest protections? That’s absolutely wild. It shows how much the world needs people who can do this work.