1. iPhone 18 Pro jailbreak shown live in Paris
On October 16, the security firm Calif.io demonstrated an untethered jailbreak of an iPhone 18 Pro running iOS 27.0.1 on stage at Hexacon, an offensive security conference in Paris. The phone kept its root access after being restarted. Calif has not named the flaws it used or released any tool, and Apple has not responded publicly.
The presentation took place on the first day of the two-day conference, which runs October 16 and 17. The demonstration is being described as the first successful untethered, permanent jailbreak of this kind on the newest iPhone hardware, a claim that rests on what Calif showed the audience rather than on any code or documentation that outsiders can examine.
2. What does an untethered jailbreak actually mean?
A jailbreak is a way of removing the software limits that Apple places on its phones, and an untethered one is the most durable variety, because it persists after the device restarts without needing a computer to re-apply it. Many earlier jailbreaks were tethered or semi-tethered, which meant the phone lost its altered state whenever it shut down and had to be re-exploited.
Apple's platform is built around signed code, application sandboxing and a protected startup chain, each designed so that software can run only if Apple has approved it and can reach only the data it has been granted. A jailbreak gives the person holding the phone root access, the highest level of privilege on the system. With that access, a user can install software Apple has not approved, change features, restyle the interface and use the hardware in ways the manufacturer did not intend.
The practical difference is easy to see. A tethered jailbreak is a demonstration that works only until the battery dies or the owner restarts the phone. An untethered one behaves like a permanent change, which is why researchers treat it as the stronger proof that every layer of the protection chain has been defeated on that particular software version.
3. Why people jailbreak, and why it still matters
In the early years of iOS, jailbreaking had a visible payoff. Owners of jailbroken phones recorded video before Apple added the feature, ran Android on the hardware, unlocked phones for use on other carriers and installed custom themes. Today, people who jailbreak typically want to install apps from outside the App Store, browse the full file system and remove software they consider bloat.
Only a small number of people jailbreak their phones now. Even so, each working jailbreak on current hardware carries weight beyond that niche audience, because it shows that the defenses Apple has funded so heavily can still be overcome by a determined team. For security researchers, a result like this works as a measurement of how strong those protections really are at a given moment.
There is also a reason the work matters for ordinary owners who never intend to jailbreak anything. The techniques that open a phone for hobbyists are the same ones that show vendors where their architecture is weakest, and the fixes that follow usually harden the device for everyone. Public jailbreaks have long served as an informal audit of how well a platform keeps its promises about control and privacy.
4. What the stage demonstration showed
Video from the stage was posted by the researcher Billy Ellis. In it, the team restarts the iPhone, enters the passcode and then opens an SSH session with root privileges. The terminal on screen displayed iOS 27.0.1 and an uptime of roughly two minutes, which indicates that the phone had indeed been restarted shortly before the root shell appeared. That sequence is the central evidence for the untethered claim.
Hexacon is aimed at researchers who find and exploit software flaws, and its talks regularly cover bugs in phones and browsers. Opening-day timing meant the iPhone demonstration set the tone for the rest of the program.
Calif has not disclosed which vulnerabilities it used, and no public tool exists. The firm's conference newsletter lists four demonstrations in total, among them a one-click exploit against Signal and a demonstration involving iMessage. The company says it will release everything in due time, and a post from its account on October 16 asked users whether their own iPhones could do what the stage device had just done.
Because the demonstration was live and used a freshly restarted device, it is harder to dismiss as an edited clip or a staged environment. Even so, an audience can confirm only what appears on screen: that a root session opened on a phone reporting iOS 27.0.1. Independent confirmation of how the access was obtained will have to wait for the technical material Calif has promised.
5. How hard is it to root a current iPhone?
Gaining root on a current iPhone is difficult. It generally requires a chain of bugs that escapes the application sandbox, takes control of the kernel and gets around hardware-based defenses such as Pointer Authentication Codes, which are intended to stop attackers from redirecting a program's execution. Each link in the chain must work on the exact software version in question, and a single patch can break it.
Making the result survive a restart is harder still. Apple verifies startup code as the phone boots, so a persistent jailbreak has to find a way to run its own instructions despite those checks, rather than simply exploiting a flaw in software that is already running. That is why an untethered result on the latest hardware and a very recent release of iOS stands out from the many partial results that researchers have presented over the years.
For readers unfamiliar with these terms, the sandbox is the boundary that keeps one app from reading another app's data, and the kernel is the core of the operating system that controls memory and hardware. Breaking through both, and then defeating the checks Apple runs at startup, means beating several independent layers of security that were designed so that no single failure would be enough.
6. Claude and Anthropic Research in Calif's earlier work
Calif has publicly tied its recent iPhone and Mac research to AI tools. In April, Thai Duong of Calif wrote that Claude helped him take apart an exploit for iOS Safari, as part of a series explaining how iPhone jailbreaks work. In May, the firm said that Anthropic's Claude Mythos Preview had helped build a macOS kernel exploit against the protections in Apple's M5 chips in under a week.
Duong has indicated that the team did not construct the chain by itself. In substance, he said that Mythos Preview helped identify bugs and assisted with developing the exploit. The statement does not explain how much of the finished work came from the model and how much from the researchers, and Calif has not published the technical detail that would allow such a split to be judged.
The broader pattern is that AI models are becoming part of the toolkit used in vulnerability research, helping analysts read complex code and test ideas faster. Calif's public statements place its own work inside that trend. They also show why the firm's reports are being watched closely by vendors and by other researchers, since faster analysis can shorten the time between a bug existing and a bug being found.
7. What Apple's iOS 27 security notes say
Apple's security notes for iOS 27, published on September 14, credit Calif.io, in collaboration with Claude and Anthropic Research, for two bugs. Each allowed an application to cause a denial of service or a crash. The notes do not connect either bug to the jailbreak shown in Paris, and the demonstration itself did not identify them as part of the chain.
The distinction matters because crash bugs and a complete root chain are very different things. A denial-of-service flaw can disrupt a device, while a root chain gives an attacker control over it. The earlier credit shows that Calif has already reported issues to Apple, but it does not show what was used on stage.
For now, the only public link between Calif and the current iOS release is the pair of crash bugs Apple has already credited. Whether the chain used in Paris builds on those findings, or relies on separate and still-undisclosed flaws, is a question only the firm's forthcoming publication can answer.
8. Why a root chain on an updated iPhone raises concern
A root chain that works on a fully updated iPhone resembles the kind of capability that commercial spyware vendors sell to governments. That comparison explains why the demonstration drew attention beyond the jailbreak community: the same class of access that lets an enthusiast customize a phone could, in other hands, be used for surveillance.
Apple usually patches such chains once it learns the details. How long iOS 27.0.1 remains exposed therefore depends in large part on when Calif chooses to publish. Until the technical write-up appears, the public has only the on-stage footage and the company's statements, and Apple has not had the details it would need to ship a fix.
Users who want to reduce exposure to any high-end exploit chain can follow standard practice: install updates promptly once Apple releases them, since a patch is what ends the usefulness of a chain like this one. Until details are public, there is no specific mitigation to apply, and nothing in the demonstration suggests that ordinary use of the phone is affected today.
9. What happens next
As of Friday, Apple had not publicly commented on the demonstration. The company's stated practice is not to confirm security issues until patches are available, so a formal response may not come until an update is released.
Calif has not said when it will publish the tool or the bug details. Hexacon continues through October 17, and the other demonstrations on the firm's list remain to be seen. Readers should treat the jailbreak claim as a credible but still unreleased result until the vulnerabilities are documented and independently reproduced.