A hacking team called Calif says it has built an iPhone jailbreak that gets past Lockdown Mode, the optional protection Apple designed for people who may be targeted by sophisticated mercenary spyware. MacRumors reported the claim on November 3, based on a video and post from the group.
According to the report, the demonstration shows a jailbroken iPhone 18 Pro with Lockdown Mode switched on. The video reportedly shows a malicious PDF sent to the target iPhone over AirDrop. Once the recipient accepts the file, the jailbreak begins. Calif has not published the technical steps, so how the exploit gets around Lockdown Mode's restrictions is not known.
The demonstration also reportedly shows the jailbreak persisting after the phone was updated to iOS 27.2. The report does not say which iOS version the device started on, and it is unclear whether the method works on a phone that already runs iOS 27.2.
Calif is the same group that, according to MacRumors, jailbroke an iPhone Duo on launch day about a week and a half earlier, on October 23. The group has said previously that it reports the vulnerabilities it finds to Apple and does not plan to release a jailbreak tool for ordinary users.
MacRumors did not report any response from Apple to this specific claim. Earlier in 2026, Apple told TechCrunch it was not aware of any successful mercenary spyware attack against an iPhone running Lockdown Mode. Apple describes the feature as extreme protection for a small group of users, such as journalists, activists and officials, who face unusually targeted threats.
Because the details remain unpublished and have not been independently verified, the claim should be treated with caution until Apple or outside security researchers weigh in. Users who rely on Lockdown Mode should keep their devices up to date and, as a general precaution, be wary of accepting AirDrop files from unknown senders.
The report arrives as Apple's threat notifications for mercenary spyware have drawn attention again. Cupertino News covered the latest round of notifications, which reportedly reached users in 99 countries, earlier this week.
0 comments