Calif shows an iPhone jailbreak working under Lockdown Mode and surviving an iOS update
The demonstration suggests Lockdown Mode, built for users at risk of mercenary spyware, does not fully block this attack path, though Calif is reporting the flaws to Apple rather than publishing a tool.
Hacker group Calif has demonstrated a jailbreak on an iPhone with Lockdown Mode enabled, only about a week after its earlier launch-day jailbreak of an iPhone Duo. In a video, a jailbroken iPhone 18 Pro running Lockdown Mode is shown updated to iOS 27.2 with the jailbreak still intact, though it is unclear whether the exploit works on a device already on that version. Lockdown Mode is Apple's feature for users at risk of targeted mercenary spyware, and it blocks most message attachment types, restricts web technologies, and strips location data from photos. The video shows a malicious PDF delivered over AirDrop, which the user must accept, to start the jailbreak, but Calif has not disclosed the full steps. Apple told TechCrunch earlier this year it knew of no successful mercenary spyware attacks against Lockdown Mode iPhones, and Calif says it is reporting the vulnerabilities to Apple rather than releasing a tool for end users.
Why it matters
Lockdown Mode is the setting Apple offers to people most likely to be targeted by mercenary spyware, and it is meant to shrink the attack surface, so a working jailbreak under it is a direct challenge to that promise. The attack still requires the user to accept a malicious PDF sent by AirDrop, which limits how it could reach someone. Apple has said it knows of no successful mercenary spyware attacks against Lockdown Mode iPhones. Calif's decision to report the vulnerabilities rather than release a tool means the practical effect now depends on how quickly Apple fixes them.
Matters or hype?
Does this story matter, or is it hype? Vote before you see what everyone else said.