A brand-new iPhone was jailbroken live in Paris. After unplugging all the cables and rebooting, it still had the highest-level privileges 🦖
⚡ 有大动静群里说
At the Hexacon security conference in Paris on October 16, security firm Calif.io demonstrated an untethered jailbreak of iOS 27.0.1. The team rebooted the phone, unlocked it with a regular passcode, and opened an SSH session with root privileges. The terminal clearly showed the system version and an uptime of about two minutes. This is the first time anyone has managed to jailbreak the latest iPhone 18 Pro and still have the jailbreak work after a reboot.
First, let's clarify what this means. Jailbreaking removes Apple's software restrictions. Untethered means the jailbreak comes back on its own after a reboot, without needing to connect to a computer. Apple's system is known for its code signing, app sandboxing, and protected boot chain. Getting root access requires chaining together a series of vulnerabilities: first escape the sandbox, then take control of the kernel, and finally bypass Pointer Authentication, which detects whether memory has been tampered with. Surviving a reboot is even harder, because Apple verifies the boot code during startup.
What's curious is who helped find the vulnerabilities. In April this year, Calif's Thai Duong said Claude helped him analyze an iOS Safari vulnerability. In May, the company said Claude Mythos Preview helped it develop a macOS kernel exploit targeting Apple's M5 chip defenses in less than a week. Apple's iOS 27 security bulletin, published on September 14, credited Calif.io and its collaboration with Claude and Anthropic Research for two vulnerabilities that could cause crashes. But the bulletin didn't link those two vulnerabilities to this jailbreak. Calif also hasn't disclosed which vulnerabilities it used this time or released any tools. It listed only four demos, including a one-click attack on Signal and an iMessage demo, and said they would be released at an appropriate time.
Translated into crypto terms, this is more concerning than it might seem 📱 Gaining the highest-level privileges on the latest iPhone means an attacker can access the entire phone. The seed phrases and private keys for most self-custody wallets are stored in the phone's app sandbox. Once that layer of protection is breached, it's as if the wallet has no lock. Exploit chains that can break into the latest phones are exactly the kind of capability commercial spyware companies sell to governments. Apple usually can't patch vulnerabilities until the details become public. And this time, AI compressed the time needed to find vulnerabilities from months to a week ⚠️
My take: phones are becoming safes, but the key to the safe is kept inside it. The habit that really needs to change isn't getting a new phone—it's moving large holdings off your phone. Keep your seed phrase offline, and use a hardware wallet if you can 💥
Is your seed phrase stored on your phone, or have you written it down and locked it away? Share in the comments.
Tap the profile picture to watch the livestream.
Every day, I'll keep you up to date on crypto security and AI attack trends—not just what happened, but also the logic and opportunities behind it 👀🚀
⚡ 有大动静群里说
At the Hexacon security conference in Paris on October 16, security firm Calif.io demonstrated an untethered jailbreak of iOS 27.0.1. The team rebooted the phone, unlocked it with a regular passcode, and opened an SSH session with root privileges. The terminal clearly showed the system version and an uptime of about two minutes. This is the first time anyone has managed to jailbreak the latest iPhone 18 Pro and still have the jailbreak work after a reboot.
First, let's clarify what this means. Jailbreaking removes Apple's software restrictions. Untethered means the jailbreak comes back on its own after a reboot, without needing to connect to a computer. Apple's system is known for its code signing, app sandboxing, and protected boot chain. Getting root access requires chaining together a series of vulnerabilities: first escape the sandbox, then take control of the kernel, and finally bypass Pointer Authentication, which detects whether memory has been tampered with. Surviving a reboot is even harder, because Apple verifies the boot code during startup.
What's curious is who helped find the vulnerabilities. In April this year, Calif's Thai Duong said Claude helped him analyze an iOS Safari vulnerability. In May, the company said Claude Mythos Preview helped it develop a macOS kernel exploit targeting Apple's M5 chip defenses in less than a week. Apple's iOS 27 security bulletin, published on September 14, credited Calif.io and its collaboration with Claude and Anthropic Research for two vulnerabilities that could cause crashes. But the bulletin didn't link those two vulnerabilities to this jailbreak. Calif also hasn't disclosed which vulnerabilities it used this time or released any tools. It listed only four demos, including a one-click attack on Signal and an iMessage demo, and said they would be released at an appropriate time.
Translated into crypto terms, this is more concerning than it might seem 📱 Gaining the highest-level privileges on the latest iPhone means an attacker can access the entire phone. The seed phrases and private keys for most self-custody wallets are stored in the phone's app sandbox. Once that layer of protection is breached, it's as if the wallet has no lock. Exploit chains that can break into the latest phones are exactly the kind of capability commercial spyware companies sell to governments. Apple usually can't patch vulnerabilities until the details become public. And this time, AI compressed the time needed to find vulnerabilities from months to a week ⚠️
My take: phones are becoming safes, but the key to the safe is kept inside it. The habit that really needs to change isn't getting a new phone—it's moving large holdings off your phone. Keep your seed phrase offline, and use a hardware wallet if you can 💥
Is your seed phrase stored on your phone, or have you written it down and locked it away? Share in the comments.
Tap the profile picture to watch the livestream.
Every day, I'll keep you up to date on crypto security and AI attack trends—not just what happened, but also the logic and opportunities behind it 👀🚀