Untethered Jailbreak Achieved on iPhone 18 Pro Running iOS 27.0.1
According to a recent report by the technology outlet Decrypt, security firm Calif.io accomplished a remarkable feat yesterday. During the Hexacon offensive security conference in Paris, researchers publicly demonstrated an “untethered jailbreak” on an iPhone 18 Pro. This test device was running the latest iOS 27.0.1 operating system. Impressively, this formidable exploit successfully maintains root privileges even after a complete device reboot.
Understanding the Untethered Jailbreak
Jailbreaking refers to the intricate process of circumventing Apple’s stringent iOS restrictions. These defensive barriers typically include signature verification, application sandboxing, and the protected boot chain. By bypassing these limitations, users gain absolute administrative access to their smartphones. Consequently, this circumvention enables the installation of unapproved applications outside the official App Store. It also grants full access to the underlying file system, allows profound interface customization, and permits the removal of pre-installed software.
Unlike conventional methods that require reconnecting to a computer to re-trigger the exploit, an untethered jailbreak acts differently. It ensures that the compromised state persists seamlessly across device restarts. During the live demonstration, researchers rebooted the handset and unlocked it using a standard passcode. Immediately after, they initiated an SSH session operating under the root user. Furthermore, terminal diagnostics definitively confirmed the operating system version as iOS 27.0.1.
Overcoming Apple’s Formidable Security Architecture
The security architecture of modern iPhones is exceptionally labyrinthine. Attackers must typically chain multiple vulnerabilities together to achieve any meaningful system breach. Initially, they must escape the application sandbox before seizing control of the kernel. Next, they have to bypass sophisticated hardware-level defenses, such as pointer authentication codes.
Furthermore, retaining these elevated permissions post-reboot presents an even greater technical hurdle. Hackers must successfully evade Apple’s rigorous boot code validations. Therefore, this extraordinary presentation has garnered immense attention across the global cybersecurity landscape.
However, the general public cannot independently replicate this exploit at this juncture. Calif.io has not yet disclosed the specific vulnerability names or technical intricacies. They have also temporarily withheld any downloadable utilities. The security firm merely stated that they will release such information in due course. Meanwhile, throughout the conference, the company showcased several other notable projects. These presentations included a sophisticated one-click exploit targeting Signal and various alarming demonstrations related to iMessage.
