Thought Leadership
A video shows an iPhone 18 Pro being jailbroken despite Lockdown Mode being enabled. The jailbreak also survives an update to iOS 27.2. However, technical details remain undisclosed.
The security research group Calif has released a video demonstrating a jailbreak on an iPhone 18 Pro with Apple’s Lockdown Mode enabled. According to the group, the jailbreak remains intact even after updating the device to iOS 27.2. As reported by heise, the international team includes German security researcher Stefan Esser. Calif published the video on X.
“Lockdown Mode helps until it doesn’t.”
Security research group Calif
Jailbreak Delivered via AirDrop PDF
In the video, the iPhone receives a specially crafted PDF file via AirDrop, which the user accepts. The device is subsequently jailbroken, meaning Apple’s security restrictions have been bypassed. The video then shows an update to iOS 27.2, after which the jailbreak is still present. Calif has not disclosed any technical details and does not plan to release a tool for users.
According to AppleInsider, it cannot be ruled out that the jailbreak was already in place before the recording began. Heise reports that the attack started on a device running an iOS version earlier than 27.2. In October, Calif had already demonstrated a jailbreak affecting versions up to iOS 27.0.1. At the time, the group said iOS 27.2 had closed most of the vulnerabilities used in that method. Whether the technique also works on devices already running iOS 27.2 remains unclear.
Protection for High-Risk Individuals
Apple describes Lockdown Mode as an extreme level of protection for people who may be targeted by sophisticated commercial spyware, including journalists, activists and politicians. The feature restricts numerous functions, blocks most message attachments, limits web technologies and prevents incoming FaceTime calls from unknown callers. In March 2026, Apple stated that it was not aware of any successful spyware attacks against an iPhone with Lockdown Mode enabled in the nearly four years since the feature was introduced. However, a jailbreak demonstrated in a security research video is not equivalent to an attack involving commercial spyware.
Apple has not yet commented on the video.
At the end of October, Apple warned users in 99 countries that they had been targeted in attacks involving commercial spyware. The company recommended enabling Lockdown Mode. Users can also adjust their settings to receive AirDrop content only from contacts or disable incoming AirDrop transfers entirely. Unexpected files from unknown senders should be rejected. Apple also recommends keeping iPhones updated to the latest version, iOS 27.2.
(Editorial Team)
