On November 3, the security research team Calif posted a short video that answered one of the biggest open questions in the iPhone jailbreak story, and raised a new one. The clip shows an iPhone 18 Pro with Lockdown Mode switched on, Apple’s strictest security setting, being jailbroken through a PDF file sent over AirDrop. Then the phone installs iOS 27.2, and the jailbreak is still there afterwards. Calif captioned the post with a single line: “Lockdown Mode helps, until it doesn’t.”
This is the third public demonstration from Calif in less than three weeks, and it is different from the first two in an important way. The Hexacon demo on October 16 showed a jailbreak that survived a reboot. This one appears to survive a full operating system update, which is a much harder trick, and it does so on a phone that had Apple’s highest defenses turned on.
The video, step by step
MacRumors, which covered the video on November 3, describes the sequence like this. The iPhone 18 Pro is already in Lockdown Mode. A malicious PDF arrives over AirDrop, and the owner accepts it. The jailbreak kicks in. Then iOS 27.2 is installed on the phone, and after the update finishes, the jailbreak remains in place.
Two details matter here. First, the attack is not zero-click, at least in the form shown. The file has to be accepted by the person holding the phone. That is a meaningful limitation, and it is also the oldest lesson in phone security: do not open a file you were not expecting, no matter who it appears to come from. Second, Calif has published no technical details, so the exact chain of bugs behind the video is unknown, and no independent researcher has reproduced it yet.
Why surviving an update is the real news
A jailbreak that survives a reboot was already rare. Calif’s Paris demo was the first untethered jailbreak shown publicly on a current iPhone since the iOS 9 era. Surviving an OS update is a step beyond that, because an update rewrites large parts of the system. For something to still be there afterwards, it has to live somewhere the update does not wipe, or re-establish itself during the update process. Calif has not said where its code lives, and that is now the most interesting unanswered technical question in the story.
It also reframes what iOS 27.2 means for this saga. Apple shipped iOS 27.2 on October 26 with 163 security fixes, several of them credited to Calif researchers, and Calif researcher Stefan Esser has said most of the flaws behind the Hexacon demo are fixed in that release. That advice still stands: updating to iOS 27.2 closes the known holes. What the new video suggests is that closing the holes does not necessarily evict an intruder who is already inside.
The most likely reading: infected before the update
There is an important distinction the video does not settle, and readers should not blur it. The clip shows a jailbreak that persists through an update. It does not show a jailbreak being installed fresh on a phone already running iOS 27.2, and MacRumors notes that it is unclear whether that would work.
The reading that fits everything Calif has said so far is simpler. The phone was compromised before the update, on an older iOS version where the bugs still worked, and the update then failed to remove the compromise. That squares with Esser’s statement that most of the Hexacon chain is patched in iOS 27.2: the update shut the door, but the room was already occupied. If that reading is right, the video is less a warning about iOS 27.2 and more a warning about what happens if a device is compromised before it is patched. But until Calif publishes details, it remains an interpretation, not a confirmed fact.
What Lockdown Mode blocks, and what this video tests
Apple describes Lockdown Mode as extreme protection for people who may face sophisticated mercenary spyware, such as journalists, activists, and diplomats. We explained the setting in full last month, but the short version is that it blocks most message attachment types, limits web technologies, blocks FaceTime calls from unfamiliar callers, disables invitations to Apple services, and strips location data from shared photos.
Earlier this year, Apple told TechCrunch it was not aware of any successful mercenary spyware attacks against an iPhone in Lockdown Mode. Calif’s video does not overturn that statement on its own. This is a research demonstration by the team that built the exploit, not a documented spyware attack in the wild, and it involves a file the user accepts. But it does puncture the comfortable version of the story, the one where Lockdown Mode is treated as a guarantee rather than a layer. Layers help, and this one clearly still helps against the attacks it was designed to stop. It is not, on this evidence, absolute.
What this changes for you
For most readers, the practical advice has barely changed, but one setting deserves a fresh look. The attack in the video arrives over AirDrop, so check yours now: Settings, General, AirDrop, and set it to Contacts Only or Receiving Off, and refuse files you were not expecting, even from contacts. That single habit would have stopped the sequence shown in the video at the first step.
Beyond that, the standing advice holds. Install iOS 27.2 if you have not already, because it patches most of the chain Calif demonstrated. If you are in a high-risk category, keep Lockdown Mode on, because it still hardens the phone against future attacks, even if it cannot clean up a compromise that is already there. And do not go looking for a download: there is still no public jailbreak tool for any iOS 27 version, Calif has said it has no plans for an end-user tool, and anything claiming to be one is a scam.
What is still unanswered
Apple had not commented publicly on the November 3 video as of this morning. Calif has not named the vulnerabilities, has not said where the persistent code lives, and has not said whether the attack can be installed on a phone already running iOS 27.2. The promised technical writeup of the Paris chain, which Calif has said will come in due time, is still pending, and the reasons for that wait have not changed: coordinated disclosure means details arrive after the patches, not before.
So the scorecard now reads like this. Three Calif demonstrations in nineteen days: an untethered jailbreak on iOS 27.0.1, a launch-day jailbreak of the iPhone Duo, and now a jailbreak that runs under Lockdown Mode and outlasts an OS update. Zero public tools, zero published bug chains, and one very large question about what, exactly, survives an update. When Calif publishes its writeup, that question should finally get an answer. Until then, treat the video as what it is: a demonstration from the people who built the exploit, not independent verification, and a reminder that updating promptly matters precisely because an infection that arrives first is much harder to remove.
