Security Researchers Jailbreak iPhone 18 Pro Live on Stage in Paris

Security researchers have successfully demonstrated an untethered jailbreak on a fully updated iPhone 18 Pro. The exploit was showcased live on stage at Hexacon, an offensive security conference held in Paris.

During the presentation on Friday, security firm Calif displayed the device running iOS 27.0.1. Video footage shared by jailbreak researcher Billy Ellis showed the team rebooting the handset, unlocking it with a standard passcode, and opening a secure shell session as root, representing the highest level of system access.

Apple constructs the iPhone as a heavily restricted environment utilizing signed code, strict application sandboxes, and a secure startup chain. A jailbreak dismantles these software defenses to grant owners root access, enabling the installation of unapproved software, custom interfaces, and direct file system navigation.

An untethered jailbreak is particularly significant because it persists independently after a device restart without requiring a physical connection to a computer. Achieving this level of access on current hardware typically requires a sophisticated chain of vulnerabilities capable of bypassing hardware-backed defenses like Pointer Authentication Codes.

Calif has previously noted its use of artificial intelligence tools, including Anthropic's Claude, to assist in analyzing Safari exploits and building kernel exploits. While Apple's recent security disclosures credit Calif for reporting separate system bugs, the company's notes do not tie those specific vulnerabilities to the jailbreak demonstrated in Paris.

Why it matters

Demonstrations of this caliber highlight that even heavily funded consumer hardware defenses remain vulnerable to advanced exploit chains. Gaining root access on a current smartphone mirrors capabilities frequently sought by commercial spyware vendors operating within the global surveillance market.

Because successful jailbreaks expose underlying flaws in mobile operating systems, technology firms routinely issue software patches once technical details become available. The duration that iOS 27.0.1 remains exposed depends heavily on when the security researchers choose to disclose their methodology.

What to watch

Apple has not publicly commented on the Hexacon demonstration, adhering to its policy of not confirming security issues until official patches are deployed. Observers will monitor upcoming software update cycles for security bulletins addressing the vulnerabilities utilized in the demonstration.

Additionally, market participants and security analysts await further disclosures from Calif regarding whether technical details or functional exploit tools will be released to the public or shared privately with the manufacturer.