Calif posted a video on November 3, 2026, that MacRumors described as showing an iPhone 18 Pro with Lockdown Mode enabled and an apparent jailbreak that remained after an iOS 27.2 update.
What the reported sequence showed
MacRumors described a malicious PDF sent by AirDrop and accepted by the user, followed by a jailbreak on the iPhone. The jailbreak appeared to remain after iOS 27.2 was installed. Because the recipient accepted the file, the sequence included a user action.
MacRumors says Lockdown Mode limits most message attachments and some web technologies, blocks FaceTime calls from unfamiliar callers and Apple-service invitations, and removes location information from photos.
What the iOS 27.2 update means
No. In the sequence MacRumors described, the jailbreak was already present before iOS 27.2 was installed. The account describes a jailbreak demonstration on a device, not a reported mercenary-spyware infection of a person.
NeoTeo previously covered Calif’s separate reported iOS 27.0.1 jailbreak demonstration on an iPhone 18 Pro in an earlier article.
MacRumors also reported that Calif had said it was disclosing vulnerabilities to Apple and did not plan to release an end-user jailbreak tool.
