Hacker Team Calif Breaches iPhone in Lockdown Mode
The attack required the target to accept a malicious PDF sent via AirDrop, and Apple has since released iOS 27.2.1.
Updated on Nov. 14, 2026 in Cybersecurity
Live Poll
Do you trust your iPhone's built-in security features to protect your personal data?
Hacker team Calif demonstrated an iPhone running Lockdown Mode that was compromised, posting a video on X of a jailbroken iPhone 18 Pro. Apple has released iOS 27.2.1 following the discovered breach.
Why it matters
Lockdown Mode is designed to protect devices against highly sophisticated cyberattacks, so a demonstrated bypass challenges the protection users rely on. Apple states that Lockdown Mode had not been compromised by mercenary spyware attacks before early November.
The attack required a user to accept a malicious PDF sent via AirDrop, and did not require a zero-click exploit. The hacker team has not shared the steps for the jailbreak, leaving the technical method unverified outside its own disclosure.
The players
Calif
A hacker team that disclosed the iPhone vulnerabilities to Apple and publicly demonstrated the Lockdown Mode compromise in a video posted on X.
Apple
The maker of the iPhone and Lockdown Mode, which released iOS 27.2.1 after the breach and states the feature had not been compromised by mercenary spyware before early November.
The details
Calif posted a video on X showing a jailbroken iPhone 18 Pro with Lockdown Mode enabled and iOS 27.2 downloaded but not installed. After the target accepted a malicious PDF from AirDrop, the attacker updated the phone to iOS 27.2. The hacker team has disclosed the vulnerabilities to Apple and does not offer a jailbreak tool for end users.
Timeline
Apple released Lockdown Mode for iPhone users a few years ago.
Early November 2026: Calif publicly demonstrated the Lockdown Mode compromise.
Apple released iOS 27.2.1 following the discovered breach.
The Tech Race
Lockdown Mode, which Apple introduced for iPhone users a few years ago, cuts access to several parts of the device and blocks message link previews to resist sophisticated attacks. Calif's demonstration tests that protective design against the security claims Apple has made for the feature.
iPhone users who rely on Lockdown Mode for protection should keep iOS updated to the latest release, which Apple has now made available as iOS 27.2.1. The attack required accepting an AirDrop file, so users can reduce exposure by declining unexpected files.
The takeaway
Keeping iOS current and treating unexpected AirDrop files with caution remain the most practical defenses for iPhone users, even when Lockdown Mode is enabled.
Further reading
For broader context on device attacks and defenses, explore our Cybersecurity coverage.
Source note: This article includes information reported by BGR.
Live Poll
Do you trust your iPhone's built-in security features to protect your personal data?
