Security researchers from the cybersecurity firm Calif demonstrated a working untethered jailbreak for iOS 27.0.1 on Apple’s newest iPhone 18 Pro. The live demo took place at Hexacon 2026, the offensive security conference organized by Synacktiv in Paris on October 16. It is one of the first public signs that Apple’s latest phone and software can already be fully opened up, only weeks after both reached users. On stage, the researchers restarted the iPhone 18 Pro. It booted to the Apple logo, reached the lock screen, and was unlocked with the passcode. The jailbreak then came back on its own without the phone being connected to a computer. This is what “untethered” means. The jailbreak survives a full reboot, which makes it the hardest and rarest kind to build on modern iPhones. Next, the team connected to the phone over SSH on port 2222 and logged in as root. The id command returned uid=0, which confirms full root access. The uname output showed Darwin Kernel 27.0.0 built on XNU 13432.2.10 for the T8160 chip, with the model listed as iPhone19,2. The sw_vers command confirmed iOS 27.0.1, build 24A446, and neofetch listed 67 packages installed through dpkg with an uptime of only two minutes. At #hexacon – https://t.co/jEOpspETlT demos iOS 27.0.1 untethered jailbreak on iPhone 18 Pro pic.twitter.com/S54aRrzHFS — Billy Ellis (@bellis1000) October 16, 2026 Getting root on a current iPhone usually needs a chain of several bugs. An attacker has to escape the app sandbox, take over the kernel, and get past hardware-backed defenses such as Pointer Authentication Codes (PAC). Keeping that access after a reboot is even harder because Apple checks the code that runs at startup. The researchers have not shared which flaws they used, and no public tool has been released. Apple released iOS 27 on September 14 with fixes for more than 120 flaws, including 20 in the kernel, according to its official security notes . It was part of a wider release that fixed 273 vulnerabilities across Apple devices . Earlier this year, Apple also patched an actively exploited iOS zero-day used against targeted individuals. For most users, the risk is low for now since the method is not public. However, spyware makers often use the same type of bug chain, so iPhone owners should install Apple’s next security update as soon as it arrives. The post iOS 27.0.1 Untethered Jailbreak Demonstrated on iPhone 18 Pro appeared first on Cyber Security News .

Suite aux cyberattaques contre les frigos de supermarchés, la société française Synacktiv alerte sur un risque « sous-estimé ». Selon les chercheurs, des équipements de réfrigération sont accessibles…

Worth some nuance on this: the login isn't literally the date. It's a code derived from the date by a fixed algorithm (Synacktiv 2023, Claroty 2025), with no per-device secret, so the same code works on every unit that day once you've reversed it. And getting a case to 50C isn't one setpoint change. You force a permanent defrost and defeat its termination, which takes some knowledge of the refrigeration.

Suite aux cyberattaques contre les frigos de supermarchés, la société française Synacktiv alerte sur un risque « sous-estimé ». Selon les chercheurs, des équipements de réfrigération sont accessibles...

Suite aux cyberattaques contre les frigos de supermarchés, la société française Synacktiv alerte sur un risque « sous-estimé ». Selon les chercheurs, des équipements de réfrigération sont accessibles ...

Suite aux cyberattaques contre les frigos de supermarchés, la société française Synacktiv alerte sur un risque « sous-estimé ». Selon les chercheurs, des équipements de réfrigération sont accessibles depuis Internet, parfois sans le moindre mot de passe. C'est potentiellement de cette manière que de

Suite aux cyberattaques contre les frigos de supermarchés, la société française Synacktiv alerte sur un risque « sous-estimé ». Selon les chercheurs, des équipements de réfrigération sont accessibles ...

Python3 rewrite of AsOutsider features of AADInternals

Simulating legitimate Active Directory services on the network: the

La société française de cybersécurité Synacktiv lance REVEL·IO, une solution de criminalistique numérique destinée aux forces de l'ordre européennes, qui pourront déverrouiller les smartphones saisis ...

In this video, cybersecurity researcher Guillaume Valadon of GitGuardian breaks down how exposed Laravel APP_KEYs on GitHub can lead to full Remote Code Execution (RCE) in real-world…