Before iPhone Duo buyers queued outside stores on Friday, one engineer had already found a way past Apple’s boot protections on the new handset.
A reboot that stays broken
Jake Calif, a researcher with a record of publishing iOS exploits, showed a jailbroken iPhone Duo on launch day running iOS 27.0.1. Footage captured home screen icons bouncing and widgets shifting, plus an anime figure sitting on the display. The handset was then restarted, and the access held, meaning the modification was baked into the boot volume rather than living only in the running kernel.
Calif has not posted a tool. He told MacRumors that ordinary users should not expect a download, though a proof of concept could follow.
The vulnerabilities behind it were not held back for the launch. By Calif’s account they are bugs he has already reported to Apple or intends to file, and most are addressed in the iOS 27.2 release candidate now in testing. AI assistance went into the exploit chain; he has not described how. Apple has said nothing about the demo.
What a launch-day break changes
Jailbreaks once doubled as malware prerequisites. That link has thinned: the persistent iOS spyware campaigns tracked through 2026, including the DarkSword and Coruna chains, attack unpatched handsets through the browser and never ask for root. A jailbreak’s value on the Duo sits elsewhere, in what it says about the platform’s defences.
Boot-chain persistence on hardware handed to reviewers hours earlier suggests the checkm8 era of recoverable flaws has not simply closed, or that Apple’s verification path has a gap. Either conclusion needs confirmation from the researcher, not from a launch-week video.
The advice for owners is dull. Stay current, and install 27.2 when it lands next week.
