Apple's MIE jailbreak patch shows hardware security buys time, not immunity

Is an iPhone with five years of silicon-level security work behind it really unjailbreakable? Calif's recent demo answered that, and the answer is no. Not because Apple failed, but because that was never a promise anyone could keep.

Researchers from security vendor Calif showed at the Hexacon conference in Paris that they could run an exploit chain and jailbreak an iPhone 18 Pro on iOS 27.0.1. According to itnews, the jailbreak survived a reboot, and the chain got past Memory Integrity Enforcement (MIE), the hardware protection Apple introduced with the A19 chips. A week later, Calif reportedly jailbroke the new iPhone Duo on launch day, October 23, running iOS 27.1, via Signal and iMessage.

Apple released iOS 27.2 on October 26. Calif researcher Stefan Esser said it closed most of the flaws involved, and Apple acknowledged the firm. Calif hasn't published technical details and hasn't tied its work to any spyware vendor.

Hardware raises the price, it doesn't cancel the bill

Apple describes MIE as the result of half a decade of design work, combining Apple silicon with operating system security for always-on memory safety. We believe that. It is probably the most ambitious attempt in the industry to make a whole class of bugs expensive to exploit.

But "expensive" is not "impossible." Calif got through, and the reported delivery route, messages sent through apps, echoes FORCEDENTRY, the 2021 zero-click exploit that Citizen Lab caught NSO Group's Pegasus using. In our view, the same front door keeps being the one to watch.

There's also an uncomfortable detail. Calif previously said that Anthropic's Claude Mythos Preview helped it build a macOS kernel exploit against MIE on Apple's M5 chip in under a week, as itnews relays, citing Decrypt. That is a claim from the researchers, not something we can verify. Still, it suggests a trend: defenses that took years to build may be probed in days. The iOS 27.2 notes credit Anthropic Research on three fixes and OpenAI on four, so defenders are using the same tools.

The good news is the speed, and the bad news is the pile

Give Apple credit. Most of the bugs in the chain are closed for anyone who installs the update, and Apple said none of the 163 vulnerabilities fixed in iOS 27.2 was known to have been exploited. (CNET counts 141 bug and security issues, so the exact tally varies by source.) CNET also notes this is an unusually large number of fixes compared with recent years, though Apple hasn't explained why.

That volume cuts both ways. It's reassuring that bugs are being found and closed. It's also a reminder of how much code sits under the lock.

The older-device story is less flattering. Apple only now extended a fix for an exploited CoreGraphics flaw, CVE-2026-86950, to the iPhone XS, XS Max and XR via iOS 18.7.11, four weeks after patching newer models. Apple said the flaw may have been exploited in "an extremely sophisticated attack against specific targeted individuals." Those 2018 phones waited a month. In our view, that is the real gap: not between hardware and software, but between the phones that get patches first and those that get them late.

The best lock is the one you actually install

Update to iOS 27.2 now (Settings > General > Software Update). Most readers aren't targets of a sophisticated campaign, but a public demo is exactly when copycats start paying attention. If you're on an iPhone XS or XR, install iOS 18.7.11 and think about how long you want to keep relying on a phone that gets fixes last.

And drop the idea that any lock is final. MIE is a good bet, not a guarantee. The best security feature on your iPhone is still the one you install on the day it ships.