iPhone jailbreak exposes texting via booby-trapped PDF
Security firm Calif demonstrated one-tap attacks on Signal and iMessage that run arbitrary code on iOS through a malicious PDF. Opening it in iMessage on iOS 26.5 sent the phone's message history to an external server.
The broader context: Calif also showed an untethered jailbreak on iPhone 18 Pro running iOS 27.0.1 that gets root access in under 2 minutes. They're releasing everything "in due time."
‼️ BREAKING: Security firm Calif unveiled an untethered iPhone 18 Pro jailbreak on stage in Paris. Its Hexacon demo shows the phone on iOS 27.0.1, Apple's latest, giving up a root shell within 2 minutes of boot.
Apple's latest flagship and messaging apps have critical zero-days that let attackers access private messages and run code with a single file.
Source
x.com