Demos we presented at Hexacon in Paris today. Everything will be released in due time. 1/ Signal 1-click

The iPhones have arrived at our offices around the world. Sure, we managed to hack them, but they still make us look rich, so we accepted the risk.

Using an iPhone 18 Pro 27.0 kernel coredump to learn something about sandboxes

For security reasons, everyone at Calif is being issued an iPhone 18. No iPhone Duo though. We can’t believe Apple has just casually doubled the attack surface. Who needs two zero-clicks at the same time?! Not us. We take security very seriously. Thank you.

This gotta be a sign. @nokia , it’s time to start making these mfs again

At #hexacon - Calif.io demos iOS 27.0.1 untethered jailbreak on iPhone 18 Pro

A brand new iPhone jailbreak has just been unveiled on stage at Hexacon by the @calif_io team 😱

Big Fish: Exploiting a 37-Year-Old Kernel Bug in OpenBSD calif.io/research/big-fish

6a59972234764074e975edf0c6063ce06600b9fc85910e4ccb8867d8672977b1

fe3e524d5ac97872f92f7a242d2ebab521c9582bb2471fbe1abdae8c92f29268

Team Calif is hitting the stage in four cities before the end of October: Zurich, Paris, Tokyo, and San Francisco. * @YouTube Security Summit in Zurich: @XorNinja will share what's new in mobile security. * @hexacon_fr in Paris: @brucedang and @XorNinja will deliver the opening keynote, while Lukas Maar will show how to root Samsung phones. * @offensive_con in Tokyo: Quang L will demonstrate a Chromium sandbox escape, and @blacktop__ will present an escape from Apple's Virtualization framework—the second public MTE bypass. * [un]prompted in San Francisco: @brucedang and @pwnlambda will discuss zero-click remote exploits. Come say hi if you're there!

82eeab7f03c75ece988ea5c7e3bf8434a022f973f977315527e13857fe487235

A fun little weekend project. Hey @Rivian, check your inbox. We sent you a few cool bugs last week.

If you are tired of AI generated analysis of the 0-click CoreGraphics bug fixed in iOS 26.7.1 a few days ago, here is a more authoritative version from our research team. It includes analysis of WhatsApp too so you get 2 for the price of 1. To whoever found this bug: very cool. Please talk to us at @hexacon_fr next month. No PDFs plz.

CVE-2026-86950: The Great Glyph Grift calif.io/research/the-great-…

285a42f39202ba5ab6ee6734c9fbfafb8a74419a0d1a7b3ac48d2a64a8c610da