Features
The iPhone Duo was jailbroken on launch day. Here is what it means for you
Researchers at Calif showed a jailbroken iPhone Duo hours after release. There is no public tool, and the bigger risk is fake pre-order pages.
24 October 2026
Ask AI about this story

Apple's first foldable, the iPhone Duo, went on sale on Friday 23 October 2026, starting at $1,999. Within hours, the security firm Calif posted a short video of one running jailbroken: home-screen icons and widgets sliding around as the phone tilts, something iOS does not allow.
What actually happened
- MacRumors reports the device in the video was running iOS 27.1. The clip itself does not show the build number.
- The week before, the same team showed an untethered jailbreak of an iPhone 18 Pro on iOS 27.0.1 that kept root access after a restart.
- Calif's Stefan Esser told Heise there will be no jailbreak tool for ordinary users. A proof of concept may follow.
- He said the bugs have been or will be reported to Apple, and that most are fixed in iOS 27.2, which is currently in beta.
- Apple has not commented publicly. No CVE numbers have been published yet.
Should you worry?
Not about this demo. It ran on the researchers' own phone, there is no public tool and no evidence anyone is using these bugs against normal users. Launch-day jailbreaks are a sign of skilled research, and the fixes are already in testing.
The real risk: fake pre-order pages
In September, Malwarebytes found a fake "iPhone Duo pre-order" site offering a $500 voucher. Simply opening it tried an exploit chain known as DarkSword against older iPhones that had missed updates, aiming at crypto wallets, saved passwords and notes. Apple patched those flaws in March 2026, so an updated phone was safe. An out-of-date one was not.
The ten-second check
- Settings › General › Software Update. Install the latest version, and iOS 27.2 when it ships.
- In the same screen, turn on Automatic Updates.
- Buy and pre-order only from apple.com or a retailer you already know, never from an ad or a message link.


