Pinned Tweet
🚨 Attention: A small security firm just got root on Apple’s newest iPhone. And it survived a reboot.
Calif.io did it live at Hexacon in Paris on October 16. iPhone 18 Pro. iOS 27.0.1. Apple’s current release.
It is not a leaked government tool. It is not a spyware vendor. It is a team that says it sells no bugs and no exploits.
They rebooted the phone, unlocked it, and two minutes later were logged in over SSH as root. No computer attached.
Apple pays up to $2,000,000 for a spyware-grade exploit chain. With bonuses, the ceiling passes $5,000,000. Apple has paid $35,000,000 to 800+ researchers since 2020.
Calif reported nearly 100 bugs to Apple this year.
Now the AI part. Apple’s iOS 27 security notes credit Calif.io together with Claude and Anthropic Research for two bugs. In May, Calif said Claude Mythos Preview helped build a macOS kernel exploit against Apple’s M5 protections in under a week.
Nobody has confirmed AI built this exact jailbreak. But Apple itself says chains like this cost millions to develop.
iOS 27.2 shipped October 26 and fixed most of the bugs. Calif never named them. No public tool exists, and Calif plans no end-user release. Update anyway.
The demo video is public and free. Most people will scroll past it.
Rayan retweeted
Apple offers a bounty of up to $5,000,000 for critical zero-click exploits, but advanced AI models like Claude Mythos Preview are shattering 5-year hardware security walls in just 5 days.
• $5,000,000 Payout: Apple's maximum reward for Lockdown Mode bypasses and mercenary zero-click chains.
• 5 Days vs 5 Years: AI systems bypass cutting-edge chip protection in days, rendering years of human engineering obsolete.
• Official AI Credits: Anthropic Research and OpenAI are now directly credited in official iOS security patches for finding kernel bugs.
• Financial Scale: In 2024, Apple paid $11.8 million to 660 researchers, driving the multi-billion-dollar vulnerability market.
How to secure your device right now:
App Privacy Report: Check Settings Privacy & Security to see which apps access your camera, mic, and domains.
Photos Access: Limit Full Access to your photo library; switch non-essential apps to Limited Access.
System Indicators: Watch for the orange or green status dot indicating active microphone or camera usage.
Subscription & Charge Audit: Review Apple Pay transactions and your Apple ID Subscriptions for unauthorized recurring fees.
Apple offers a bounty of up to $5,000,000 for critical zero-click exploits, but advanced AI models like Claude Mythos Preview are shattering 5-year hardware security walls in just 5 days.
• $5,000,000 Payout: Apple's maximum reward for Lockdown Mode bypasses and mercenary zero-click chains.
• 5 Days vs 5 Years: AI systems bypass cutting-edge chip protection in days, rendering years of human engineering obsolete.
• Official AI Credits: Anthropic Research and OpenAI are now directly credited in official iOS security patches for finding kernel bugs.
• Financial Scale: In 2024, Apple paid $11.8 million to 660 researchers, driving the multi-billion-dollar vulnerability market.
How to secure your device right now:
App Privacy Report: Check Settings Privacy & Security to see which apps access your camera, mic, and domains.
Photos Access: Limit Full Access to your photo library; switch non-essential apps to Limited Access.
System Indicators: Watch for the orange or green status dot indicating active microphone or camera usage.
Subscription & Charge Audit: Review Apple Pay transactions and your Apple ID Subscriptions for unauthorized recurring fees.
Rayan retweeted
🚨EXCLUSIVE: Claude Code just exposed a hidden $500 hardware hack inside a cheap airport power bank that quietly mirrored entire iPhones during a standard charge, risking a $100,000+ data breach.
The hidden mechanics of the breach:
• 64 GB internal storage: The device registered as a micro-computer, exploiting a single Trust This Computer tap to scrape 1,206 contacts, 3,912 photos (including passports), and $50k+ banking app data.
• Automated exfiltration: It harvested home Wi-Fi credentials on the first plug-in, using the local network to quietly upload packets to external servers while the owners slept.
• AI-driven detection: Claude Code flagged the unauthorized data stream within 10 seconds, cutting off outbound connections and locking down compromised accounts in real time.
While consumers trust cheap hardware accessories, autonomous AI agents backed by $10B+ in advanced computing are becoming the only defense against hardware level cyber espionage.
How secure is your daily tech setup?
🚨EXCLUSIVE: Claude Code just exposed a hidden $500 hardware hack inside a cheap airport power bank that quietly mirrored entire iPhones during a standard charge, risking a $100,000+ data breach.
The hidden mechanics of the breach:
• 64 GB internal storage: The device registered as a micro-computer, exploiting a single Trust This Computer tap to scrape 1,206 contacts, 3,912 photos (including passports), and $50k+ banking app data.
• Automated exfiltration: It harvested home Wi-Fi credentials on the first plug-in, using the local network to quietly upload packets to external servers while the owners slept.
• AI-driven detection: Claude Code flagged the unauthorized data stream within 10 seconds, cutting off outbound connections and locking down compromised accounts in real time.
While consumers trust cheap hardware accessories, autonomous AI agents backed by $10B+ in advanced computing are becoming the only defense against hardware level cyber espionage.
How secure is your daily tech setup?
Rayan retweeted
🚨A viral post says airport chargers copied a man’s photos, messages and banking sessions. Since 2011, researchers have not documented one confirmed victim of that attack.
It says Claude Code caught it live on his iPhone. A coding agent can only read what the operating system lets it read. iOS decides what a USB port can touch, and it asks Trust This Computer? first. Say no.
The real version of that attack is physical access to a locked iPhone. Apple pays up to $500,000 for it. Zero-click chains pay $2,000,000, over $5,000,000 with bonuses. $35,000,000 has gone to 800+ researchers since 2020.
So where does the AI really show up? Not in your charger.
Anthropic says about 50 partners used Claude Mythos Preview to surface 10,000+ high or critical flaws in a month. Calif says Claude helped it break Apple’s M5 shield in five days, and humans still beat the hardest part. iOS 27.2 shipped 163 fixes. Anthropic Research is credited on three, OpenAI on four. Those are the companies’ own numbers, not audits.
The risk is not zero. A 2025 study called ChoiceJacking showed a new variant. Use your own adapter, a wall outlet, and decline every prompt.
The window that matters is the gap between a fix and your install. Update iOS tonight.
Five prompts are in the article. Run one before you travel.
🚨A viral post says airport chargers copied a man’s photos, messages and banking sessions. Since 2011, researchers have not documented one confirmed victim of that attack.
It says Claude Code caught it live on his iPhone. A coding agent can only read what the operating system lets it read. iOS decides what a USB port can touch, and it asks Trust This Computer? first. Say no.
The real version of that attack is physical access to a locked iPhone. Apple pays up to $500,000 for it. Zero-click chains pay $2,000,000, over $5,000,000 with bonuses. $35,000,000 has gone to 800+ researchers since 2020.
So where does the AI really show up? Not in your charger.
Anthropic says about 50 partners used Claude Mythos Preview to surface 10,000+ high or critical flaws in a month. Calif says Claude helped it break Apple’s M5 shield in five days, and humans still beat the hardest part. iOS 27.2 shipped 163 fixes. Anthropic Research is credited on three, OpenAI on four. Those are the companies’ own numbers, not audits.
The risk is not zero. A 2025 study called ChoiceJacking showed a new variant. Use your own adapter, a wall outlet, and decline every prompt.
The window that matters is the gap between a fix and your install. Update iOS tonight.
Five prompts are in the article. Run one before you travel.
Rayan retweeted
anthropic is giving up to $250 in claude credits FREEEEEE
how to claim:
- open: claude.ai/code/claim-credit/…
- log in with your claude account
- credits land on your account
things to keep in mind:
> for paid plans only
> $100 on pro, $250 on max
> limited time, claim before it's gone
Readers added context they thought people might want to know
Anthropic's up-to-$250 Claude Code cloud-session credit had to be claimed by October 7, 2026. The screenshot itself says "Must be claimed by 3:59 PM GMT+9, October 8." The November date is only when already-claimed credits expire.
bleepingcomputer.com/news/artificia…
Rayan retweeted
Somewhere in the world there’s probably an entire team of 6 devs, working full time on a project that’s just one Claude Code prompt
Rayan retweeted
WTF... 10,000 high-severity software flaws in one month. Found with one AI model you cannot download.
That is Anthropic’s own number for Project Glasswing. About 50 partners used Claude Mythos Preview. Cloudflare logged around 2,000 bugs. Mozilla fixed 271 in Firefox, over ten times its count with an earlier Claude model. Anthropic committed $100,000,000 in usage credits to launch it. Nobody outside has audited the totals, and the model is open only to vetted organizations.
Now compare the old market. Apple pays up to $2,000,000 for one zero-click chain, over $5,000,000 with bonuses. It has paid $35,000,000 to 800+ humans since 2020.
Here is what flipped. Anthropic says finding bugs is no longer the bottleneck. Humans triaging, reporting and patching is. Microsoft says its patch releases will keep growing.
Apple is already there. iOS 27.2 shipped 163 fixes. Anthropic Research is credited on three, OpenAI on four. Calif says Claude helped it break Apple’s M5 shield in five days, and humans still beat the hardest part. Nobody has confirmed AI built the October jailbreak.
So the scarce thing is not the exploit anymore. It is your update. Install it. Then Settings, Privacy and Security, Photos. Cut Full Access.
Five prompts are in the article. Almost nobody will run them.
WTF... 10,000 high-severity software flaws in one month. Found with one AI model you cannot download.
That is Anthropic’s own number for Project Glasswing. About 50 partners used Claude Mythos Preview. Cloudflare logged around 2,000 bugs. Mozilla fixed 271 in Firefox, over ten times its count with an earlier Claude model. Anthropic committed $100,000,000 in usage credits to launch it. Nobody outside has audited the totals, and the model is open only to vetted organizations.
Now compare the old market. Apple pays up to $2,000,000 for one zero-click chain, over $5,000,000 with bonuses. It has paid $35,000,000 to 800+ humans since 2020.
Here is what flipped. Anthropic says finding bugs is no longer the bottleneck. Humans triaging, reporting and patching is. Microsoft says its patch releases will keep growing.
Apple is already there. iOS 27.2 shipped 163 fixes. Anthropic Research is credited on three, OpenAI on four. Calif says Claude helped it break Apple’s M5 shield in five days, and humans still beat the hardest part. Nobody has confirmed AI built the October jailbreak.
So the scarce thing is not the exploit anymore. It is your update. Install it. Then Settings, Privacy and Security, Photos. Cut Full Access.
Five prompts are in the article. Almost nobody will run them.
Rayan retweeted
WTF: Apple pays up to $5,000,000 for one iPhone exploit. And now an AI lab is sitting in Apple’s security credits.
The price list, from Apple:
→ $2,000,000 for a zero-click chain
→ $1,000,000 for a wireless proximity exploit
→ $300,000 for a one-click WebKit escape
→ $35,000,000 paid to 800+ researchers since 2020
Those prices exist because the work is slow and rare. AI is now pushing on exactly that.
In May, Calif said Claude Mythos Preview helped it find bugs and build a kernel exploit against Apple’s M5 in five days. Apple spent about five years on that shield. That is Calif’s own account, not an independent audit.
Then the credits. iOS 27.2 shipped 163 fixes. Anthropic Research is credited on three. OpenAI on four. Apple says none was known to be exploited. Nobody has confirmed AI built the October iPhone jailbreak.
The model is not public. Only vetted organizations get it. The Claude you chat with is not that.
What it means in dollars is my reading, not fact. The same money may buy more bugs. Private exploit sellers may move faster too.
Your part takes three minutes. Install the update. Settings, Privacy and Security, Photos. Count the apps with Full Access. Switch most to Limited.
Five prompts are in the article. Almost nobody will run them.
WTF: Apple pays up to $5,000,000 for one iPhone exploit. And now an AI lab is sitting in Apple’s security credits.
The price list, from Apple:
→ $2,000,000 for a zero-click chain
→ $1,000,000 for a wireless proximity exploit
→ $300,000 for a one-click WebKit escape
→ $35,000,000 paid to 800+ researchers since 2020
Those prices exist because the work is slow and rare. AI is now pushing on exactly that.
In May, Calif said Claude Mythos Preview helped it find bugs and build a kernel exploit against Apple’s M5 in five days. Apple spent about five years on that shield. That is Calif’s own account, not an independent audit.
Then the credits. iOS 27.2 shipped 163 fixes. Anthropic Research is credited on three. OpenAI on four. Apple says none was known to be exploited. Nobody has confirmed AI built the October iPhone jailbreak.
The model is not public. Only vetted organizations get it. The Claude you chat with is not that.
What it means in dollars is my reading, not fact. The same money may buy more bugs. Private exploit sellers may move faster too.
Your part takes three minutes. Install the update. Settings, Privacy and Security, Photos. Count the apps with Full Access. Switch most to Limited.
Five prompts are in the article. Almost nobody will run them.
Rayan retweeted
holy f*cking sh*t your "deleted" photos are not deleted and i can prove it on my own ipad right now
claude code found YEARS of them sitting in a hidden cache on my ipad and nobody is talking about this
i plugged my ipad into my computer for a routine backup. ran claude code in parallel doing a security sweep. it flagged a directory i was not even looking for. PhotoData/Thumbnails
thousands of files. photos. videos. screenshots. half of them i had DELETED
here is what was sitting in that cache:
-> old screenshots of banking apps
-> photos i deleted literally seconds after taking them
-> stuff i cleared from Recently Deleted months ago
-> screenshots i specifically remember deleting more than once
the mechanic apple does not want on the front page: when you delete a photo, ipados removes it from the camera roll and from Recently Deleted. but it keeps a compressed thumbnail in a Spotlight search cache so the system can still find images when you search. that cache does NOT get fully wiped
so your "deleted" bank screenshot is sitting in a folder any app with Files access can walk right into
then i checked which apps on my ipad actually HAD Files and Folders access. the list was way longer than i remembered. random apps i downloaded a year ago and forgot about. any of them could have been reading that cache the whole time
i revoked access on almost all of them in 2 minutes
the exact prompt i fed claude code is in the article below. the whole audit takes 10 minutes if you already have a backup
the brutal question nobody wants to answer: how many apps on your ipad have Files access right now and when was the last time you actually checked
bookmark this before your next backup
Rayan retweeted
For everyone wondering how Claude is going to start watermarking generated copy.. I think I figured it out!
