Skip to content
September 25, 2026
  • Bluesky
  • Facebook
  • Linkedin
  • Mastodon
  • RSS
  • Twitter
  • Youtube

Daily CyberSecurity

Zero-hour alerts. Unmatched analysis.

Primary Menu
  • Home
  • CVE Data
    • CVE Watchtower
    • Top Exploited CVEs
    • CVE Stats by Vendor
    • Q2 2026 Report
    • CVE Alerts
    • CVE Alert Settings
    • Pricing
  • Cyber Criminals
  • Data Leak
  • Free Tools
    • CVSS 3.1 Calculator
    • Certificate Viewer
    • DNS Lookup
    • Encoder & Hash Generator
    • IP / Subnet Calculator
    • Whois Lookup
  • Linux
  • Malware
  • Vulnerability
  • Submit Press Release
  • Weekly Recap
Light/Dark Button
  • Home
  • News
  • Technology
  • Document show that Indiana police use GrayKey to unlock iPhone
  • Technology

Document show that Indiana police use GrayKey to unlock iPhone

Do Son March 10, 2018 2 minutes read
Add Daily CyberSecurity as a preferred source on Google

Recently, Forbes reported on a forensic tool called “GrayKey,” which is said to be able to break iOS 11 devices, including iPhone 8 and iPhone X, and may be used by more than one area’s police. Motherboard reported on Friday that a purchase order dated Feb. 21 showed that Indiana police purchased a GrayKey device for $500 and an authorization to unlock 300 devices for $14,500.

According to reports, the developer of the software is Grayshift, which sells two versions of GrayKey – one that can only be used on the Internet, with an authorized fee of $15,000 for a limited number of uses; the other is an offline version of $30,000, but no number of times limit.

It seems that the Indiana police obtained the first year’s $500 discount price. A copy of the email received by the foreign media Motherboard shows that the agency hopes to use it. An official wrote on February 20:

“This is a RUSH request because item is needed ASAP for evidence gathering for current cases. Please review and forward for approval.”

In another document, the agency states:

“GrayKey will be used in everything from high profile murder cases to crimes against children cases where suspects are hiding their content from law enforcement.”

The main advantage of GrayKey over competitors such as Cellebrite is the price. Although the price of $15,000 sounds high, the quotation submitted by the former has exceeded $200,000.

Previously, the FBI had to pay about $1 million in cracks to crack the iPhone 5c of the infamous San Bernardino shooting criminal Syed Rizwan Farook.

Although Apple has always been proud of the robustness of the iPhone device’s native encryption technology, as long as the company does not find the vulnerabilities and fill them up in time, law enforcement agencies will not easily end with the combination of search warrants and unlocking tools, let alone legally submitted iCloud data.

Source: appleinsider

Related coverage

  • The Cloud-Only Safety Net: Microsoft to Bypass Local Recycle Bins in Major OneDrive Overhaul
  • Red Alert at OpenAI: Ad Plans Dropped to Focus on ChatGPT Quality Amid Gemini Threat
  • Google Unveils Enhanced Baseband Security for Pixel 9
Track all actively exploited CVEs →

Support Our Threat Intelligence

Find our tech and OS security coverage helpful? Support our work today and unlock a 100% ad-free reading experience!

Buy Me a Coffee Logo Buy Me a Coffee
Select your plan
Free Pro Team

Hover over a plan to see its benefits.

Get Zero-Hour Vulnerability Alerts

Critical CVEs, CVSS scores, and PoC updates — straight to your inbox every week.

We respect your inbox. Unsubscribe anytime.

SHARE
Share on FacebookShare on XShare on LinkedInShare on TelegramShare on BlueskyShare on Mastodon
Written by
@DdoS · Security Researcher

Do Son

Do Son is the Founder and Editor of SecurityOnline.info. Working in cybersecurity since 2013, he reports on vulnerabilities, malware, and emerging threats, providing timely analysis to help organizations and individuals stay ahead of evolving risks.

Tags: GrayKey

Search

Translation

CVE ALERTS
📧

Email Delivery
Get threat intel straight to your inbox.

♾️

Unlimited Vendors
Track every technology in your stack.

🚨

All New CVE Alerts
Be the first to know about new flaws.

⚙️

Custom EPSS Threshold
Filter noise, focus on real risks.

💬

Slack & Teams Webhook
Integrate directly into your SecOps.

🚫

100% Ad-Free
Enjoy an uninterrupted reading experience.

$7/mo
Subscribe Now

🚨 Active Exploits in the Wild

  • CVE-2026-5430CVSS 10.0
    The JWT authentication mechanism accepts tokens signed with algorithms other than those explicitly configured or supported. This allows...
    CISA KEV📅 Added to KEV: Sep 24, 2026
  • CVE-2026-71362CVSS 9.1
    Adobe Commerce is affected by an Incorrect Authorization vulnerability that could result in privilege escalation. An attacker could...
    CISA KEV📅 Added to KEV: Sep 24, 2026
  • CVE-2026-48842CVSS 8.1
    Roundcube Webmail 1.6.x before 1.6.16 and 1.7.x before 1.7.1 has Pre-authentication SQL injection in the virtuser_query plugin via...
    Admin intel📅 Updated: Sep 23, 2026
  • CVE-2026-87902
    Unauthenticated path traversal in page-template resolution leading to conditional RCE An unauthenticated attacker can make get_page_template() page-template resolution...
    Admin intel📅 Updated: Sep 23, 2026
  • CVE-2026-94127CVSS 9.8
    When a BIG-IP APM access policy and an OAuth profile is configured on a virtual server, specific malicious...
    Admin intelCISA KEV📅 Added to KEV: Sep 22, 2026📅 Updated: Sep 22, 2026
  • CVE-2026-85102CVSS 9.8
    Improper certificate trust validation during VPN negotiation in Check Point Quantum Security Gateway may allow an unauthenticated remote...
    Admin intelCISA KEV📅 Added to KEV: Sep 22, 2026📅 Updated: Sep 22, 2026
  • CVE-2026-93616CVSS 9.8
    A directory traversal and file upload vulnerability allows an unauthenticated attacker to upload and execute arbitrary scripts on...
    Admin intelCISA KEV📅 Added to KEV: Sep 22, 2026📅 Updated: Sep 22, 2026
  • CVE-2026-93952CVSS 10.0
    VeloCloud Orchestrator (VCO) on-prem has a security issue where this issue may allow a remote attacker to access...
    Admin intelCISA KEV📅 Added to KEV: Sep 22, 2026📅 Updated: Sep 22, 2026
Powered by CVE Watchtower

Critical Vulnerabilities

  • CVE-2026-78445CVSS 9.8
    Use after free in Windows Services for NFS ONCRPC XDR Driver allows an unauthorized attacker to execute code...
    📅 Updated: Sep 24, 2026
  • CVE-2026-77493CVSS 9.8
    Double free in Microsoft Graphics Component allows an unauthorized attacker to execute code over a network.
    📅 Updated: Sep 24, 2026
  • CVE-2026-73025CVSS 9.8
    Weak authentication in Windows iSCSI allows an unauthorized attacker to bypass a security feature over a network.
    📅 Updated: Sep 24, 2026
  • CVE-2026-73009CVSS 9.8
    Use after free in Windows Secure Socket Tunneling Protocol (SSTP) allows an unauthorized attacker to execute code over...
    📅 Updated: Sep 24, 2026
  • CVE-2026-72979CVSS 9.8
    Use after free in Windows DHCP Server allows an unauthorized attacker to execute code over a network.
    📅 Updated: Sep 24, 2026
  • CVE-2026-72982CVSS 9.8
    Stack-based buffer overflow in Windows Netlogon allows an unauthorized attacker to execute code over a network.
    📅 Updated: Sep 24, 2026
  • CVE-2026-72983CVSS 9.8
    Use after free in Windows Internet Connection Sharing (ICS) allows an unauthorized attacker to execute code over a...
    📅 Updated: Sep 24, 2026
  • CVE-2026-70296CVSS 9.8
    Out-of-bounds write in Windows Imaging Component allows an unauthorized attacker to execute code over a network.
    📅 Updated: Sep 24, 2026
Powered by CVE Watchtower

Daily CyberSecurity

  • About SecurityOnline.info
  • Advertise with us
  • Announcement
  • Contact
  • Contributor Register
  • Login
  • Disclaimer
  • DCMA
  • Privacy Policy
  • About SecurityOnline.info
  • Advertise on SecurityOnline.info
  • Contact Us

When you purchase through links on our site, we may earn an affiliate commission. Here’s how it works

  • CVE Watchtower
  • CVE Statistics by Vendor 2026
  • Q2 2026 Report
  • Top Exploited CVEs
  • Bluesky
  • Facebook
  • Linkedin
  • Mastodon
  • RSS
  • Twitter
  • Youtube
© 2017 - 2026 Daily CyberSecurity. All Rights Reserved.