Skip to content
October 26, 2026
  • Bluesky
  • Facebook
  • Linkedin
  • Mastodon
  • RSS
  • Twitter
  • Youtube

Daily CyberSecurity

Zero-hour alerts. Unmatched analysis.

Primary Menu
  • Home
  • CVE Data
    • CVE Watchtower
    • Top Exploited CVEs
    • CVE Stats by Vendor
    • Q2 2026 Report
    • CVE Alerts
    • CVE Alert Settings
    • Pricing
  • Cyber Criminals
  • Data Leak
  • Free Tools
    • CVSS 3.1 Calculator
    • Certificate Viewer
    • DNS Lookup
    • Encoder & Hash Generator
    • IP / Subnet Calculator
    • Whois Lookup
  • Linux
  • Malware
  • Vulnerability
  • Submit Press Release
  • Weekly Recap
Light/Dark Button
  • Home
  • News
  • Technology
  • US State Department Purchases $15,000 iPhone Cracking Device
  • Technology

US State Department Purchases $15,000 iPhone Cracking Device

Do Son March 26, 2018 2 minutes read
iPhone Cracking Device
Add Daily CyberSecurity as a preferred source on Google

GrayKey, an iPhone crack device created by Grayshift, has attracted the attention of the U.S. government. The demand for such equipment from the relevant departments is very strong, especially in the detection process of some criminal cases that require critical clues. The latest news is that the U.S. Department of State has also adopted a batch of GrayKeys worth $15,000, but their use is for the time being unknown. A report from Motherboard stated that the State Department’s Bureau of Diplomatic Security had ordered on March 6th.

 

Image: Malwarebytes

Security vendor Malwarebytes has released an in-depth analysis of the cracking capabilities of the device, saying that it takes a few minutes to several days to crack the iPhone password. In addition, regardless of the iPhone model, or running that version of iOS, are considered to be cracked.

 

Image: Motherboard

It is reported that law enforcement agencies can use GrayKey in criminal cases to investigate and extract data from the iPhone. However, due to security concerns, Apple has repeatedly refused the relevant department’s request for unlocking.

Malwarebytes pointed out that GrayKey still has the risk of equipment falling into the hands of the bad guys and eventually leads to exposure to users and their data.

As for how to fix bugs and mitigate the impact of GrayKey, Apple did not make any comments but promised to spend more time improving the security and reliability of its software.

Source: Motherboard

Related coverage

  • Amazon Expands Same-Day Delivery: 4,000 New US Cities & Towns by 2026
  • Microsoft Edge Is Removing a Key Developer Tool—Here’s What It Means
  • Survey: 45% of network security experts reuse the same password
  • Google launches a bug bounty program for its Android apps, with a maximum reward of $30,000
  • SanDisk Unveils World’s Largest SSD: The 256TB UltraQLC Drive Built for the AI Era
  • Smarter Claude AI: Free Users Get Web Search, Voice Mode Coming Soon
Track all actively exploited CVEs →

Support Our Threat Intelligence

Find our tech and OS security coverage helpful? Support our work today and unlock a 100% ad-free reading experience!

Buy Me a Coffee Logo Buy Me a Coffee
Select your plan
Free Pro Team

Hover over a plan to see its benefits.

Get Zero-Hour Vulnerability Alerts

Critical CVEs, CVSS scores, and PoC updates — straight to your inbox every week.

We respect your inbox. Unsubscribe anytime.

SHARE
Share on FacebookShare on XShare on LinkedInShare on TelegramShare on BlueskyShare on Mastodon
Written by
@DdoS · Security Researcher

Do Son

Do Son is the Founder and Editor of SecurityOnline.info. Working in cybersecurity since 2013, he reports on vulnerabilities, malware, and emerging threats, providing timely analysis to help organizations and individuals stay ahead of evolving risks.

Tags: iPhone Cracking Device

Search

Translation

CVE ALERTS
📈

EPSS Spike Alerts
Catch risk spikes before they make headlines.

🎯

Custom EPSS/CVSS
Set score thresholds to effectively filter noise.

🛡️

Exploit Intel
Real-world exploit signals beyond the KEV catalog.

🐙

GitHub Issues
Auto-create alert tickets without duplication.

📬

Weekly Digest
Clean summaries, eliminating email spam.

🏷️

Watchlist Groups
Tag vulnerabilities by team (Infra/AppSec/SOC).

🔀

Smart Routing
Route chat channels based on severity levels.

🚨

RBP Tracker
Early warning detection and tracking system.

Subscribe – $7/mo or try free for 14 days →

🚨 Active Exploits in the Wild

  • CVE-2020-13125CVSS 7.2
    An issue was discovered in the "Ultimate Addons for Elementor" plugin before 1.24.2 for WordPress, as exploited in...
    Watchtower Verified📅 Updated: Oct 26, 2026
  • CVE-2020-13126CVSS 9.9
    An issue was discovered in the Elementor Pro plugin before 2.9.4 for WordPress, as exploited in the wild...
    Watchtower Verified📅 Updated: Oct 26, 2026
  • CVE-2019-20180CVSS 8.0
    The TablePress plugin for WordPress is vulnerable to CSV Injection in versions up to and including 1.14 via...
    Watchtower Verified📅 Updated: Oct 26, 2026
  • CVE-2026-106173CVSS 9.8
    A improper limitation of a pathname to a restricted directory (\'path traversal\') vulnerability in Fortinet FortiSIEM 7.5.0 may...
    Admin intel📅 Updated: Oct 25, 2026
  • CVE-2014-125133CVSS 8.7
    NativeChurch theme for WordPress before 1.6.2 contains a path traversal vulnerability that allows unauthenticated attackers to download arbitrary...
    Watchtower Verified📅 Updated: Oct 24, 2026
  • CVE-2015-20128CVSS 8.8
    FooSun DotNetCMS 1.0 and 2.0 contains an SQL injection vulnerability that allows unauthenticated attackers to manipulate MSSQL queries...
    Watchtower Verified📅 Updated: Oct 24, 2026
  • CVE-2016-20104CVSS 8.7
    EyeLock nano NXT 3.05.1193, 3.04.1108, 3.03.944, and 3.01.646 contain a path traversal vulnerability that allows unauthenticated attackers to...
    Watchtower Verified📅 Updated: Oct 24, 2026
  • CVE-2026-110447CVSS 9.2
    Collabora Online Built-in CODE Server before 26.4.303 (richdocumentscode), a Nextcloud app, allows remote code execution, as exploited in...
    CISA KEV📅 Added to KEV: Oct 23, 2026
Powered by CVE Watchtower

Critical Vulnerabilities

  • CVE-2026-45083CVSS 9.8
    The Goobi viewer is a web application that allows digitised material to be displayed in a web browser....
    📅 Updated: Oct 26, 2026
  • CVE-2026-47323CVSS 9.8
    Camel-CXF and Camel-Knative Message Header Injection via Missing Inbound Filtering The CXF and Knative HeaderFilterStrategy implementations (CxfRsHeaderFilterStrategy in...
    📅 Updated: Oct 26, 2026
  • CVE-2026-42731CVSS 9.8
    Incorrect Privilege Assignment vulnerability in miniOrange miniorange otp verification miniorange-otp-verification allows Privilege Escalation.This issue affects miniorange otp verification:...
    📅 Updated: Oct 26, 2026
  • CVE-2026-32999CVSS 9.0
    Insufficient character filtering in backup agent signing module on Comet Backup server allows authenticated tenant administrator to execute...
    📅 Updated: Oct 26, 2026
  • CVE-2026-46907CVSS 9.9
    Vulnerability in the JD Edwards EnterpriseOne Order Promising product of Oracle JD Edwards (component: Order Promising Integration). The...
    📅 Updated: Oct 26, 2026
  • CVE-2026-46908CVSS 9.9
    Vulnerability in the JD Edwards EnterpriseOne Accounts Payable product of Oracle JD Edwards (component: Accounts Payable). The supported...
    📅 Updated: Oct 26, 2026
  • CVE-2026-46909CVSS 9.8
    Vulnerability in the JD Edwards EnterpriseOne Tools product of Oracle JD Edwards (component: Enterprise Infrastructure Security). Supported versions...
    📅 Updated: Oct 26, 2026
  • CVE-2026-46910CVSS 9.1
    Vulnerability in the JD Edwards EnterpriseOne Tools product of Oracle JD Edwards (component: Enterprise Infrastructure Security). Supported versions...
    📅 Updated: Oct 26, 2026
Powered by CVE Watchtower

Daily CyberSecurity

  • About SecurityOnline.info
  • Advertise with us
  • Announcement
  • Contact
  • Contributor Register
  • Login
  • Disclaimer
  • DCMA
  • Privacy Policy
  • About SecurityOnline.info
  • Advertise on SecurityOnline.info
  • Contact Us

When you purchase through links on our site, we may earn an affiliate commission. Here’s how it works

  • CVE Watchtower
  • CVE Statistics by Vendor 2026
  • Q3 2026 Report
  • Top Exploited CVEs
  • Bluesky
  • Facebook
  • Linkedin
  • Mastodon
  • RSS
  • Twitter
  • Youtube
© 2017 - 2026 Daily CyberSecurity. All Rights Reserved.