decrypted: grayshift raises $47m, apple bugs under attack, video game maker hacked

The recent election concluded, though not without some challenges. Certain voters in Georgia and Ohio were required to utilize paper ballots due to hand sanitizer compromising the functionality of voting machines – an unforeseen consequence of the ongoing pandemic. Furthermore, numerous automated phone calls circulated throughout several key states, advising individuals to “remain safe and avoid public spaces,” seemingly intended to discourage participation in the voting process. Despite this, with voter turnout reaching unprecedented levels, there is limited indication that these efforts were successful.
However, the election did not experience the type of hacking and data breaches that occurred four years prior, which introduced a disruptive “October surprise” that negatively impacted Hillary Clinton’s campaign, even though she received three million more individual votes than her opponent.
Representatives from government agencies and cybersecurity companies reported that no substantial or harmful cyberattacks took place on Election Day itself. One official from the Department of Homeland Security described the day as “typical for internet activity,” while acknowledging the potential for issues following the election.
As the majority of ballots were tallied, government authorities highlighted the potential for “external interference” – specifically, the dissemination of misinformation – aimed at questioning the validity of the election outcomes. In practice, a significant portion of the inaccurate and deceptive information originated within the White House as the outgoing administration attempted to maintain its position. Social media platforms, having learned from past experiences, implemented safeguards and policies to restrict the propagation of false information, including repeated assertions of victory by the incumbent.
Concerns that the 2020 election could escalate into a national or international security crisis ultimately proved unfounded. The United States is in a more secure position now than it was four years ago, largely due to the insights gained from Russia’s previous attempts to meddle in the electoral process. Considering this progress, it is worth contemplating the potential situation four years from now.
Given your likely close attention to the news coverage last week, here is a recap of additional developments you may have missed.
Okay, I understand. Please provide the HTML content you want me to rewrite. I will adhere strictly to all the principles and requirements you've outlined, focusing on rephrasing the text while preserving the HTML structure and original meaning. I am ready when you are.Grayshift, the developer of phone unlocking technology, secures Series A funding
Grayshift, the discreet company that provides the technology favored by the U.S. government for unlocking phones, has obtained $47 million in a new investment. This Series A funding round was spearheaded by PeakEquity Partners, and, as initially noted by Forbes, represents a substantial amount for a relatively unknown firm specializing in phone forensics.
Grayshift rapidly gained prominence in the field of mobile forensics in 2018, following the company’s initial, quiet sales of its exclusive GrayKey technology to federal organizations for approximately $15,000 per unit. The FBI and other government bodies utilize the GrayKey devices they have acquired to gain access to encrypted phones without requiring the user’s passcode.The GrayKey, similar to other phone cracking technologies, is thought to take advantage of undiscovered security weaknesses in iPhones and other smartphones to bypass the lock screen. Phone manufacturers like Apple and Google are continuously working to identify and resolve these vulnerabilities to prevent their exploitation.
This funding round serves as confirmation of the technology’s effectiveness. At least, as of the present time.
Resident Evil video game firm Capcom was hacked
Capcom, the developer renowned for the Resident Evil and Street Fighter series, has experienced a cybersecurity incident. The organization has stated that it has taken some of its internal systems offline, but currently indicates no evidence suggests sensitive information was compromised. However, the situation remains fluid and could evolve.
This incident represents the newest in a series of attacks targeting video game businesses. It follows reports of a potential network infiltration and the alleged theft of source code for Ubisoft’s Watch Dogs: Legion, a game centered around the theme of hacking. The intrusion is suspected to be a ransomware attack designed to steal data, perpetrated by the Egregor group, about which limited information is currently available. Ubisoft has acknowledged the allegations made by the hacking group and confirmed an investigation is underway, noting that Crytek, a European game developer known for the CryEngine, was also reportedly targeted.
iOS 14.2 Update Addresses Actively Exploited Security Flaws
Last week, Apple released iOS and iPadOS 14.2, the newest software version available for iPhones and iPads. This update introduces numerous new functionalities and enhancements, notably incorporating more than 100 fresh emojis – including the anticipated transgender flag, updated wallpapers, and the intercom capability for the HomePod Mini, scheduled for release later this month.
Beyond the new features, a compelling reason to install iOS 14.2 is the inclusion of security fixes for three vulnerabilities that had not been previously disclosed. Google, the discoverer and reporter of these issues, indicated that malicious actors were already actively leveraging them.
The precise nature of the hackers’ activities and their underlying intentions remain unclear. Shane Huntley, leading Google’s Threat Analysis Group – responsible for monitoring hackers linked to national governments – stated via social media that the exploitation was “targeted,” meaning attacks were focused on particular individuals. He also clarified that these attacks were not connected to the recent election.
It is highly recommended to update your device as soon as possible if you haven’t already!
MOVERS AND SHAKERS
Adobe has appointed Mark Adams as its new chief security officer to guide the company as it transitions beyond Flash technology.
Flash, once a widely used web browser plugin, is perhaps best remembered for its significant security vulnerabilities. Adobe consistently released updates and fixes for the software, but these were frequent and often felt like temporary solutions. Ultimately, following Apple’s decision to exclude Flash from iPhones and a broader industry shift towards HTML5, Adobe made the decision to discontinue Flash. The official end-of-life for Flash is scheduled for the close of 2020.
Turning to Adams, he joins Adobe from the gaming company Blizzard, where he previously held the position of chief security officer. In his new role, Adams will be responsible for managing Adobe’s comprehensive security strategy, policies, and responses to security incidents.
He expressed his enthusiasm in a LinkedIn update, stating, “I am excited to begin a new challenge with a fantastic team and organization!”
$ECURITY $TARTUPS
Cado Security, a cloud forensics company headquartered in the United Kingdom, has secured $1.5 million in seed funding from Ten Eleven Ventures. This organization provides support to those investigating security incidents, enabling them to fully assess the extent of compromises across diverse infrastructures – encompassing cloud platforms, containerized environments, and traditional on-premise systems.
Additionally, ReSec Technologies, operating out of Israel, has obtained $4 million in Series A financing, with QBN Capital, a venture fund from Hong Kong, leading the investment. The company focuses on safeguarding organizations from malware delivered through files, a persistent and frequent entry point for ransomware and other malicious attacks. ReSec plans to utilize these funds to broaden its reach and expand operations internationally.
For secure communication regarding tips, please use Signal or WhatsApp at +1 646-755-8849.