Collaborate Disseminate
Matt posted a blog article a while back, and I took interest in large part because it involved an LNK file. Matt provided a hash for the file in question, as well as a walk-through of his “peeling of the onion”, as it were. However, one of … Continue reading LNK Toolmarks
There are more than a few skills that make up the #DFIR “field”, and just one of them is conducting DFIR analysis. Brett Shavers recently shared his thoughts on how to improve in this area, specifically by studying someone else’s case work. … Continue reading Improving DFIR Skills
A lot of times I’ll see a question in DFIR-related social media, along the lines of, “what is the best tool to do X?” I’ve seen this a couple of times recently, perhaps the most recent being, “what is the best carving tool?” Nothing was sta… Continue reading What is "best"?
As promised by Apple in August this year, the company today finally opened its bug bounty program to all security researchers, offering monetary rewards to anyone for reporting vulnerabilities in the iOS, macOS, watchOS, tvOS, iPadOS, and iCloud to the… Continue reading Apple Opens Its Invite-Only Bug Bounty Program to All Researchers
Besides rewarding ethical hackers from its pocket for responsibly reporting vulnerabilities in third-party open-source projects, Google today announced financial support for open source developers to help them arrange additional resources, prioritizing… Continue reading Google Offers Financial Support to Open Source Projects for Cybersecurity
LifeLabs, the largest provider of healthcare laboratory testing services in Canada, has suffered a massive data breach that exposed the personal and medical information of nearly 15 million Canadians customers.
The company announced the breach in a pr… Continue reading LifeLabs Paid Hackers to Recover Stolen Medical Data of 15 Million Canadians
“Nomad is a flexible container orchestration tool that enables an organization to easily deploy and manage any containerized or legacy application using a single, unified workflow. Nomad can run a diverse workload of Docker, non-containerized, micro… Continue reading Devoops: Nomad with raw_exec enabled
Russian law enforcement officers have raided the Moscow offices of Nginx—the company behind the world’s second most popular web server software—over a copyright infringement complaint filed by Rambler, a Russian Internet portal and email service provid… Continue reading Russian Police Raided NGINX Moscow Office, Detained Co-Founders
A new variant of Vega ransomware family, dubbed Zeppelin, has recently been spotted in the wild targeting technology and healthcare companies across Europe, the United States, and Canada.
However, if you reside in Russia or some other ex-USSR countrie… Continue reading New Zeppelin Ransomware Targeting Tech and Health Companies
The last Patch Tuesday of 2019 is finally here.
Adobe today released updates for four of its widely used software—including Adobe Acrobat and Reader, Photoshop CC, ColdFusion, and Brackets—to patch a total of 25 new security vulnerabilities.
Seventee… Continue reading Adobe Releases Patches for ‘Likely Exploitable’ Critical Vulnerabilities