Collaborate Disseminate
So, here’s a thought…At a well-attended DFIR conference, there should be a DFIR open mic comedy night. In the evening, after the event is done for the day, use the venue for something a little light-hearted. For example, OSDFCon has had a mixer… Continue reading DFIR Open Mic Night
The French law enforcement agency, National Gendarmerie, today announced the successful takedown of one of the largest wide-spread RETADUP botnet malware and how it remotely disinfected more than 850,000 computers worldwide with the help of researchers… Continue reading French Police Remotely Removed RETADUP Malware from 850,000 Infected PCs
Apple just patched an unpatched flaw that it patched previously but accidentally unpatched recently — did I confuse you?
Let’s try it again…
Apple today finally released iOS 12.4.1 to fix a critical jailbreak vulnerability, like it or not, that was… Continue reading Apple Releases iOS 12.4.1 Emergency Update to Patch ‘Jailbreak’ Flaw
In a move to protect its users based in Kazakhstan from government surveillance, Google, Apple and Mozilla finally today came forward and blocked Kazakhstan’s government-issued root CA certificate within their respective web browsing software.
Startin… Continue reading Google, Mozilla, Apple Block Kazakhstan’s Root CA Certificate to Prevent Spying
Following the public disclosure of a critical zero-day vulnerability in Webmin last week, the project’s maintainers today revealed that the flaw was not actually the result of a coding mistake made by the programmers.
Instead, it was secretly planted … Continue reading Hackers Planted Backdoor in Webmin, Popular Utility for Linux/Unix Servers
Over the years, different means have been used to discuss the DFIR analysis process, and one of those has been artifact categories. This is where categories are created and artifacts placed in the various columns, as they relate to those categori… Continue reading Program Execution…Or Not
Following my first post on this topic, an interesting comment was shared that I thought would really benefit the discussion, as well as benefit from a further look.To paraphrase, the comment was along the lines of,”…how do you justify the additional … Continue reading Chasing the DFIR Cure, pt II
Over a billion Bluetooth-enabled devices, including smartphones, laptops, smart IoT devices, and industrial devices, have been found vulnerable to a high severity vulnerability that could allow attackers to spy on data transmitted between the two devic… Continue reading New Bluetooth Vulnerability Lets Attackers Spy On Encrypted Connections
Various implementations of HTTP/2, the latest version of the HTTP network protocol, have been found vulnerable to multiple security vulnerabilities affecting the most popular web server software, including Apache, Microsoft’s IIS, and NGINX.
Launched … Continue reading 8 New HTTP/2 Implementation Flaws Expose Websites to DoS Attacks
I’ve wondered for some time now, how do “customers” (recipients of DFIR services) determine the quality and accuracy of the rendered product? Throughout my time in the industry, I’ve known some customers to “seek a second opinion”, but is this so… Continue reading Chasing the DFIR Cure