Collaborate Disseminate
Over the years, different means have been used to discuss the DFIR analysis process, and one of those has been artifact categories. This is where categories are created and artifacts placed in the various columns, as they relate to those categori… Continue reading Program Execution…Or Not
Following my first post on this topic, an interesting comment was shared that I thought would really benefit the discussion, as well as benefit from a further look.To paraphrase, the comment was along the lines of,”…how do you justify the additional … Continue reading Chasing the DFIR Cure, pt II
Over a billion Bluetooth-enabled devices, including smartphones, laptops, smart IoT devices, and industrial devices, have been found vulnerable to a high severity vulnerability that could allow attackers to spy on data transmitted between the two devic… Continue reading New Bluetooth Vulnerability Lets Attackers Spy On Encrypted Connections
Various implementations of HTTP/2, the latest version of the HTTP network protocol, have been found vulnerable to multiple security vulnerabilities affecting the most popular web server software, including Apache, Microsoft’s IIS, and NGINX.
Launched … Continue reading 8 New HTTP/2 Implementation Flaws Expose Websites to DoS Attacks
I’ve wondered for some time now, how do “customers” (recipients of DFIR services) determine the quality and accuracy of the rendered product? Throughout my time in the industry, I’ve known some customers to “seek a second opinion”, but is this so… Continue reading Chasing the DFIR Cure
The threat of ransomware is becoming more prevalent and severe as attackers’ focus has now moved beyond computers to smartphones and other Internet-connected smart devices.
In its latest research, security researchers at cybersecurity firm CheckPoint … Continue reading Canon DSLR Cameras Can Be Hacked With Ransomware Remotely
Apple has just updated the rules of its bug bounty program by announcing a few major changes during a briefing at the annual Black Hat security conference yesterday.
One of the most attractive updates is…
Apple has enormously increased the maximum re… Continue reading Apple will now pay hackers up to $1 million for reporting vulnerabilities
Facebook has filed a lawsuit against two shady Android app developers accused of making illegal money by hijacking users’ smartphones to fraudulently click on Facebook ads.
According to Facebook, Hong Kong-based ‘LionMobi’ and Singapore-based ‘JediMob… Continue reading Facebook Sues Two Android App Developers for Click Injection Fraud
Remember the Reverse RDP Attack?
Earlier this year, researchers disclosed clipboard hijacking and path-traversal issues in Microsoft’s Windows built-in RDP client that could allow a malicious RDP server to compromise a client computer, reversely.
(Yo… Continue reading Reverse RDP Attack Also Enables Guest-to-Host Escape in Microsoft Hyper-V
A new variant of the Spectre (Variant 1) side-channel vulnerability has been discovered that affects all modern Intel CPUs, and probably some AMD processors as well, which leverage speculative execution for high performance, Microsoft and Red Hat warne… Continue reading SWAPGS Attack — New Speculative Execution Flaw Affects All Modern Intel CPUs