0000-0001-5247-3713 Every other day, Apple makes the work of forensic specialists harder. Speaking of iCloud, we partially covered this topic in Apple vs. Law Enforcement: Cloud Forensics and Apple vs Law Enforcement: Cloudy Times, but there is more to it today. The recent iOS (13.4) and macOS (10.15.4) releases brought some nasty surprises. Let’s talk […]

The post macOS, iOS and iCloud updates: forensic consequences appeared first on WJN LLC.

0000-0001-5247-3713 I am in awe of how the world is coming together, setting aside our differences and making bipartisan decisions to do what’s right for humanity and to help everyone adjust to a more remote and distanced coexistence. Security professionals, risk and legal officers, operations leads, and finance heads everywhere are working through plans to […]

The post The Critical Role of Frontline Workers | Yubico appeared first on WJN LLC.

0000-0001-5247-3713 VeraCrypt is a de-facto successor to TrueCrypt, one of the most popular cryptographic tools for full-disk encryption of internal and external storage devices. Compared to TrueCrypt, which it effectively replaced, VeraCrypt employs a newer and more secure format for encrypted containers, and significantly expands the number of supported encryption algorithms and hash functions. Learn […]

The post Breaking VeraCrypt containers appeared first on WJN LLC.

0000-0001-5247-3713 ASUSTOR advertises secure AES encryption with a 256-bit key. According to the manufacturer, AES-256 encryption is made available through the entire range of its current NAS devices. Unlike other manufacturers, ASUSTOR is very upfront regarding the type of encryption employed by its NAS devices: “ASUSTOR NAS offers folder based military grade AES 256-bit encryption”. […]

The post Attached Storage Forensics: Security Analysis of ASUSTOR NAS appeared first on WJN LLC.

0000-0001-5247-3713 Recently, remote access has become the new way of working for many businesses and our team at Yubico have also had to adapt to this new reality.   Last week, we published the first entry in our remote working blog series: 5 ways the YubiKey can protect your remote workforce from phishing and other attacks. […]

The post Top 10 tips from employees for working from home | Yubico appeared first on WJN LLC.

0000-0001-5247-3713 We recently introduced a new acquisition method for iPhone and iPad devices. The fast, simple and safe extraction agent requires no jailbreak, and delivers the full file system image and the keychain. The latest release of Elcomsoft iOS Forensic Toolkit expanded this method to iOS 13 and filled the gaps in some versions of […]

The post Full file system and keychain extraction: now with iOS 13 and iPhone 11 support appeared first on WJN LLC.

0000-0001-5247-3713 What do you get when you mix six hundred developers, twenty-four hours, twelve challenges and a mass of cash and prizes? The nation’s largest challenge-driven hackathon, hosted by DeveloperWeek in San Francisco.   Hackathon participants get just twenty-four hours to create a working proof of concept to solve some of the world’s most pressing problems. […]

The post Diablo Valley College students implement WebAuthn in 24 hours | Yubico appeared first on WJN LLC.

0000-0001-5247-3713 In today’s enterprise journey to digital transformation, remote work is on the rise. Advancements in technology make it possible for employees to work from anywhere, but also introduce a new set of challenges for IT departments. Unsecured WiFi networks, unmanaged personal mobile devices, and phishing scams make it easy to steal user credentials and […]

The post 5 ways the YubiKey can protect your remote workforce from phishing and other attacks | Yubico appeared first on WJN LLC.

0000-0001-5247-3713 Modern wireless networks are securely protected with WPA/WPA2. The most frequently used method of securing access to a wireless network is pre-shared passphrase, or, simply put, a text password. The WPA standard enforces the minimum length of 8 characters for all Wi-Fi passwords. Considering the relatively low performance of WPA/WPA2 password attacks, brute force […]

The post Breaking Wi-Fi Passwords appeared first on WJN LLC.

0000-0001-5247-3713 In our recent article iPhone Acquisition Without a Jailbreak I mentioned that agent-based extraction requires the use of an Apple ID that has been registered in Apple’s Developer Program. Participation is not free and comes with a number of limitations. Why do you need to become a “developer”, what are the limitations, and is […]

The post Why Mobile Forensic Specialists Need a Developer Account with Apple appeared first on WJN LLC.