Funding rounds, leadership changes, incidents, new capabilities and announcements across the vendors in this catalog — collected automatically from vendors' own public feeds. Product release versions are on their own page, so the landing feed here never reads as one vendor's changelog.Where this comes fromEvery item links to the vendor's own published source: a GitHub release feed, a changelog, a status page, an SEC filing or a company blog. Nothing here is written or editorially reviewed by 0-Doubt, and nothing is a recommendation — it is machine-collected public record, labelled the same way as all other baseline content on the platform. Coverage is uneven by design: a vendor that publishes no public feed will not appear, and that absence is not a judgement about the vendor.
180 matching stories — announcement, in Digital Forensics — showing up to 3 per vendorPer-vendor capWhile browsing, no single vendor may fill more than three slots on any one page, so a vendor with a chatty release cadence cannot buy the page you are looking at. That means a page can render fewer stories than the count above. Searching a headline or naming a vendor turns the cap off, because then you have asked to see everything that matches.
Justin.sh is reporting on a confidential Cellebrite document that has been leaked to him: Cellebrite calls it Advanced Unlocks (AU from here on), not to be confused with the “advanced unlocking services” they’ve marketed for years. A press release from earlier this year confirms AU is a new product for 2026. […] According to Cellebrite, AU: is a “next-generation AFU vector that is more resilient to Apple’s OS changes” works with Stolen Device Protection
Every vendor in the SOC and IR market wants to own the word “agentic” right now. Almost none of them agree on what it means once the pager actually goes off. Here’s the definition Profero’s practitioners use in casework, and why the difference changes how you investigate. The question we keep getting asked mid-incident Somewhere in the first hour of nearly every AI-related case we open now, someone on the client side asks a version of the same question. Is this an AI inci
Digital forensics answers what leadership, legal, and regulators ask first in a data breach: how the attacker got in, what data was affected, and whether they’re still there. The post How digital forensics reveals the full scope of a data breach appeared first on Magnet Forensics.
In 2025, the average eCrime breakout time, the gap between an attacker’s first foothold and their first move to a second system, fell to 29 minutes. That’s according to CrowdStrike’s 2026 Global Threat Report, and it’s a 65 percent jump in speed over the year before. The fastest breakout the report recorded took 27 seconds. In one intrusion, the attacker was pulling data out four minutes after getting in. If your incident response plan assumes there’s time for an al
Understanding Modern Payment Card Fraud Risks As digital commerce accelerates and payment technology evolves, protecting our financial ecosystem from sophisticated cybercriminals is more challenging than ever. Payment card fraud forensics is at the heart of this defense, providing the expertise and insight required to detect, investigate, and prevent criminal activity targeting credit and debit cards. […] The post Payment card fraud forensics uncovering digital crime trends appeared first
Your incident response plan has a category for ransomware. It has a category for insider threat, for business email compromise, for third-party breach. Somewhere in there is probably a line for “emerging threats” that nobody has updated since the tabletop exercise before last. It does not have a category for what happens when an AI agent, acting on a vague instruction and elevated permissions, deletes a production database, exposes a customer table, or reconfigures a server, with no attacker, no
Understanding Click Fraud and Its Impact on Your Ad Campaigns As digital advertising becomes an essential marketing strategy, protecting our advertising investments is more critical than ever. At Maryman & Associates, we recognize that click fraud investigations are fundamental to safeguarding our clients from invisible yet costly threats. Click fraud, a deceptive activity where fraudulent […] The post Click Fraud Investigations Explained for Advertisers and Brands appeared first on Ma
Around May 2026 Atlas RAT began using a new variant of its command-and-control (C2) protocol. Earlier versions started with a distinctive byte sequence: 53 46 75 63 6b 00 00 00 In ASCII, that is SFuck followed by three null bytes. The newer traffic starts with BFuck, also followed by three null byte[...]
Cybersecurity researchers have disclosed details of a previously unseen variant of the DarkSword iOS exploit kit called P7 DarkSword. "Compared with the variants we usually observe, P7 reduces its on-device footprint, adds on-device keychain and crypto-wallet theft, and adds two way C2 communication with the attacker's infrastructure," iVerify said in a new report published Thursday. The name
Elcomsoft iOS Forensic Toolkit 10.12 adds bootloader-level extraction for the Apple HomePod mini, returning the full file system image and the decrypted keychain. The speaker is built on the S5, the same chip as the Apple Watch Series 5, so the usbliter8 SecureROM exploit applies to it regardless of the installed audioOS version. The device is not booted into its operating system, the data partition is not modified, and repeated extractions return the same image.
Blog Overview: If you are searching how to export Office 365 mailbox to PST, best method to do this depends Read More... The post How to Export Office 365 Mailbox to PST: 3 Methods Explained appeared first on MailXaminer Official Blog.
Understanding the Latest Cyber Threat Landscape Cyber risk findings are more vital than ever as today’s digital ecosystems continue to evolve rapidly. The threats facing organizations are not only increasing in volume, but also sharpening in sophistication. At Maryman & Associates, we constantly monitor the shifting cyber threat landscape to ensure our clients remain a […] The post Cyber risk findings revealed in latest security report appeared first on Maryman - Local Response Global
Press Release 07 October 2026: IntaForensics, one of the UK’s established digital forensics and investigation specialists, is becoming DXR Forensics as part of the newly launched DXR Cyber. The change will bring the IntaForensics name under the DXR Cyber identity while retaining the specialist forensic capability, expertise and services that have been built by the business over many […] The post IntaForensics is becoming DXR Forensics as part of DXR Cyber appeared first on IntaForensics Lt
Learn the five essential phases of a ransomware investigation, from containment and forensics to recovery and reporting. The post How to run a ransomware investigation: five phases from containment to recovery appeared first on Magnet Forensics.
Quick Answer: Criminal investigation starts with one clue that is IP address connected to suspicious online activity. But an IP Read More... The post IP Address Criminal Investigation: How Investigators Trace Cybercrime Evidence appeared first on MailXaminer Official Blog.
404Media is reporting (alternate link) that a cyber-weapons arms manufacturer is exploiting a vulnerability in iOS to bypass its automatic reboot security feature. This is the feature that automatically puts an iPhone into a more secure state if it hasn’t been used for 72 hours. The new technology to get around inactivity reboot was developed by Magnet Forensics, the company behind GrayKey, a popular tool sold to law enforcement agencies that allows them to unlock and access data stored in
Elcomsoft Phone Breaker 11.05 adds support for iCloud backups of iOS 27 and iPadOS 27 devices, including the iPhone 18 lineup, and restores access to iCloud data on accounts where every registered device runs OS version 26 or 27.
Security operations teams are handling increasing volumes of network events and security alerts. Whether those alerts are reviewed by human analysts, processed by AI, or handled through a combination of both, the result depends on the quality of the underlying detections. No SOC can investigate an i[...]
Blog Overview: Tracing email sender’s IP address in Outlook starts with one simple step: Open message’s full Internet headers through Read More... The post How to Trace Email Sender IP Address in Outlook? Step By Step Explained appeared first on MailXaminer Official Blog.
Elcomsoft iOS Forensic Toolkit 10.11 adds bootloader-level extraction for the Apple Watch Series 4 and Series 5 and the second-generation Apple TV 4K. In each case the result is a full file system image and the decrypted keychain. This is the first time the low-level extraction boundary has moved past the A11 generation of Apple silicon.
Identifying malware families is hard. Malware samples are often packed, strings encrypted and configurations may only appear after several stages of execution. Even experienced reverse engineers can get the malware family wrong and commercial sandboxes do not always produce correct classifications.[...]
AI is useful in investigations, but the collection phase is... The post AI in DFIR 101: Why AI isn’t Good for DFIR Collections appeared first on Cyber Triage.
Centric en IT-beveiligingsspecialist NFIR slaan de handen ineen om gemeenten te ondersteunen met dienstverlening op het gebied van cybersecurity. De samenwerking tussen Centric en NFIR richt zich op het leveren van innovatieve diensten om de digitale weerbaarheid van lokale overheden te versterken.
The planning phase of an investigation is where GenAI can... The post AI in DFIR 101: Why You Should Use AI for Planning appeared first on Cyber Triage.
