Why MFA Is No Longer Enough for Enterprise Security
MFA is crucial, but attackers now use session hijacking, SIM swaps, and smishing. Enterprises need continuous trust verification beyond login.
Vendor news
Funding rounds, leadership changes, incidents, new capabilities and announcements across the vendors in this catalog — collected automatically from vendors' own public feeds. Product release versions are on their own page, so the landing feed here never reads as one vendor's changelog.Where this comes fromEvery item links to the vendor's own published source: a GitHub release feed, a changelog, a status page, an SEC filing or a company blog. Nothing here is written or editorially reviewed by 0-Doubt, and nothing is a recommendation — it is machine-collected public record, labelled the same way as all other baseline content on the platform. Coverage is uneven by design: a vendor that publishes no public feed will not appear, and that absence is not a judgement about the vendor.
181 matching stories — announcement, in Digital Forensics — showing up to 3 per vendorPer-vendor capWhile browsing, no single vendor may fill more than three slots on any one page, so a vendor with a chatty release cadence cannot buy the page you are looking at. That means a page can render fewer stories than the count above. Searching a headline or naming a vendor turns the cap off, because then you have asked to see everything that matches.
Why MFA Is No Longer Enough for Enterprise Security
MFA is crucial, but attackers now use session hijacking, SIM swaps, and smishing. Enterprises need continuous trust verification beyond login.
Maximizing IOC Impact
Ive been thinking about threat intelligence lately. Specifically: indicators of compromise (IOC), how and where to share them to cause maximum pain to adversaries and help as many organizations as possible protect themselves. I regularly analyze malware traffic from sandboxes such as ANY.RUN, Triage[...]
AI Didn’t Invent Social Engineering. It Supercharged It.
Generative AI has made targeted social engineering cheap, fast, and convincing. How these identity-based attacks now reach employees on mobile.
We Said Wait. The Wait Is Over.
Update (June 2026): Two corrections since this went out. First, AES-128. We told you to move off it and filed that under the quantum threat. That was wrong. Grover’s algorithm does not halve AES-128 in any practical sense, because it cannot be parallelized without giving the speedup back, and NIST, Germany’s BSI, and Filippo Valsorda all agree AES-128 stays safe against quantum computers. We still prefer AES-256 on new designs, but for classical margin and uniformity, not because of
DFIR+AI Primer: When Not to Use GenAI
When thinking about where to use GenAI in your investigations,... The post DFIR+AI Primer: When Not to Use GenAI appeared first on Cyber Triage.
We Added a Detection Rule. We Were Not Expecting This.
Most users never see the command line Claude Desktop runs under the hood. It’s not hidden; it’s just buried in a process list. But if you look, you’ll find something alarming: /path/to/claude --output-format stream-json --verbose --input-format stream-json --max-thinking-tokens 31999 --effort high --model claude-opus-4-7[1m] --debug-file /path/to/debug.log --permission-prompt-tool stdio --resume <session-id> --allowedTools Task,TaskCreate,TaskUpdate,TaskGet,TaskList,TaskS
DFIR + AI Primer: How to Combat Hallucinations
GenAI outputs require verification because of hallucinations. As you integrate... The post DFIR + AI Primer: How to Combat Hallucinations appeared first on Cyber Triage.
Elcomsoft Phone Breaker 11.1: reliable iCloud backup extraction
Elcomsoft Phone Breaker 11.1 resolves the backup download issues we noted in the EPB 11 point release, delivering complete and dependable extraction of iCloud backups. The update finishes the cloud extraction overhaul introduced in EPB 11.0, restoring stable access to one of the most valuable sources of cloud evidence available to law enforcement and forensic specialists.
The AI Incident Response Framework: When Your Agent Is the Threat
On April 25, 2026, a developer at PocketOS gave a Cursor agent a routine task: fix a credential mismatch in a staging environment. Nine seconds later, the production database was gone. All volume-level backups were gone with it. Railway stores them in the same volume they protect. The most recent recoverable backup was three months old. Rental businesses couldn’t process Saturday morning reservations. The agent had found a Railway CLI token in an unrelated file. It used the token to call R
How to Use EDR Telemetry in DFIR: 3 Investigation Methods Compared
EDR telemetry is one of the fastest and most complete... The post How to Use EDR Telemetry in DFIR: 3 Investigation Methods Compared appeared first on Cyber Triage.
Remcos Alerts from FlowCarp in EveBox
There is a wonderful little web-based alert and event front-end called EveBox, which renders Eve JSON formatted data to a web UI. This blog post demonstrates how EveBox can be used to show alert and flow information that FlowCarp has extracted from a Remcos malware infection. Remcos RAT The starting[...]
ElcomSoft Phone Breaker 11: full overhaul of iCloud extraction
Elcomsoft Phone Breaker 11 introduces a completely overhauled iCloud extraction mechanism to address Apple’s recent, sweeping changes to its authentication and encryption protocols. The new release restores the ability for law enforcement and forensic specialists to lawfully access critical cloud evidence.
Ai in de praktijk voor woningcorporaties
Datum: 4 juni 2026 14:00 Locatie: NFIR Zwolle, Burgemeester Roelenweg 12 Slimmer werken, veiliger wonen en klaar voor morgen. Tijdens dit kosteloze event voor woningcorporaties […]
iOS Forensic Toolkit 10.02 adds agent-based extraction for iOS 26
iOS Forensic Toolkit 10.02 expands agent-based low-level extraction support, bringing compatibility with iOS/iPadOS 26 and 26.0.1.
Voor iedere bestuurder die wil begrijpen hoe verantwoord AI gebruik er in de praktijk uitziet
Centric en IT-beveiligingsspecialist NFIR slaan de handen ineen om gemeenten te ondersteunen met dienstverlening op het gebied van cybersecurity. De samenwerking tussen Centric en NFIR richt zich op het leveren van innovatieve diensten om de digitale weerbaarheid van lokale overheden te versterken.