http://www.secuobs.com Observatoire de la securite Internet fr webmaster@secuobs.com 2010-11-24 18:55:35 - viaForensics viaForensics : Interesting article about the pitfalls Google may have created for themselves in their effort to best Apple To be an effective competitor to iOS and the iPhone phenomenon, Google had to make some important choices around Android s business model Emulating aspects of Microsoft s Windows strategy, Google chose to focus on providing its mobile operating system to http://www.secuobs.com/revue/news/267243.shtmlhttp://www.secuobs.com/revue/news/267243.shtml Secuobs.com : 2010-11-23 18:02:01 - viaForensics viaForensics - IT security becoming a higher priority in many organizations, CompTIA reportsNov 17, 2010 By Tim Wilson,Darkreading Sixty-three percent of US organizations have experienced at least one security incident or breach during the past year, according to a new study released today Almost half of the breached organizations classified the situation as serious meaning there was a financial http://www.secuobs.com/revue/news/266940.shtmlhttp://www.secuobs.com/revue/news/266940.shtml Secuobs.com : 2010-11-19 22:16:59 - viaForensics viaForensics - We are often asked by potential clients of our appSecure service whether they should test their mobile apps if they are using an outside developer Banks and other companies frequently contract third parties to develop their mobile applications, and these developers may assure them security is properly tested in their application But we http://www.secuobs.com/revue/news/266187.shtmlhttp://www.secuobs.com/revue/news/266187.shtml Secuobs.com : 2010-11-19 17:18:30 - viaForensics viaForensics - Wow, ARM must be really killing these guys to bring them all together In an effort to expand software compatibility for its upcoming Fusion chips, Advanced Micro Devices on Monday joined rival Intel s efforts to develop the open-source MeeGo OS AMD will provide engineering expertise intended to help establish the technical foundations for next-generation mobile platforms and http://www.secuobs.com/revue/news/266117.shtmlhttp://www.secuobs.com/revue/news/266117.shtml Secuobs.com : 2010-11-18 17:50:09 - viaForensics viaForensics - As Betanews reports, A Chinese telecommunications firm was able to redirect Internet traffic, including traffic from US governmental and military networks A report delivered to Congress Wednesday says that for a 20-minute period in April, a Chinese state-owned telecommunications firm redirected Internet traffic through its own servers, highlighting concerns over possible sniffing of the data within http://www.secuobs.com/revue/news/265824.shtmlhttp://www.secuobs.com/revue/news/265824.shtml Secuobs.com : 2010-11-17 17:04:17 - viaForensics viaForensics - From the Mobile Telephone Evidence blog Two questions 1 How many evidence handset reader tools can you name off the top of your head 2 And how many of those tools extract and harvest data from iPhones In answer to question one we know we can at least identify thirteen 13 tools and the answer to question two is http://www.secuobs.com/revue/news/265538.shtmlhttp://www.secuobs.com/revue/news/265538.shtml Secuobs.com : 2010-11-16 20:36:01 - viaForensics viaForensics - Security researchers have demonstrated two vulnerabilities that allow attackers to install apps on Android and its vendor-specific implementations without a user s permission During normal installation, users are at least asked to confirm whether an application is to have certain access rights Bypassing this confirmation request reportedly allows spyware or even diallers to be installed on http://www.secuobs.com/revue/news/265275.shtmlhttp://www.secuobs.com/revue/news/265275.shtml Secuobs.com : 2010-11-15 18:45:26 - viaForensics viaForensics - FOR IMMEDIATE RELEASE Contact Andrew Hoog Chief Investigative Officer viaForensics Phone 1 312-878-1100 http viaforensicscom contact-us Updated iPhone Forensics white paper released viaForensics has released an updated version of its groundbreaking iPhone Forensics white paper Chicago, November 15, 2010 viaForensics has released an updated version of its free white paper on iPhone Forensics The paper reviews specific software and techniques that analysts and investigators http://www.secuobs.com/revue/news/264942.shtmlhttp://www.secuobs.com/revue/news/264942.shtml Secuobs.com : 2010-11-13 00:08:42 - viaForensics viaForensics - FOR IMMEDIATE RELEASE Contact Andrew Hoog Chief Investigative Officer viaForensics Phone 1 312-878-1100 http viaforensicscom contact-us viaForensics discusses mobile financial app security Andrew Hoog of viaForensics appeared on the WGN Evening News to discuss recent the discoveries of security flaws within mobile apps provided by major financial institutions Chicago, November 5, 2010 After the Wall Street Journal reported on the financial mobile app security http://www.secuobs.com/revue/news/264552.shtmlhttp://www.secuobs.com/revue/news/264552.shtml Secuobs.com : 2010-11-10 06:42:13 - viaForensics viaForensics - Experts from viaForensics will be presenting topics relating to mobile forensics at the upcoming DC3 Conference in Atlanta, GA, this January 26th The presentations will cover Advanced SQLite Forensics and Advancements in Android Forensics, giving attendees an inside look into the latest forensic research performed by viaForensics Prior to the presentations, viaForensics will hold mobile forensic training http://www.secuobs.com/revue/news/263753.shtmlhttp://www.secuobs.com/revue/news/263753.shtml Secuobs.com : 2010-11-09 16:38:38 - viaForensics viaForensics - Andrew Hoog, Chief Investigative Officer for viaForensics said in an email I doubt the outages are related to changes prompted by our findings However, our belief is that mobile apps will become the primary way customers choose to interact with not only financial institutions but with any other service which offers access form a smart phone http://www.secuobs.com/revue/news/263534.shtmlhttp://www.secuobs.com/revue/news/263534.shtml Secuobs.com : 2010-11-08 17:35:05 - viaForensics viaForensics - In an interview with Threatpost on Thursday, ViaForensics co-founder Andrew Hoog said that his firm was doing the research as a public service appWatchdog The analysis focused on two main areas secure storage of data on the devices and secure storage of transmission of user authentication data like user names and passwords Hoog said that the http://www.secuobs.com/revue/news/263235.shtmlhttp://www.secuobs.com/revue/news/263235.shtml Secuobs.com : 2010-11-05 19:03:07 - viaForensics viaForensics - Employee data theft is a real threat Companies need to take a proactive approach at data theft prevention IT managers spend a lot of their time dealing with malicious code and violations of corporate policy, but insider fraud in the workplace is a major problem that frequently shows up on their radar screen, as well In 2009, http://www.secuobs.com/revue/news/262759.shtmlhttp://www.secuobs.com/revue/news/262759.shtml Secuobs.com : 2010-11-05 02:46:52 - viaForensics viaForensics - A security firm disclosed holes today in mobile apps from Bank of America, USAA, Chase, Wells Fargo and TD Ameritrade, prompting a scramble by most of the companies to update the apps Since Monday 11 01 2010 , we have been communicating and coordinating with the financial institutions to eliminate the flaws, research firm viaForensics wrote in a post http://www.secuobs.com/revue/news/262604.shtmlhttp://www.secuobs.com/revue/news/262604.shtml Secuobs.com : 2010-11-05 00:43:33 - viaForensics viaForensics - function jscriteriapop which var url resources appwatchdog_criteriahtml _which var newwin windowopen url, criteriapop , status 0,toolbar 0,height 400,width 400 newwinmoveTo 50,50 return false appWatchdog is a powerful and free service which tests publicly available mobile applications for insecure transmission or storage of sensitive user data Evaluations for this application are listed below with the most recent first FINDINGS App Wells Fargo, version 11, Platform Android, http://www.secuobs.com/revue/news/262581.shtmlhttp://www.secuobs.com/revue/news/262581.shtml Secuobs.com : 2010-11-05 00:43:33 - viaForensics viaForensics - function jscriteriapop which var url resources appwatchdog_criteriahtml _which var newwin windowopen url, criteriapop , status 0,toolbar 0,height 400,width 400 newwinmoveTo 50,50 return false appWatchdog is a powerful and free service which tests publicly available mobile applications for insecure transmission or storage of sensitive user data Evaluations for this application are listed below with the most recent first FINDINGS App TD Ameritrade, version 019, Platform Android, http://www.secuobs.com/revue/news/262580.shtmlhttp://www.secuobs.com/revue/news/262580.shtml Secuobs.com : 2010-11-05 00:43:33 - viaForensics viaForensics - function jscriteriapop which var url resources appwatchdog_criteriahtml _which var newwin windowopen url, criteriapop , status 0,toolbar 0,height 400,width 400 newwinmoveTo 50,50 return false appWatchdog is a powerful and free service which tests publicly available mobile applications for insecure transmission or storage of sensitive user data Evaluations for this application are listed below with the most recent first FINDINGS App TD Ameritrade, version 18, Platform iPhone http://www.secuobs.com/revue/news/262579.shtmlhttp://www.secuobs.com/revue/news/262579.shtml Secuobs.com : 2010-11-05 00:43:33 - viaForensics viaForensics - function jscriteriapop which var url resources appwatchdog_criteriahtml _which var newwin windowopen url, criteriapop , status 0,toolbar 0,height 400,width 400 newwinmoveTo 50,50 return false appWatchdog is a powerful and free service which tests publicly available mobile applications for insecure transmission or storage of sensitive user data Evaluations for this application are listed below with the most recent first FINDINGS App Chase, version 11, Platform iPhone 3G http://www.secuobs.com/revue/news/262578.shtmlhttp://www.secuobs.com/revue/news/262578.shtml Secuobs.com : 2010-11-05 00:43:33 - viaForensics viaForensics - function jscriteriapop which var url resources appwatchdog_criteriahtml _which var newwin windowopen url, criteriapop , status 0,toolbar 0,height 400,width 400 newwinmoveTo 50,50 return false appWatchdog is a powerful and free service which tests publicly available mobile applications for insecure transmission or storage of sensitive user data Evaluations for this application are listed below with the most recent first FINDINGS App Bank of America, version 20, http://www.secuobs.com/revue/news/262577.shtmlhttp://www.secuobs.com/revue/news/262577.shtml Secuobs.com : 2010-11-05 00:43:33 - viaForensics viaForensics - function jscriteriapop which var url resources appwatchdog_criteriahtml _which var newwin windowopen url, criteriapop , status 0,toolbar 0,height 400,width 400 newwinmoveTo 50,50 return false appWatchdog is a powerful and free service which tests publicly available mobile applications for insecure transmission or storage of sensitive user data Evaluations for this application are listed below with the most recent first FINDINGS App Bank of America, version 212, http://www.secuobs.com/revue/news/262576.shtmlhttp://www.secuobs.com/revue/news/262576.shtml Secuobs.com : 2010-11-05 00:43:33 - viaForensics viaForensics - function jscriteriapop which var url resources appwatchdog_criteriahtml _which var newwin windowopen url, criteriapop , status 0,toolbar 0,height 400,width 400 newwinmoveTo 50,50 return false appWatchdog is a powerful and free service which tests publicly available mobile applications for insecure transmission or storage of sensitive user data Evaluations for this application are listed below with the most recent first FINDINGS App USAA, version 30, Platform Android, http://www.secuobs.com/revue/news/262575.shtmlhttp://www.secuobs.com/revue/news/262575.shtml Secuobs.com : 2010-11-05 00:43:33 - viaForensics viaForensics - function jscriteriapop which var url resources appwatchdog_criteriahtml _which var newwin windowopen url, criteriapop , status 0,toolbar 0,height 400,width 400 newwinmoveTo 50,50 return false appWatchdog is a powerful and free service which tests publicly available mobile applications for insecure transmission or storage of sensitive user data Evaluations for this application are listed below with the most recent first FINDINGS App USAA, version 32, Platform iPhone 3G http://www.secuobs.com/revue/news/262574.shtmlhttp://www.secuobs.com/revue/news/262574.shtml Secuobs.com : 2010-11-05 00:43:33 - viaForensics viaForensics - viaForensics has just released our updated appWatchdog findings for mobile financial applications on both Google Android and Apple iPhone devices The findings cover smart phone applications from Bank Of America, Chase, TD Ameritrade, USAA, Wells Fargo and Vanguard Additional details can be found in Spencer Ante s Wall Street Journal article Banks Rush to Fix Security http://www.secuobs.com/revue/news/262573.shtmlhttp://www.secuobs.com/revue/news/262573.shtml Secuobs.com : 2010-11-05 00:43:33 - viaForensics viaForensics - A number of top financial companies and banks such as Wells Fargo Co, Bank of America Corp and USAA are rushing out updates to fix security flaws in wireless banking applications that could allow a computer criminal to obtain sensitive data like usernames, passwords and financial information The central problem is that the apps, which http://www.secuobs.com/revue/news/262572.shtmlhttp://www.secuobs.com/revue/news/262572.shtml Secuobs.com : 2010-11-04 23:07:15 - viaForensics viaForensics - An audit by Chicago firm ViaForensics discovered serious security holes in the PayPal mobile payment application for Apple s iPhone Flaws that could allow attackers to set up a phony PayPal phishing site and snoop user credentials was the most critical, but the application also fell short in protecting user login and potentially sensitive application data, http://www.secuobs.com/revue/news/262547.shtmlhttp://www.secuobs.com/revue/news/262547.shtml Secuobs.com : 2010-11-04 18:10:32 - viaForensics viaForensics - Mr Hoog s comment on this blog post Hmmm, think any of the 500M users will leverage a FB file drop for IP theft Time to update those web analysis routines Facebook has purchased most of dropio, an online content-sharing service, but the social-networking giant sounds more interested in acquiring the company s developers than its technology http://www.secuobs.com/revue/news/262460.shtmlhttp://www.secuobs.com/revue/news/262460.shtml Secuobs.com : 2010-11-04 06:05:33 - viaForensics viaForensics - FOR IMMEDIATE RELEASE Contact Andrew Hoog Chief Investigative Officer viaForensics Phone 1 312-878-1100 http viaforensicscom contact-us viaForensics uncovers PayPal application vulnerability An article released by the Wall Street Journal covers a significant vulnerability in an iPhone application uncovered by viaForensics Chicago, November 3, 2010 The Wall Street Journal has published an article covering a significant vulnerability viaForensics discovered in the latest PayPal application http://www.secuobs.com/revue/news/262326.shtmlhttp://www.secuobs.com/revue/news/262326.shtml Secuobs.com : 2010-11-04 01:16:16 - viaForensics viaForensics - The Wall Street Journal has published an article covering a significant vulnerability viaForensics discovered in the latest PayPal application for the iPhone The article can be read at http onlinewsjcom article SB10001424052748703506904575592782874885808html The findings are part of our new appWatchdog service, a powerful and free service which tests publicly available mobile applications for insecure transmission or storage of sensitive user http://www.secuobs.com/revue/news/262274.shtmlhttp://www.secuobs.com/revue/news/262274.shtml Secuobs.com : 2010-11-03 21:33:56 - viaForensics viaForensics - appWatchdog is a powerful and free service which tests publicly available mobile applications for insecure transmission or storage of sensitive user data Evaluations for this application are listed below with the most recent first For any questions or suggestions please contact us Findings App PayPal Eval date 2010-11-03 Version not listed Platform iPhone http://www.secuobs.com/revue/news/262219.shtmlhttp://www.secuobs.com/revue/news/262219.shtml Secuobs.com : 2010-11-03 21:33:56 - viaForensics viaForensics - appWatchdog is a powerful and free service which tests publicly available mobile applications for insecure transmission or storage of sensitive user data Please visit our appWatchdog Methodology page for a more technical explanation of our service Through the course of many investigations, we encountered a surprising and increasing amount of highly sensitive financial and identity http://www.secuobs.com/revue/news/262218.shtmlhttp://www.secuobs.com/revue/news/262218.shtml Secuobs.com : 2010-11-03 21:33:56 - viaForensics viaForensics - appWatchdog is a powerful and free service which tests publicly available mobile applications for insecure transmission or storage of sensitive user data Evaluations for this application are listed below with the most recent first For any questions or suggestions please contact us Findings App PayPal Eval date 2010-11-03 Version not listed Platform Android http://www.secuobs.com/revue/news/262217.shtmlhttp://www.secuobs.com/revue/news/262217.shtml Secuobs.com : 2010-11-03 18:06:44 - viaForensics viaForensics - NAND key to smart phone storage is here to stay According to a Reuters report that was based on a Japanese news agency story, Intel, Toshiba and Samsung have entered into a joint development agreement to reduce the size of NAND flash memory circuitry from the 20 nanometer nm sizes only recently adopted for http://www.secuobs.com/revue/news/262149.shtmlhttp://www.secuobs.com/revue/news/262149.shtml Secuobs.com : 2010-11-02 17:33:54 - viaForensics viaForensics - This whole article is worth a read It gives some good insight on how the Qakbot Trojan works Qakbot has been causing problems for a while and seems to be targeting US Financial institutions RSA Security researchers have been studying Qakbot and recently put out a RSA Online Fraud Report on the matter Fast-spreading attack spreads http://www.secuobs.com/revue/news/261839.shtmlhttp://www.secuobs.com/revue/news/261839.shtml Secuobs.com : 2010-10-29 17:04:17 - viaForensics viaForensics - FOR IMMEDIATE RELEASE Contact Andrew Hoog Chief Investigative Officer viaForensics Phone 1 312-878-1100 http viaforensicscom contact-us Growing use of mobile forensics discussed on nightly news viaForensics CIO, Andrew Hoog, was interviewed by WGN, along with Detective Josh Fazio, regarding the use of mobile forensics in criminal investigations The cover story, which aired during the WGN newscast at 9 pm CT Thursday, Oct 28th, http://www.secuobs.com/revue/news/260975.shtmlhttp://www.secuobs.com/revue/news/260975.shtml Secuobs.com : 2010-10-29 02:28:34 - viaForensics viaForensics - For some time now, I and others have had problems running The Sleuth Kit TSK on Windows Server 2003 in particular, I could not get fls to run Here s a post I made to the sleuth-kit list from January 2010 with some follow up discussions http oldnabblecom problems-running-sleuthkit-on-Windows-Server-2003-x64-td27189560html If you try to run it from the win-32 distribution on SF, http://www.secuobs.com/revue/news/260833.shtmlhttp://www.secuobs.com/revue/news/260833.shtml Secuobs.com : 2010-10-28 22:52:51 - viaForensics viaForensics - Nokia ignores calls to ditch MeeGo in favor of an Android or Windows platform Never underestimate how difficult it is to swallow one s pride If the mobile market were a hospital, Nokia would be in the ICU right now, a stubborn patient insisting for too long that leeches were the best cure for its ailments http://www.secuobs.com/revue/news/260760.shtmlhttp://www.secuobs.com/revue/news/260760.shtml Secuobs.com : 2010-10-28 22:52:51 - viaForensics viaForensics - Another example of the potential security threats faced by iPhone users The presenter, Eric Monti, hoped that his presentation would serve as a wake-up call to users with a false sense of security about their devices The success of a group of hackers in compromising the security of Apple s iPhone may set the stage for more http://www.secuobs.com/revue/news/260759.shtmlhttp://www.secuobs.com/revue/news/260759.shtml Secuobs.com : 2010-10-28 19:12:45 - viaForensics viaForensics - Tune in tonight to see viaForensics CIO, Andrew Hoog, on the WGN news Hoog was interviewed by WGN, along with Detective Josh Fazio, regarding the use of mobile forensic in criminal investigations The clip will air as a cover story during the WGN newscast at 9 pm CT today, Thursday, Oct 28th The clip http://www.secuobs.com/revue/news/260696.shtmlhttp://www.secuobs.com/revue/news/260696.shtml Secuobs.com : 2010-10-27 22:13:58 - viaForensics viaForensics - Steve Jobs take on the Android v Apple open platform debate Jobs moved on to attack Google s characterization of Android as a more open platform than Apple s as a disingenuous attempt to obfuscate the reality of how Android differs from the iOS Google loves to characterize Android as open and iOS and iPhone as closed We find http://www.secuobs.com/revue/news/260408.shtmlhttp://www.secuobs.com/revue/news/260408.shtml Secuobs.com : 2010-10-27 15:04:16 - viaForensics viaForensics - While in college my degree computer science focused on programming but for much of my career I was more interested in infrastructure projects Sure, I did a lot of programming especially early on but really enjoyed working on Cisco, SNMP, Linux, monitoring, etc Part of what I loved was not having to re-create everything from http://www.secuobs.com/revue/news/260274.shtmlhttp://www.secuobs.com/revue/news/260274.shtml Secuobs.com : 2010-10-26 19:35:16 - viaForensics viaForensics - A post on Slashdot reads I work in a small office with just two computers Both machines run long-term-service releases of Ubuntu, with Gnome, and Evolution for scheduling, contact management and electronic mail We plan to stick with Linux long-term For telephone service, we re using smartphones In order to keep everything straight, we need phones that http://www.secuobs.com/revue/news/260017.shtmlhttp://www.secuobs.com/revue/news/260017.shtml Secuobs.com : 2010-10-26 01:56:18 - viaForensics viaForensics - Received a few emails recently and have meant to post them to the blog Jonathan Zdziarski continues to refine and expand his iPhone Forensics techniques the latest couple running on Linux which make this Linux geek quite happy Jonathan is putting on an Advanced iPhone Training in McClellan, CA in a few weeks 11 30 12 1 http://www.secuobs.com/revue/news/259816.shtmlhttp://www.secuobs.com/revue/news/259816.shtml Secuobs.com : 2010-10-25 19:36:09 - viaForensics viaForensics - Cybercrime isn t just for big business Small and mid-sized businesses need to be aware of the potential dangers and should be doing more to protect themselves against fraud and security breaches Cybercriminals are targeting the financial accounts of small and midsize businesses SMBs, fraudulently transferring money directly from their accounts, the FBI warned yesterday In a fraud http://www.secuobs.com/revue/news/259727.shtmlhttp://www.secuobs.com/revue/news/259727.shtml Secuobs.com : 2010-10-22 21:11:51 - viaForensics viaForensics - Research in Motion s BlackBerry may soon lose its lock on the enterprise market, as companies look to add support for more consumer friendly smartphones like Android and iPhone devices and the BlackBerry s vaunted security features become less unique RIM has built its business on providing mobile e-mail and messaging services to corporate users Thousands of companies use BlackBerry http://www.secuobs.com/revue/news/259297.shtmlhttp://www.secuobs.com/revue/news/259297.shtml Secuobs.com : 2010-10-21 20:03:17 - viaForensics viaForensics - This article points to the need for companies to collect network data Companies can use tools such as liveForensics to collect data which could be used to detect inside threats Yet there are lessons companies can learn from the focus of the projects and the goals of the Department of Defense, the experts say First, http://www.secuobs.com/revue/news/258992.shtmlhttp://www.secuobs.com/revue/news/258992.shtml Secuobs.com : 2010-10-20 19:44:30 - viaForensics viaForensics - As apps become more and more abundant, security concerns are also on the rise How do you know what data is being accessed by an application And is that data being shared Researchers from Intel Labs, Duke University, and Pennsylvania State University have created a tool that analyzes how Android apps handle the data they access http://www.secuobs.com/revue/news/258646.shtmlhttp://www.secuobs.com/revue/news/258646.shtml Secuobs.com : 2010-10-20 00:45:04 - viaForensics viaForensics - The below article points out the increasing need to monitor and audit servers The unique thing about our liveForensics is that it focuses on what actually occurred in the server forensically , making liveForensics a critical, targeted and highly effective new defense The threat, which was discovered by researchers at Stonesoft s Helsinki labs, is based on http://www.secuobs.com/revue/news/258372.shtmlhttp://www.secuobs.com/revue/news/258372.shtml Secuobs.com : 2010-10-19 17:46:42 - viaForensics viaForensics - Android use is growing exponentially, with nearly 200,000 devices activated daily and more than 12 million Android phones in use around the world Android core applications allow us to do things like send text messages, download and send media, take photos and videos, and much more But what happens when something we need http://www.secuobs.com/revue/news/258246.shtmlhttp://www.secuobs.com/revue/news/258246.shtml Secuobs.com : 2010-10-18 23:22:11 - viaForensics viaForensics - The latest Kroll Annual Global Fraud Report shows that electronic data theft has surpassed physical theft for the first time Theft of confidential information is on the rise because data is increasingly portable and perpetrators often departing or disgruntled employees can remove it with ease absent sufficient controls At the same time, there http://www.secuobs.com/revue/news/257997.shtmlhttp://www.secuobs.com/revue/news/257997.shtml Secuobs.com : 2010-10-15 20:24:04 - viaForensics viaForensics - While cybercrime fighters have been focused on the Zues Trojan as of late, criminals are trying out a new attack trojan called Bugat Bugat is similar in functionality to its better known financial malware brethren Zeus, Clampi and Gozi It targets Internet Explorer and Firefox browsers and harvests information during online banking sessions The stolen financial http://www.secuobs.com/revue/news/257408.shtmlhttp://www.secuobs.com/revue/news/257408.shtml Secuobs.com : 2010-10-14 22:26:01 - viaForensics viaForensics - Courts are seeing more electronic data, including Facebook and Twitter messages, introduced as evidence KNOXVILLE, Tenn WVLT The digital age has revolutionized the way we communicate Social sites like Facebook, Twitter, and texting also dramatically increasing the number of ways you can get busted for wrongdoing It s becoming much more prevalent We re seeing it more and http://www.secuobs.com/revue/news/257076.shtmlhttp://www.secuobs.com/revue/news/257076.shtml Secuobs.com : 2010-10-14 19:14:05 - viaForensics viaForensics - Apple s iPhone Used for Evidence October 12, 2010 The iPhone is becoming more and more popular with consumers The amount of personalized information it stores can be valuable when a Trial Lawyer needs more evidence to build a case Here is how the iPhone is shaping the world of forensics Why the iPhone Is An Important Forensics Tool Trial http://www.secuobs.com/revue/news/257024.shtmlhttp://www.secuobs.com/revue/news/257024.shtml Secuobs.com : 2010-10-13 19:34:49 - viaForensics viaForensics - A new email encryption technique will be presented at the Hacker Halted Conference today in Miami This technique addresses some of the concerns of smartphone users who tend to desire ease and speed over security Email encryption techniques, such as PGP, TLS and SSL, have limited effectiveness in securing email messages as they travel from point http://www.secuobs.com/revue/news/256624.shtmlhttp://www.secuobs.com/revue/news/256624.shtml Secuobs.com : 2010-10-12 22:00:00 - viaForensics viaForensics - Customers have learned to be wary of computer attacks that could compromise their security, but they still aren t used to worrying about attacks to their mobile devices Some banks are starting to offer additional security More can be done on both the company and the user end Recent attacks that use the increasingly popular Zeus Trojan http://www.secuobs.com/revue/news/256330.shtmlhttp://www.secuobs.com/revue/news/256330.shtml Secuobs.com : 2010-10-12 05:29:51 - viaForensics viaForensics - Corporate data are an asset that, unfortunately, many people are willing exploit for financial or ideological aims October 6, 2010, 07 30 PM IDG News Service An Akamai Technologies staffer was arrested Wednesday and charged with wire fraud after he provided confidential business information to an undercover federal agent that he believed to be http://www.secuobs.com/revue/news/256059.shtmlhttp://www.secuobs.com/revue/news/256059.shtml Secuobs.com : 2010-10-08 18:37:45 - viaForensics viaForensics - viaForensics groundbreaking white paper on iPhone Forensics was cited recently by presenter, Nicolas Seriot, at the recent Black Hat 2010 Technical Security Conference Read the presentation here http seriotch resources talks_papers iPhonePrivacypdf http://www.secuobs.com/revue/news/255381.shtmlhttp://www.secuobs.com/revue/news/255381.shtml Secuobs.com : 2010-10-07 19:07:18 - viaForensics viaForensics - Changes and confusion over court rulings and requirements underscore the need for experienced forensics examiners those that have previously worked with law enforcement and attorneys in civil or criminal proceedings The original ruling required the government to cull specific data described in the search warrant, rather than copy entire hard drives When that s not possible, http://www.secuobs.com/revue/news/255104.shtmlhttp://www.secuobs.com/revue/news/255104.shtml Secuobs.com : 2010-10-06 20:12:20 - viaForensics viaForensics - FOR IMMEDIATE RELEASE Contact Andrew Hoog Chief Investigative Officer viaForensics Phone 1 312-283-0551 http viaforensicscom contact-us iPhone and Android Forensics Training in Chicago viaForensics is offering iPhone and Android Forensics training sessions in Chicago October 11th and 12th Chicago, October 6, 2010 viaForensics is offering cutting-edge mobile forensics training for both Android and iPhone in the same week Attendees will learn about the forensic http://www.secuobs.com/revue/news/254792.shtmlhttp://www.secuobs.com/revue/news/254792.shtml Secuobs.com : 2010-10-05 18:56:52 - viaForensics viaForensics - Major financial institution have been affected by the Zeus Trojan, including JP Morgan Chase Co, PNC Financial Services Group Inc and Bank of America Corp The prosecutors alleged a scheme in which hackers used malicious computer software known as Zeus Trojan, disguised in seemingly benign email When the email recipient clicks on a link or http://www.secuobs.com/revue/news/254438.shtmlhttp://www.secuobs.com/revue/news/254438.shtml Secuobs.com : 2010-10-04 18:24:03 - viaForensics viaForensics - viaForensics leverages NexentaStor to manage ever-increasing amounts of data, host virtual machines to extract evidence, and back up large disk image files Read about it in this case study newsletter-sept2010-customerspotlight-viaforensicspdf application pdf Object http://www.secuobs.com/revue/news/254079.shtmlhttp://www.secuobs.com/revue/news/254079.shtml Secuobs.com : 2010-10-01 21:18:49 - viaForensics viaForensics - A burgeoning field of forensic study deals with iPhones specifically because of their popularity, the demographics of those who own them and what the phone s technology records during its use Law-enforcement experts said iPhone technology records a wealth of information that can be tapped more easily than BlackBerry and Droid devices to help police learn where http://www.secuobs.com/revue/news/253607.shtmlhttp://www.secuobs.com/revue/news/253607.shtml Secuobs.com : 2010-09-30 19:56:26 - viaForensics viaForensics - Social networking is a major vector for malicious software For about six hours on Tuesday, a small snippet of JavaScript code ran rampant among Twitter users The code used a particular class of flaw to execute simple commands, including changing the color of the interface and posting itself to the users followers Victims only had to http://www.secuobs.com/revue/news/253205.shtmlhttp://www.secuobs.com/revue/news/253205.shtml Secuobs.com : 2010-09-29 20:18:14 - viaForensics viaForensics - After announcing HP s acquisition of ArcSight, representatives of the two companies discussed the need for a new approach to IT security Security visibility is a key element in HP s new approach, executive vice president for HP's Software and Solutions, Enterprise Business unit Bill Veghte said You can t secure it if you can t see it, he said http://www.secuobs.com/revue/news/252848.shtmlhttp://www.secuobs.com/revue/news/252848.shtml Secuobs.com : 2010-09-28 20:03:25 - viaForensics viaForensics - This article is worth a read Among the unsettling results in the final report, released today, from the Social Engineering Capture The Flag contest held in August at Defcon Security companies were just as susceptible to social engineering as nontechnology firms, Internet Explorer 6 was still in use at 65 percent of the Fortune 500 companies http://www.secuobs.com/revue/news/252514.shtmlhttp://www.secuobs.com/revue/news/252514.shtml Secuobs.com : 2010-09-28 00:30:02 - viaForensics viaForensics - Electronic discovery requires litigants to scour disparate data storage mediums and formats for potentially relevant documents That undertaking involves dueling considerations thoroughness and cost This quote comes from the preamble of a recent court case dealing with e-discovery Read more about the case in the following article e-discovery 20 Blog Archive Electronic Discovery, EDiscovery, E-Discovery, http://www.secuobs.com/revue/news/252198.shtmlhttp://www.secuobs.com/revue/news/252198.shtml Secuobs.com : 2010-09-23 21:52:44 - viaForensics viaForensics - HTC releases two smartphones with new features HTC on Wednesday confirmed two new Android smartphones, the HTC Desire HD and HTC Desire Z, that include what the vendor is calling an enhanced version of its HTC Sense user interface that includes everything from video editing software to a mapping tool The HTC Sense s new features include the http://www.secuobs.com/revue/news/251172.shtmlhttp://www.secuobs.com/revue/news/251172.shtml Secuobs.com : 2010-09-22 21:38:34 - viaForensics viaForensics - Dell reacts to complaints in the development community and complies with GPL Dell has released the custom Android ROM built for the recently released Dell Streak, a mini tablet smartphone hybrid Currently, the Streak runs on a modified build of Android 16, something critics were quick to fault on the device Recently, the development community accused Dell of http://www.secuobs.com/revue/news/250767.shtmlhttp://www.secuobs.com/revue/news/250767.shtml Secuobs.com : 2010-09-21 20:48:03 - viaForensics viaForensics - A good reminder about security precautions every company should take Contact viaForensics to find out how we can help, specifically with filtering and monitoring tools A new wave of mass SQL injection attacks seen in mid-August to hit over half a million websites, including parts of Apple s site serves as a weighty reminder of the growing http://www.secuobs.com/revue/news/250374.shtmlhttp://www.secuobs.com/revue/news/250374.shtml Secuobs.com : 2010-09-20 20:35:52 - viaForensics viaForensics - oops AON Consulting, the state of Delaware s benefits consultant, mistakenly posted the Social Security numbers, gender, and birth dates of about 22,000 retired state workers on the Web two weeks ago, state officials and the company said yesterday via Delaware Contractor Mistakenly Posts Personal Data Of 22,000 Employees identity theft Security DarkReading Proactive tools, such as our http://www.secuobs.com/revue/news/249932.shtmlhttp://www.secuobs.com/revue/news/249932.shtml Secuobs.com : 2010-09-17 20:37:54 - viaForensics viaForensics - Employees openly admit they would take company data, including customer data and product plans, when leaving a job, according to Harris Interactive The online survey probed 1,594 full- and part-time employees and contractors in the United States and Great Britain about their attitudes toward accessing and viewing of company-owned data In response to the survey 49pourcents http://www.secuobs.com/revue/news/249067.shtmlhttp://www.secuobs.com/revue/news/249067.shtml Secuobs.com : 2010-09-17 02:13:30 - viaForensics viaForensics - RIM is often thought of as the most secure smartphone this news may change that thinking With other platforms, SSL between the devices and destination servers provides more security RIM faces an August 31 deadline to give authorities the means to read email and instant messages sent over the BlackBerry New Delhi says it http://www.secuobs.com/revue/news/248107.shtmlhttp://www.secuobs.com/revue/news/248107.shtml Secuobs.com : 2010-09-17 02:13:30 - viaForensics viaForensics - HP is announcing that it is acquiring Fortify, a software security company Terms of the deal were not disclosed Fortify s Software Security Assurance products and services protect companies from security threats in busines software applications The company s software evaluates and test software code for security flaws while programs are actually being developed Fortify has previously collaborated http://www.secuobs.com/revue/news/248106.shtmlhttp://www.secuobs.com/revue/news/248106.shtml Secuobs.com : 2010-09-17 02:13:30 - viaForensics viaForensics - Latest gossip on the Chrome OS device While we re still likely a few months away from seeing the first Chrome OS devices, work continues to move forward on getting the OS ready to go And some recent discussions on the Chromium OS the open source version that Chrome OS will be based on Google Code page http://www.secuobs.com/revue/news/248105.shtmlhttp://www.secuobs.com/revue/news/248105.shtml Secuobs.com : 2010-09-17 02:13:30 - viaForensics viaForensics - Cerulean Dragon writes This excerpt sums up Dave Pell s article at NPR pretty well Google s Eric Schmidt recently stated that every two days we create as much information as we did from the beginning of civilization through 2003 Perhaps the sheer bulk of data makes it easier to suppress that information which we find overly http://www.secuobs.com/revue/news/248104.shtmlhttp://www.secuobs.com/revue/news/248104.shtml Secuobs.com : 2010-09-17 02:13:30 - viaForensics viaForensics - Danny Lieberman explains why it is so difficult to prevent data breaches To summarize, he says Defenses don t improve your understanding of threats Security products firewall, IDS IPS, malware filters lag behind new threats, because they are reactive and have a much longer cycle than malware development Threats keep evolving quickly Assuming you knew why a data breach will http://www.secuobs.com/revue/news/248103.shtmlhttp://www.secuobs.com/revue/news/248103.shtml Secuobs.com : 2010-09-17 02:13:30 - viaForensics viaForensics - I ll admit that I ve been having a lot of fun with the VxWorks vulnerabilities lately, but it s important to step back and look at our networks to see what other devices could be sitting there waiting to be the next harbingers of doom via Embedded Systems Can Mean Embedded Vulnerabilities Evil Bytes Blog Dark http://www.secuobs.com/revue/news/248102.shtmlhttp://www.secuobs.com/revue/news/248102.shtml Secuobs.com : 2010-09-17 02:13:30 - viaForensics viaForensics - At some point, people are going to realize their every click, even within an app, is being monitored and they will not be happy Nokia this morning announced that it is acquiring Motally, a privately-held San Francisco company specialized in mobile analytics Terms of the deal were not disclosed, but it s likely not a large transaction http://www.secuobs.com/revue/news/248101.shtmlhttp://www.secuobs.com/revue/news/248101.shtml Secuobs.com : 2010-09-17 02:13:30 - viaForensics viaForensics - Remember when Google killed the Nexus One a month ago Yeah, it s still sold in a few places here and there, but it s mostly dead And apparently it had to die in order to find its heaven Android app developers A new post tonight on the Android Developers Blog declares that the now-for-developers-only Nexus One has http://www.secuobs.com/revue/news/248100.shtmlhttp://www.secuobs.com/revue/news/248100.shtml Secuobs.com : 2010-09-17 02:13:30 - viaForensics viaForensics - Intel s purchase of McAfee is a step towards shifting the thinking on security models Previously, security was handled by third-party vendors essentially pitting them against the companies whose products they were securing Intel s investment in McAfee shows that they may be shifting the emphasis to approach security from the front-end Intel s plan is to recognize http://www.secuobs.com/revue/news/248099.shtmlhttp://www.secuobs.com/revue/news/248099.shtml Secuobs.com : 2010-09-17 02:13:30 - viaForensics viaForensics - Today, nearly every office worker carries a mobile phone into work Much of the time, the devices are more advanced smartphones, such as Android-based phones, Blackberry devices, or Apple s iPhone The employees almost never consider the security implications of bringing connected devices behind a company s firewall Yet the trend has not escaped the notice of chief http://www.secuobs.com/revue/news/248098.shtmlhttp://www.secuobs.com/revue/news/248098.shtml Secuobs.com : 2010-07-30 20:10:08 - viaForensics viaForensics - Microsoft s latest attempt to compete with Android and iPhone Microsoft will release a new mobile OS for enterprise handheld devices later this year, the company said Thursday The Windows Embedded Handheld OS will come out later this year and be based on the Windows Mobile 65 technology, said David Kelley, product unit manager for Windows Embedded http://www.secuobs.com/revue/news/245462.shtmlhttp://www.secuobs.com/revue/news/245462.shtml Secuobs.com : 2010-07-28 20:18:47 - viaForensics viaForensics - New Linux command line tool that interfaces with Google services GoogleCL is a command-line utility that provides access to various Google services It streamlines tasks such as posting to a Blogger blog, adding events to Calendar, or editing documents on Google Docs via Introducing the Google Command Line Tool Google Open Source Blog http://www.secuobs.com/revue/news/244728.shtmlhttp://www.secuobs.com/revue/news/244728.shtml Secuobs.com : 2010-07-28 05:18:08 - viaForensics viaForensics - This sounds like some kind of double agent thing These vulnerabilities would allow security researchers to hack the web hackers, says Mr Oudot While some cyber criminals handcraft their own attack tools, many others take advantage of the so-called malware kits that are widely available online These programs bundle into one convenient package everything the budding cyber http://www.secuobs.com/revue/news/244486.shtmlhttp://www.secuobs.com/revue/news/244486.shtml Secuobs.com : 2010-07-26 21:54:34 - viaForensics viaForensics - Our digital evidence vault audibly groaned with this update Ladies and gents, this is a 3TB hard drive Let that sink in Three effin terabytes That s a whole lot of data on one hard drive Seagate previously stated that the drive would be out by year s end, but here it is and it s barely summer The FreeAgent http://www.secuobs.com/revue/news/243995.shtmlhttp://www.secuobs.com/revue/news/243995.shtml Secuobs.com : 2010-07-26 17:58:25 - viaForensics viaForensics - Anyone up for a challenge The FBI failed to break the encryption code of hard drives seized by federal police at the apartment of banker Daniel Dantas, in Rio de Janeiro, during Operation Satyagraha The operation began in July 2008 According to a report published on Friday 25 by the newspaper Folha de S Paulo, after http://www.secuobs.com/revue/news/243925.shtmlhttp://www.secuobs.com/revue/news/243925.shtml Secuobs.com : 2010-07-23 21:32:11 - viaForensics viaForensics - Just thought we d spice things up around here by sharing this post More interesting than the article, perhaps, are the comments that follow Oh, and, obviously new filter to add to most cases The internet could soon have its own red light district after the xxx suffix was approved though pornography companies are not keen to http://www.secuobs.com/revue/news/243372.shtmlhttp://www.secuobs.com/revue/news/243372.shtml Secuobs.com : 2010-07-23 18:36:17 - viaForensics viaForensics - We blogged previously about the merger of Maemo and Intel s Moblin and the potential impact on the mobile market Nokia announced it will retire Symbian for the popular N series of smartphones Moving forward, the company will use MeeGo as the default operating system for the N series Going forward, N-series device will be based on MeeGo, http://www.secuobs.com/revue/news/243334.shtmlhttp://www.secuobs.com/revue/news/243334.shtml Secuobs.com : 2010-07-22 23:03:59 - viaForensics viaForensics - INDIANAPOLIS WellPoint Inc has notified 470,000 individual insurance customers that medical records, credit card numbers and other sensitive information may have been exposed in the latest security breach of the health insurer s records The Indianapolis company said the problem stemmed from an online program customers can use to track the progress of their application for http://www.secuobs.com/revue/news/243009.shtmlhttp://www.secuobs.com/revue/news/243009.shtml Secuobs.com : 2010-07-22 18:06:09 - viaForensics viaForensics - New SD card designed to store forensic data The WORM write once, read many card is tamper proof and data cannot be altered or deleted, SanDisk said in a statement The card is designed for long-time preservation of crucial data like legal documents, medical files and forensic evidence, SanDisk said The media comes with capacity of only http://www.secuobs.com/revue/news/242903.shtmlhttp://www.secuobs.com/revue/news/242903.shtml Secuobs.com : 2010-07-21 23:49:57 - viaForensics viaForensics - While it s often the large corporations that make the headlines when their security has been breached, it s the smaller companies that are often subject to the greatest harm from malicious attacks and data theft In mid-2009, an employee at the California firm clicked on a link in an e-mail message and ended up at a malicious http://www.secuobs.com/revue/news/242644.shtmlhttp://www.secuobs.com/revue/news/242644.shtml Secuobs.com : 2010-07-21 18:35:40 - viaForensics viaForensics - This from a recent post on the Android Developer blog Every now and then, we remove applications from Android Market due to violations of our Android Market Developer Distribution Agreement or Content Policy In cases where users may have installed a malicious application that poses a threat, we ve also developed technologies and processes to remotely remove http://www.secuobs.com/revue/news/242543.shtmlhttp://www.secuobs.com/revue/news/242543.shtml Secuobs.com : 2010-07-20 22:19:07 - viaForensics viaForensics - Rumors of a BlackBerry tablet have been circulating for months, and statements from Rodman Renshaw analyst Ashok Kumar on Friday have rekindled the discussion with a little bit more accuracy A source close to RIM confirmed to Betanews that Kumar s statements were accurate But they gave us a bit of http://www.secuobs.com/revue/news/242198.shtmlhttp://www.secuobs.com/revue/news/242198.shtml Secuobs.com : 2010-07-20 22:19:07 - viaForensics viaForensics - Congratulations to our CIO Chief Investigative Officer Andrew Hoog on his nomination for Digital Forensic Investigator of the Year by Forensic 4cast Although he s too modest to talk about it, I think it demonstrates that his passion for forensics, research and collaboration has been recognized by peers Of course congratulations are also in http://www.secuobs.com/revue/news/242197.shtmlhttp://www.secuobs.com/revue/news/242197.shtml Secuobs.com : 2010-07-20 19:22:29 - viaForensics viaForensics - Starting to see the spread of Android beyond the realm of mobile phones Google Android is generally aimed at mobile devices with ARM-based processors But we ve seen several efforts to bring the software to x86 processors, including the independent Androidx86 project as well as an Acer netbook which dual boots Windows and Google Android Now it looks http://www.secuobs.com/revue/news/242144.shtmlhttp://www.secuobs.com/revue/news/242144.shtml Secuobs.com : 2010-07-20 02:56:19 - viaForensics viaForensics - A sign of things to come Google has quietly secretly, one might say invested somewhere between 100 million and 200 million in social gaming behemoth Zynga, we ve confirmed from multiple sources The investment part of the deal closed a month ago or so A larger strategic partnership is still in process The investment was made by Google http://www.secuobs.com/revue/news/241909.shtmlhttp://www.secuobs.com/revue/news/241909.shtml Secuobs.com : 2010-07-19 19:57:51 - viaForensics viaForensics - An interesting experiment Sending Data 160 Characters at a Time In the absence of a good Internet connection, why not use text messages to transmit data By Tom Simonite Earl Oliver at at the University of Waterloo, Ontario, Canada, has an unusual phone bill Unlimited texting plan or no, most of us would take a few years to send http://www.secuobs.com/revue/news/241784.shtmlhttp://www.secuobs.com/revue/news/241784.shtml Secuobs.com : 2010-07-15 18:54:46 - viaForensics viaForensics - Although Twitter claims that it has put additional security measures in place since these incidents, it is incidents such as these that point out the vulnerabilities of social networking sites Today June 24, 2010 , the FTC settled a lengthy investigation into Twitter s lax security practices and protection of user accounts after two high-profile hacking incidents in http://www.secuobs.com/revue/news/240888.shtmlhttp://www.secuobs.com/revue/news/240888.shtml Secuobs.com : 2010-07-15 18:54:46 - viaForensics viaForensics - In updates to the following article, the LA Times notes that Apple has been collecting this data for some time and that Google also collects geo-data from Android devices Apple Inc is now collecting the precise, real-time geographic location of its users iPhones, iPads and computers In an updated version of its privacy policy, the company added http://www.secuobs.com/revue/news/240887.shtmlhttp://www.secuobs.com/revue/news/240887.shtml Secuobs.com : 2010-07-14 20:29:26 - viaForensics viaForensics - Not one to generally post the latest medical research, but for those of you with little ones, something to consider Probably even for yourself Nintendo unveils 3DS and quickly follows-up with a statement about dangers to children under 7 playing with the company s new portable gamer Samsung releases a line of 3D http://www.secuobs.com/revue/news/240594.shtmlhttp://www.secuobs.com/revue/news/240594.shtml Secuobs.com : 2010-07-14 20:29:26 - viaForensics viaForensics - Attention Android Forensics Wiki subscribers Our Android Forensics Physical wiki subscription required now includes a comprehensive list of Android devices including in depth details about each device We will be updating this list as we test our viaForensics apps AFLogical and AFPhysical on each device http://www.secuobs.com/revue/news/240593.shtmlhttp://www.secuobs.com/revue/news/240593.shtml Secuobs.com : 2010-07-13 21:45:31 - viaForensics viaForensics - Now anyone can create apps for Android phones However, it s not apparent what measures are being taken to protect against those that might use this for malicious purposes The new software tools should give Google s Android mobile software a leg up against rival smartphone software, including Apple s iPhone OS The App Inventor site lets anyone become http://www.secuobs.com/revue/news/240206.shtmlhttp://www.secuobs.com/revue/news/240206.shtml Secuobs.com : 2010-07-13 21:45:31 - viaForensics viaForensics - Australia s Internet Industry Association IIA took its e-security code of conduct to the White House, where it met with Barack Obama s cyber-security coordinator, Howard Schmidt, to discuss it as a potential model for the US internet industry to adopt Informally known as the zombie code, the IIA released its e-security code of practice to internet service http://www.secuobs.com/revue/news/240205.shtmlhttp://www.secuobs.com/revue/news/240205.shtml Secuobs.com : 2010-07-08 22:23:56 - viaForensics viaForensics - An interesting read But, as the article states, the report may be more about headlines than substance viaForensics is currently building an app analysis database Keep an eye on our Android Forensics Wiki and stay tuned for updates The security of Android apps was called into question by a report issued on Tuesday by SMobile Systems, http://www.secuobs.com/revue/news/238839.shtmlhttp://www.secuobs.com/revue/news/238839.shtml Secuobs.com : 2010-07-06 23:59:39 - viaForensics viaForensics - Recently, some were surprised to learn that Google had the ability to remotely remove applications from Android devices They were even more surprised to learn that Google also has the ability to install applications remotely As the article below goes on to point out, this raises both privacy and security questions While some fear that Google http://www.secuobs.com/revue/news/238144.shtmlhttp://www.secuobs.com/revue/news/238144.shtml Secuobs.com : 2010-07-02 20:54:37 - viaForensics viaForensics - Security breaches are a huge threat to companies Not only because of effects of the compromise or loss of data, but because of the menacing threat of litigation brought against them Goldman Sachs has been slapped with a 3 million lawsuit by a company that alleges the brokerage firm stole intellectual property from its database of http://www.secuobs.com/revue/news/237244.shtmlhttp://www.secuobs.com/revue/news/237244.shtml Secuobs.com : 2010-06-26 00:11:43 - viaForensics viaForensics - viaForensics CIO, Andrew Hoog, discusses virtualization in digital forensics While virtualization is a key technology in the infrastructure of many enterprises, it is essential in the operation of a digital forensic organization Virtualization can be used in number ways, include - Return analyst workstation to validated state for each http://www.secuobs.com/revue/news/235219.shtmlhttp://www.secuobs.com/revue/news/235219.shtml Secuobs.com : 2010-06-26 00:11:43 - viaForensics viaForensics - Electronically stored information ESI in involved in almost all litigation these days Currently, there are few rules governing the collection of ESI However, there is growing debate over the practice of manual collection methods as opposed to using automated methods While it is common for companies to use automated data-collection software and hardware, some corporate litigants http://www.secuobs.com/revue/news/235218.shtmlhttp://www.secuobs.com/revue/news/235218.shtml Secuobs.com : 2010-06-24 05:12:11 - viaForensics viaForensics - HTC says a fix is in the works, but something to be aware of An astute reader stumbled upon an interesting bug with the HTC Incredible The Incredible, with Sense UI, will periodically store screenshots of the contents of your web browser The screen captures are a function of the HTC Sense UI bookmark widget and http://www.secuobs.com/revue/news/234456.shtmlhttp://www.secuobs.com/revue/news/234456.shtml Secuobs.com : 2010-06-22 06:22:02 - viaForensics viaForensics - One mobile device manufacturer is getting tough with hackers Good Bad Post your comments When these ROMs pop up on developer hacker forums, it s generally no big deal in most cases, the manufacturer doesn t notice or, if they do, don t bother to do anything about it Once someone makes an effort to gather up all these http://www.secuobs.com/revue/news/233727.shtmlhttp://www.secuobs.com/revue/news/233727.shtml Secuobs.com : 2010-06-18 04:04:35 - viaForensics viaForensics - Google s Android team has been pushing new versions of the operating system at a furious pace since the first Android device hit the market in 2008 Lots of features have been added over the last couple of years But the user experience hasn t evolved much That s all going to change in the next version, we ve heard http://www.secuobs.com/revue/news/232708.shtmlhttp://www.secuobs.com/revue/news/232708.shtml Secuobs.com : 2010-06-17 01:01:44 - viaForensics viaForensics - According to Tavis Ormandy, a security engineer who works for Google in Switzerland, hackers can leverage a flaw in Windows Help and Support Center, which lets users easily access and download Microsoft help files from the Web and can be used by support technicians to launch remote support tools on a local PC Ormandy posted details http://www.secuobs.com/revue/news/232263.shtmlhttp://www.secuobs.com/revue/news/232263.shtml Secuobs.com : 2010-06-16 06:39:29 - viaForensics viaForensics - News from the mobile phone front On Monday, Apple announced that the iPhone 4 will become available later this month, with pre-orders starting June 15th Leading up to the 15th, we expected to at least be teased with some upcoming offerings from some of its competitors, before consumers drop their paychecks on new Apple hotness next http://www.secuobs.com/revue/news/231961.shtmlhttp://www.secuobs.com/revue/news/231961.shtml Secuobs.com : 2010-06-15 01:19:39 - viaForensics viaForensics - Do you know who you re talking to The paper discussed in this article presents the potential for a new means of attack and yet another security threat to be aware of The authors of the paper believe that the ideas presented in this paper can lead to very realistic automated social engineering attacks Their hope is http://www.secuobs.com/revue/news/231471.shtmlhttp://www.secuobs.com/revue/news/231471.shtml Secuobs.com : 2010-06-11 06:33:31 - viaForensics viaForensics - Breaking news The FBI said Thursday that it is investigating a data breach at AT T that exposed the e-mail addresses of more than 114,000 owners of the Apple iPad, including government officials The agency said it is looking into the potential cyber threat from the breach AT T Inc said it has no comment The Dallas-based phone http://www.secuobs.com/revue/news/230617.shtmlhttp://www.secuobs.com/revue/news/230617.shtml Secuobs.com : 2010-06-03 21:58:47 - viaForensics viaForensics - Two data recovery service providers have recently started offering free services related to electronic discovery But, according to this article, the terms of these offers are vague and not entirely free either e-discovery professional working on a budget isn t that all of us may have a hard time determining their ultimate costs when taking http://www.secuobs.com/revue/news/228372.shtmlhttp://www.secuobs.com/revue/news/228372.shtml Secuobs.com : 2010-06-01 21:40:15 - viaForensics viaForensics - The courts are not showing much compassion for organizations that allow security breaches We re seeing theses cases in increasing numbers organizations are expected to provide more than your standard security these days In a legal settlement over its 2008 security breach, Heartland Payment Systems has agreed to pay up to 414 million to MasterCard Worldwide http://www.secuobs.com/revue/news/227612.shtmlhttp://www.secuobs.com/revue/news/227612.shtml Secuobs.com : 2010-05-28 19:05:11 - viaForensics viaForensics - I previously posted a HOWTO for installing Kristinn Gudjonsson s log2timeline on Ubuntu 910 Since that time, Kristinn setup his own apt-get repository so things are much easier Here s what I did which is Add apt-get repository At this time, Kristinn only has the karmic repository setup and that will work fine for Ubuntu 910 and 1004 probably http://www.secuobs.com/revue/news/226717.shtmlhttp://www.secuobs.com/revue/news/226717.shtml Secuobs.com : 2010-05-27 23:59:57 - viaForensics viaForensics - We will test shortly but this is a very serious flaw Security experts Bernd Marienfeldt and Jim Herbeck discovered something really interesting when they hooked up a non-jailbroken, fully up-to-date iPhone 3GS to a PC running Lucid Lynx I uncovered a data protection vulnerability 9 , which I could reproduce on 3 other non jail broken http://www.secuobs.com/revue/news/226449.shtmlhttp://www.secuobs.com/revue/news/226449.shtml Secuobs.com : 2010-05-27 08:19:18 - viaForensics viaForensics - Andreas Schuster s EvtxParser is a fantastic tools for extracting the new log file format found in Windows Vista, Windows 7 as well as the new Windows 2008 Server and other platforms Like Kristinn s log2timeline tool, though, there are a few steps to complete the install This should work on most Ubuntu versions but I m on http://www.secuobs.com/revue/news/226155.shtmlhttp://www.secuobs.com/revue/news/226155.shtml Secuobs.com : 2010-05-26 17:42:38 - viaForensics viaForensics - Like many of you, we work very hard to setup and maintain our forensic lab, in particular storage, software, hardware and security We ve learned a lot and would like to share some of it After testing VMWare, KVM, Xen and VirtualBox, we settled on VirtualBox as the best solution for virtualization in our environment Our http://www.secuobs.com/revue/news/225866.shtmlhttp://www.secuobs.com/revue/news/225866.shtml Secuobs.com : 2010-05-25 23:39:52 - viaForensics viaForensics - We do Mac forensics a lot of folks don t But I m still a Linux geek at heart Here s how you mount an HFS partition on Linux While you can apply this to an attached disk, this example mounts a partition slice from a dd image more precisely, a dc3dd image taken from a Mac Acquire Apple disk http://www.secuobs.com/revue/news/225603.shtmlhttp://www.secuobs.com/revue/news/225603.shtml Secuobs.com : 2010-05-21 06:46:44 - viaForensics viaForensics - Google-powered Android phones and iPhones are both gobbling up market share The combined worldwide market share of both operating systems reached 25 percent in the first quarter, up from 12 percent the year before, according to Gartner The iPhone still has a bigger share, at 154 percent up 5 points , but Android is catching up http://www.secuobs.com/revue/news/224293.shtmlhttp://www.secuobs.com/revue/news/224293.shtml Secuobs.com : 2010-05-19 23:09:13 - viaForensics viaForensics - Despite the fact that Android is gaining market share in the mobile phone market, Google will no longer be peddling its own device The Web search firm announced Friday that it will essentially shut down the Internet store it used to sell its Nexus One smart phone, the flagship device for Google s Android operating system While the http://www.secuobs.com/revue/news/223737.shtmlhttp://www.secuobs.com/revue/news/223737.shtml Secuobs.com : 2010-05-19 13:54:08 - viaForensics viaForensics - Even Google s latest SDK v5 does not yet have the HTC Incredible in the android_winusbinf I found these directions and they work will I suspect if you are using Linux, you will need to add 0BB4 to your udev rule 1 Install the Android SDK and download the USB drivers into a folder inside your SDK http://www.secuobs.com/revue/news/223568.shtmlhttp://www.secuobs.com/revue/news/223568.shtml Secuobs.com : 2010-05-17 17:14:29 - viaForensics viaForensics - In the words of our CIO, Andrew Hoog Car forensics, sweet Earlier this month, General Motors hinted at a partnership with a major tech company to fully overhaul their telematics system OnStar While OnStar CEO Chris Preuss was tight-lipped about who that partner was, Motor Trend has just reported it s Google If the rumor s true, GM http://www.secuobs.com/revue/news/222826.shtmlhttp://www.secuobs.com/revue/news/222826.shtml Secuobs.com : 2010-05-15 22:48:40 - viaForensics viaForensics - Per New York Times article It appears Google has admitted to European regulators that it unintentionally sniffed and stored data from home wireless networks, including emails and web surfing activity This happened when its StreetView cars would drive around photographing an area The collection of this information was only revealed after Google was http://www.secuobs.com/revue/news/222555.shtmlhttp://www.secuobs.com/revue/news/222555.shtml Secuobs.com : 2010-05-14 20:00:14 - viaForensics viaForensics - Filed last week in the US District Court for the Southern District of New York, the lawsuit claims Goldman Sachs employees used other people s access credentials to log into Ipreo Networks s proprietary database, dubbed Bigdough Offered on a subscription basis, the information contained within Bigdough offers detailed information on more than 80,000 contacts within the http://www.secuobs.com/revue/news/222273.shtmlhttp://www.secuobs.com/revue/news/222273.shtml Secuobs.com : 2010-05-14 03:13:58 - viaForensics viaForensics - Sony s assumed impending announcement about the release of Android Smart TVs has met with mixed reviews Regardless, it s just one more area to to explore for Android Forensics investigators Look out, Sony is actually trying something new and might announce Intel Atom-powered TVs next month at Google I O 2010 A new Android released dubbed Dragonpoint is http://www.secuobs.com/revue/news/222043.shtmlhttp://www.secuobs.com/revue/news/222043.shtml Secuobs.com : 2010-05-11 15:46:09 - viaForensics viaForensics - Check out Andrew s Android forensics article in DFI News Android, Google s mobile device platform, is growing quickly in its share of the smart phone market share In 2010, a large number of new devices will be released, including 20 smart phones, 23 tablets, 2 e-books, and 4 net books Clearly, forensic examiners need to prepare for http://www.secuobs.com/revue/news/220988.shtmlhttp://www.secuobs.com/revue/news/220988.shtml Secuobs.com : 2010-05-11 00:03:46 - viaForensics viaForensics - Federal agency IT executive at the FedScoop Cybersecurity Leadership Summit reached the conclusion that in light of the belief that they will never achieve perfect security they need to focus on risk management With so many demands on security and only limited resources to achieve them federal agencies are rapidly reaching the http://www.secuobs.com/revue/news/220715.shtmlhttp://www.secuobs.com/revue/news/220715.shtml Secuobs.com : 2010-05-07 06:08:53 - viaForensics viaForensics - Considering the substantial costs that companies could pay for a data breach, isn t it worth a little investment up front to make sure that never happens A data breach in the United States could cost enterprises twice as much as the same breach costs companies in other countries with less stringent disclosure and notification laws, according http://www.secuobs.com/revue/news/219814.shtmlhttp://www.secuobs.com/revue/news/219814.shtml Secuobs.com : 2010-05-06 00:58:48 - viaForensics viaForensics - Enterprises and consumers each suffer from different types of malware threats, but both were hit hard by rogue antivirus attacks last year, according to new data released by Microsoft today We re seeing that the criminals are more professional and organized, Thomlinson says It's not the guy in his garage doing this in his spare time This http://www.secuobs.com/revue/news/219256.shtmlhttp://www.secuobs.com/revue/news/219256.shtml Secuobs.com : 2010-05-04 06:25:44 - viaForensics viaForensics - A little plug for viaForensics As malware and social engineering attacks become more sophisticated, many companies especially small and midsize businesses SMBs are arriving at one conclusion We need help The article goes on to describe how attackers are using social networks, cloud services and the like to gain access to companies computers And targeted http://www.secuobs.com/revue/news/218507.shtmlhttp://www.secuobs.com/revue/news/218507.shtml Secuobs.com : 2010-04-30 18:30:07 - viaForensics viaForensics - As Lee mentioned in an earlier post, Palm seeking a buyer is interesting for the mobile market Palm was clearly dying and would have lost all relevance without a new owner and investment -better strategy will be needed too because history has shown that good tech does not always win, or even necessarily survive According http://www.secuobs.com/revue/news/217736.shtmlhttp://www.secuobs.com/revue/news/217736.shtml Secuobs.com : 2010-04-30 04:41:53 - viaForensics viaForensics - Incredible This research team basically cracked into the bank s infrastructure, completely undetected, and had complete access and control over all their data Proving once again that anti-virus and standard security measures just don t cut it Companies need to start looking at stronger, proactive measures for protecting their and their clients information um, threatForensics, for http://www.secuobs.com/revue/news/217557.shtmlhttp://www.secuobs.com/revue/news/217557.shtml Secuobs.com : 2010-04-29 06:19:05 - viaForensics viaForensics - A vulnerability in Java leaves users open to Web-based attacks Sun Microsystems doesn t seem to be inclined to do anything about it at the moment Are you Because the JavaWS technology is included in the Java Runtime Environment, which is used by all of the major browsers, the vulnerability affects all of these applications, including Firefox, http://www.secuobs.com/revue/news/217202.shtmlhttp://www.secuobs.com/revue/news/217202.shtml Secuobs.com : 2010-04-28 06:33:23 - viaForensics viaForensics - Will a new owner for Palm, Inc help make it a contender in the mobile market Palm Inc, creator of the Pre smartphone, is seeking bids for the company as early as this week, according to three people familiar with the situation Palm still has quite a good brand in the US market, and some strong technology, http://www.secuobs.com/revue/news/216773.shtmlhttp://www.secuobs.com/revue/news/216773.shtml Secuobs.com : 2010-04-27 00:50:42 - viaForensics viaForensics - Companies and not just financial institutions need to be on guard against data theft Tools are becoming available to help Companies just need to use them For example, viaForensics offers three tools marketed toward corporations driveForensics protects corporations from departing employees by making a court accepted copy of their hard drive when the http://www.secuobs.com/revue/news/216198.shtmlhttp://www.secuobs.com/revue/news/216198.shtml Secuobs.com : 2010-04-23 07:27:30 - viaForensics viaForensics - An interesting new trend in the industry Joanna Rutkowska, a security researcher known for her work on virtualization security and low-level rootkits, has released a new open-source operating system meant to provide isolation of the OS s components for better security The OS, called Qubes, is based on Xen, X and Linux and is in a basic, alpha http://www.secuobs.com/revue/news/215222.shtmlhttp://www.secuobs.com/revue/news/215222.shtml Secuobs.com : 2010-04-22 00:59:47 - viaForensics viaForensics - This could have a significant impact on how companies investigate suspect employee behavior In a ruling that could affect enterprises privacy and security practices, the New Jersey Supreme Court last week ruled that an employer can not read email messages sent via a third-party email service provider even if the emails are accessed during work http://www.secuobs.com/revue/news/214725.shtmlhttp://www.secuobs.com/revue/news/214725.shtml Secuobs.com : 2010-04-20 05:48:11 - viaForensics viaForensics - Who s got the biggest cloud in the tech universe Google Pretty big, but no Amazon Lots and lots of servers, but not even close Microsoft They re just getting started Household names all, but their capacity pales to that of the biggest cloud on the planet, the network of computers controlled by the Conficker computer worm Conficker http://www.secuobs.com/revue/news/213910.shtmlhttp://www.secuobs.com/revue/news/213910.shtml Secuobs.com : 2010-04-20 05:48:11 - viaForensics viaForensics - The recent HSBC database breach was an inside job pulled off by an IT specialist who tend to have the most unrestricted access to an organization s data and often resist implementing security against internal threats You hate to mistrust your employees, but these things happen CSOs and others in top management need to address http://www.secuobs.com/revue/news/213909.shtmlhttp://www.secuobs.com/revue/news/213909.shtml Secuobs.com : 2010-04-20 05:48:11 - viaForensics viaForensics - Android continues to make headway in the smartphone market Are security experts keeping up Android Forensics training is coming to Chicago May 4th and 5th Bags have been packed, poker chips have been cashed, and planes have been boarded and with that, the mobile-focused CTIA 2010 convention in Las Vegas has come to a http://www.secuobs.com/revue/news/213908.shtmlhttp://www.secuobs.com/revue/news/213908.shtml Secuobs.com : 2010-04-20 05:48:11 - viaForensics viaForensics - While advances in technology create greater efficiencies and better products, they also continuously open up new vulnerabilities According to this AP article, utility companies are testing the use of new smart meters to deliver and measure the use of electricity to customers However, these meters could also be vulnerable to hackers The more network technologies are employed, http://www.secuobs.com/revue/news/213907.shtmlhttp://www.secuobs.com/revue/news/213907.shtml Secuobs.com : 2010-04-20 05:48:11 - viaForensics viaForensics - As smartphones like the iPhone and Android take over the mobile Web, the amount of data traffic going over cellular networks is expected to grow 40-fold over the next five years UK firm Coda Research Consultancy forecasts that in the US alone mobile handset data traffic will grow from 8 petabytes month this year to 327 http://www.secuobs.com/revue/news/213906.shtmlhttp://www.secuobs.com/revue/news/213906.shtml Secuobs.com : 2010-04-20 05:48:11 - viaForensics viaForensics - Despite huge efforts by corporations to safeguard their networks, attackers are still able to detect vulnerabilities and find a way inside At the RSA Conference in San Francisco last week, security vendors pitched their next generation of security products, promising to protect customers from security threats in the cloud and on mobile devices But what went http://www.secuobs.com/revue/news/213905.shtmlhttp://www.secuobs.com/revue/news/213905.shtml Secuobs.com : 2010-04-20 05:48:11 - viaForensics viaForensics - Just something to keep an eye on tazzbit writes The storage vendors have been crowing about data deduplication technology for some time now, but a new open source project, Opendedup, brings it to Linux and its hypervisors KVM, Xen and VMware The new deduplication-based file system called SDFS GPL v2 is scalable to eight petabytes http://www.secuobs.com/revue/news/213904.shtmlhttp://www.secuobs.com/revue/news/213904.shtml Secuobs.com : 2010-04-20 05:48:11 - viaForensics viaForensics - Opportunities for theft over mobile devices continues to increase viaForensics is set to position itself as the mobile device security experts Join in on the discussion eBay introduced two new iPhone applications, designed to make sellers lives easier when it comes to listing items on the giant online marketplace from their Apple phones The company http://www.secuobs.com/revue/news/213903.shtmlhttp://www.secuobs.com/revue/news/213903.shtml Secuobs.com : 2010-04-20 05:48:11 - viaForensics viaForensics - BATTLE OF THE BOTS Newbie SpyEye takes on powerhouse Zues Sounds like the making of a really bad science fiction flick But it has all too real consequences As these two rivals continue to try to outdo one another in the cyber crime department, they are driving up the number of threats that security specialists have http://www.secuobs.com/revue/news/213902.shtmlhttp://www.secuobs.com/revue/news/213902.shtml