My new bestie!

Curious about #SANSCommunityNight? One evening, a top expert, & a chance to boost your security skills. 🎤 Sarah Edwards 👩🏻‍💻🐈‍⬛: "Rotten to the Core — Evidence of Compromise on Apple Devices." No course needed—just connect and grow. 🔗 sans.org/u/1zVi #SANSTraining #SANSOslo

Looking for some weekend reading? I recently published a deep technical dive into *all* the new macOS malware of 2024 🍎🐛 The report covers: 💉 Infection vectors 💾 Persistence mechanisms 🔓 Capabilities & features 🛡️ Detection methods Check it out! 👇 objective-see.org/blog/blog_0x7D…

📢 Celebrate International Women’s Day at #DFIR Dallas March 24-29! Learn from the top women in cyber like Heather Mahalik Barnhart, My-Ngoc Nguyen, Katie Nickels, Megantron (@[email protected]), Sarah Edwards 👩🏻‍💻🐈‍⬛ & more. 🤠 Local to Dallas? Don’t miss our Women’s Connect event! Learn more: sans.org/u/1A45

A brief history of bundles eclecticlight.co/2025/02/15/a-b… via Howard Oakley, Eclectic Light Co

🚨 Democratizing Threat Hunting is Changing Mobile Security! 🚨 Today, we announced our latest investigation led to 18,000+ device scans, uncovering 11 new Pegasus spyware infections—many targeting business. 📱💼 Take control —scan your device today! 🔍 bit.ly/3X8tsY3

🤠Join me in Dallas (Virtual or In Person) for the first run of the newly updated FOR518! 🐴 💻New dataset with macOS 15 and iOS 18!📱 📄New workbook with 20+ NEW labs! 🧩New CTF Day 6 Challenges!🧩 📱Updated @CorrelliumHQ devices! 🍖…and hopefully good BBQ and Tacos!🌮 Find

Apple has canceled encrypted iCloud storage for UK users rather than create backdoor UK gov wants to access data. UK customers who currently have Advanced Data Protection will be warned to disable it or lose access to iCloud. By @joemenn.bsky.social washingtonpost.com/technology/202…

Stoked to announce 'Objective by the Sea' v8.0! ...the world's only dedicated 🍏-security conference! #OBTS v8.0: 📍 Ibiza, Spain 🗓️ Oct. 12–17, 2025 🔗 objectivebythesea.org/v8/index.html Hope to see you all there! ☀️🌴 #OBTS

#OBTS v8 will have an extra day of talks & expanded trainings 🚀 CFP (talks & trainings): objectivebythesea.org/v8/cfp.html 🧑‍🏫 Trainers: Keep 100% of revenue + get a free #OBTS ticket! 🧑‍🏫 Speakers: Get a €1,000 honorarium, free #OBTS ticket, + more!

New victim of Paragon spyware in Italy comes out. It's Mattia Ferrari, a priest who works for the immigrant support NGO Mediterranea Saving Humans, whose two co-founders were also allegedly hacked in the espionage campaign. fanpage.it/politica/caso-…

New Presentation - Using Apple Intelligence (AI) Data in Investigations mac4n6.com/blog/2025/3/18… #mac4n6 #DFIR #AI

Interesting stuff on Apple Intelligence! My article related to this was mentioned in this. In case anyone wants to give it a read: malwr4n6.com/post/apple-int…

NEW: The Harris-Walz campaign may have been the victim of an iPhone hacking campaign that targeted five high-profile Americans Cybersecurity company iVerify says evidence suggests a novel hack that targeted politicians, people in media, and AI. nbcnews.com/tech/security/…

Corellium founder Chris Wade is selling his startup to Cellebrite, law enforcement’s favorite cellphone forensics business. (Photo: Getty Images) trib.al/qNQv0zL

Happy Pride Y’all!! Hung out with some amazing people yesterday including #obts bestie christine 🌸💐🌺🌷🌹🪻🍃🌱🌿🪴✨

mac_apt v1.26.1 is here, now supports processing Velociraptor collections and compiled versions for macOS too. Many incremental updates and new plugins (we are at 52 plugins now!). github.com/ydkhatri/mac_a… #DFIR #macOS

📄 The Linux #IncidentResponse & #ThreatHunting Poster by Kathryn Hedley & Taz Wake is your forensic roadmap, helping you analyze timestamps, track persistence mechanisms, & uncover hidden malware. 📥 Download your FREE copy!: sans.org/u/1Avg #DFIR #Linux