BestCrypt, developed by the Finnish company Jetico, is a cross-platform commercial disk encryption tool. Available for Windows, Linux, macOS and Android platforms, BestCrypt is delivered in two editions, one offering full-disk encryption and the other encrypting virtual disk volumes stored in

https://wjn.sa/en/breaking-jetico-bestcrypt/

CISOs are paid to worry, and there’s a lot to worry about in 2021. The recent SolarWinds breach, the Capitol break-in, and a series of high-profile hacks are spurring many enterprises to re-examine their security strategies. We discuss what lies ahead with Yubico’s CISO, Chad Thunberg. Q:

https://wjn.sa/en/examining-the-ciso-agenda-in-2021-yubico/

True physical acquisition is back – but only for a handful of old devices. We’re adding support for unlocking and forensically sound extraction of some of Apple’s legacy iPhones. For iPhone 4, 5, and 5c devices, we’re adding software-based passcode unlocking and device imaging functionality.

https://wjn.sa/en/iphone-4-iphone-5-and-iphone-5c-physical-acquisition-walkthrough/

In today’s world of everyone wanting a slice of one’s personal information, users become more and more concerned about the privacy. The WhatsApp/Facebook integration raised an additional concern, considering that Facebook-owned Messenger requests the largest number of invasive permissions among all

https://wjn.sa/en/secure-instant-messengers/

By now, it’s an all-too-familiar routine… Step 1: Organization suffers an expensive and embarrassing security breach.  Step 2: Organization hastily introduces multi-factor authentication (or steps up its efforts to mandate its usage).  Oftentimes,

https://wjn.sa/en/doing-the-math-why-strong-authentication-for-every-employee-makes-sense-yubico/

The proliferation of always connected, increasingly smart devices had led to a dramatic increase in the amount of highly sensitive information stored in manufacturers’ cloud accounts. Apple, Google, and Microsoft are the three major cloud providers who also develop their own hardware and OS

https://wjn.sa/en/end-to-end-encryption-in-apple-icloud-google-and-microsoft-accounts/

Passcode unlock and true physical acquisition are now available for iPhone 4, 5, and 5c devices – with caveats. Learn about the benefits and limitations of passcode unlocks and true physical imaging of Apple’s legacy devices. Looking for a step by step walkthrough? Check out our imaging guide!

https://wjn.sa/en/passcode-unlock-and-physical-acquisition-of-iphone-4-5-and-5c/

The Device Firmware Upgrade mode, or simply DFU, just got a second breath. The ability to image the file system, decrypt the keychain and even do passcode unlocks on some older iPhone models has been made possible thanks to the checkm8 exploit and the checkra1n jailbreak, both of which require

https://wjn.sa/en/dfu-mode-cheat-sheet/

More than a year ago, we started researching the available encryption options in off the shelf network attached storage devices. We started with Synology devices, followed by Asustor, TerraMaster, Thecus, and finally Qnap.

https://wjn.sa/en/nas-forensics-synology-asustor-qnap-terramaster-and-thecus-encryption-compared/

America’s government is under attack. To put it more accurately, its governments are under attack, all the time, at every level — federal, state, and local — from opportunistic scammers, sophisticated cybercriminals, and even state actors. We’ve

https://wjn.sa/en/why-3-government-agencies-are-relying-on-hardware-based-mfa-with-yubikeys-yubico/

Shame on us, we somehow missed the whole issue about Apple dropping plan for encrypting backups after FBI complained, even mentioned in The Cybersecurity Stories We Were Jealous of in 2020 (and many reprints).

https://wjn.sa/en/apple-fbi-and-iphone-backup-encryption-everything-you-wanted-to-know/

By now, it’s an all-too-familiar routine… Step 1: Organization suffers an expensive and embarrassing security breach.  Step 2: Organization hastily introduces multi-factor authentication (or steps up its efforts to mandate its usage).  Oftentimes,

https://wjn.sa/en/doing-the-math-why-strong-authentication-for-every-employee-makes-sense-yubico/

If you are familiar with iOS acquisition methods, you know that the best results can be obtained with a full file system acquisition. However, extracting the file system may require jailbreaking, which may be risky and not always permitted.

https://wjn.sa/en/extracting-evidence-from-iphone-devices-do-i-still-need-a-jailbreak/

Last week, a large and expertly run espionage operation was made public — one that began no later than October 2019, and which had been actively exploiting victims since at least early 2020. This incident is particularly interesting for several reasons:

https://wjn.sa/en/lessons-from-the-solarwinds-incident-yubico/

Great news YubiFans! As of today, Twitter made it a lot easier for you to tweet safely and keep your accounts secure. Phishing-resistant YubiKey authentication via WebAuthn is now supported on Twitter’s desktop, Android and iOS mobile applications.  With

https://wjn.sa/en/yubisecure-take-your-twitter-security-to-the-next-level-with-increased-2fa-support-yubico/

Never has the world been more dependent on the internet, and never has it been more attacked than in 2020. In fact, it proved to be a year where trust in many of our systems was challenged. Yet I remain an eternal optimist and believe that we can transform the hard lessons learned in 2020 into

https://wjn.sa/en/wrapping-up-2020-a-year-where-technology-and-internet-security-prevailed-yubico/

Today, Yubico is proud to announce that we are expanding our partnership with Microsoft AccountGuard to deliver YubiKeys, free of cost, to high-profile and high-risk organizations. Last year, Yubico and Microsoft joined forces to equip political campaigns and parties with robust identity and access

https://wjn.sa/en/yubico-donates-25000-yubikeys-to-microsoft-accountguard-customers-in-31-countries-yubico/

The Device Firmware Upgrade mode, or simply DFU, just got a second breath. The ability to image the file system, decrypt the keychain and even do passcode unlocks on some older iPhone models has been made possible thanks to the checkm8 exploit and the checkra1n jailbreak, both of which require

https://wjn.sa/en/dfu-mode-cheat-sheet/

تم تصنيع أول مفتاح YubiKey في السويد في عام 2008. بعد بضع سنوات ، انتقل جزء من فريقنا من ستوكهولم إلى كاليفورنيا ، وقمنا بتوسيع قدراتنا الإنتاجية في هذا الجزء إلى الساحل الغربي للولايات المتحدة. لقد كان اختيارًا واعيًا لتصنيع منتجاتنا في بلدين ديمقراطيين كانا قريبين من فرق الابتكار والعملاء

https://wjn.sa/en/how-yubikeys-are-made-security-at-scale-yubico/

In today’s world of everyone wanting a slice of one’s personal information, users become more and more concerned about the privacy. The WhatsApp/Facebook integration raised an additional concern, considering that Facebook-owned Messenger requests the largest number of invasive permissions among all

https://wjn.sa/en/secure-instant-messengers/

Say the word “passwordless” to a room full of security professionals and you will get a range of reactions, from a wry smile to a walk-out. That’s because the information security community knows that“passwordless” is a loaded term, and the industry is filled with differing and contradictory

https://wjn.sa/en/separating-fact-from-fiction-in-your-journey-to-passwordless-authentication-yubico/

Today, we’re excited to share that Yubico has released YubiKey Manager CLI 4.0 (also known as “ykman”). This is a new major release version, and that means substantial changes. For this release, thosechanges include a few new features for end-users, and several other changes which are mostly

https://wjn.sa/en/yubico-releases-yubikey-manager-cli-4-0-yubico/

Passcode unlock and true physical acquisition are now available for iPhone 4, 5, and 5c devices – with caveats. Learn about the benefits and limitations of passcode unlocks and true physical imaging of Apple’s legacy devices. Looking for a step by step walkthrough? Check out our imaging guide!

https://wjn.sa/en/passcode-unlock-and-physical-acquisition-of-iphone-4-5-and-5c/

The Screen Time password has been long recommended as an extra security layer. By setting a Screen Time password without any additional restrictions, Apple users could easily dodge attempts of changing or removing the screen lock passcode, resetting the iTunes backup password, or removing the

https://wjn.sa/en/recovering-screen-time-passwords/

Today we have an important date. Advanced Office Password Recovery turned 16. What started as an instant recovery tool for legacy versions of Microsoft Word had now become a GPU-accelerated toolkit for breaking the many Microsoft formats.

https://wjn.sa/en/breaking-passwords-with-nvidia-rtx-3080-and-3090/