Digital Forensics Insights – December 2024

Welcome to the second edition of our Digital Forensics Newsletter! This issue brings you the latest developments, insights, and best practices shaping the future of digital investigations and cyber defence.?

With increased online activities and e-commerce during the holidays, the risk of cyberattacks rises. Digital forensics can help organisations prepare by analysing vulnerabilities and implementing safeguards to protect sensitive data from breaches or fraud.?

Spotlight On Recent Events?

iOS 18 Introduces automatic reboot for enhanced security?

Apple’s iOS 18 has implemented a new feature that forces iPhones to reboot automatically after three days of inactivity. Designed with user security in mind, the feature aims to reduce risks associated with prolonged device uptime, such as potential exploits or unpatched vulnerabilities. While this enhancement underscores Apple’s commitment to privacy and security, it has sparked mixed reactions. Some users appreciate the proactive measure, and others, including law enforcement agencies, have raised concerns about the potential impact on accessibility during investigations.?

?

What do you think about this feature? Is it a step forward in protecting personal data or a possible inconvenience?

Critical Windows Server 2012 Vulnerability Exposes Systems to Ransomware Attacks?

A recent report highlights a significant zero-day vulnerability affecting Windows Server 2012 and related systems, which allowed attackers to exploit the Windows Common Log File System (CLFS) driver. This vulnerability enabled unauthorised privilege escalation, making systems susceptible to attacks such as ransomware deployments, notably by the Nokoyawa ransomware group.?

The exploit involved downgrading system security updates and bypassing critical integrity checks. By manipulating the update process, attackers could make fully patched systems vulnerable to previously fixed issues while appearing "fully updated." The flaw was especially dangerous as it targeted essential security components like Credential Guard and Hyper-V, leaving systems exposed to privilege escalation and other vulnerabilities.

This vulnerability underscores the evolving sophistication of cyber threats. Microsoft has addressed this issue through recent patches, but users are advised to implement updates promptly to mitigate risks.?

Cyber-storm brewing: UK underestimating risks from cyberattacks?

The UK's cyber chief, Anne Keast-Butler of GCHQ, has issued a stark warning about the growing threat posed by the close collaboration between Russian intelligence agencies and cybercriminal proxy groups. Speaking at the CyberUK conference, Keast-Butler highlighted how these groups, which were previously tolerated within Russia's borders, are now being actively nurtured and coordinated by the Kremlin. This partnership extends beyond cyberattacks, with indications of physical surveillance and sabotage activities targeting Western nations.

The warning comes amidst broader concerns about the increasing frequency and sophistication of cyber threats globally, including ransomware attacks. The UK government has been urged to enhance its cybersecurity measures and allocate more resources to counter these threats effectively. These developments emphasize the urgent need for vigilance and international cooperation to address the evolving landscape of cyber warfare.

How Prepared is Your Business for a Data Breach?

The cost of a data breach in the UK averaged ￡3.4 million in 2024— highlighting how unprepared businesses can suffer devastating financial and reputational harm.

Taking prompt action with computer forensics can make all the difference. It is a powerful tool that helps businesses respond effectively and experts in the field can help

• Detect breaches early by analysing network traffic and logs for signs of unauthorised access.
• Preserve and analyse evidence, such as system snapshots and security artifacts, for investigations and legal use.
• Quantify financial impact, from stolen data value to indirect losses like reputation damage.
• Recover compromised data and restore operations quickly.

Looking for something to watch this Holiday Season?

The BBC Studios Documentary Unit has produced Murder Case: The Digital Detectives, a new true-crime series for Channel 4. The three-part series delves into ground-breaking digital forensic techniques used to solve murders in the UK. Each episode follows law enforcement and forensic experts as they use digital clues—like social media activity, phone data, and messaging history—to track suspects and secure convictions.?

The show provides a behind-the-scenes look at three significant cases, with access to different police forces, including Nottinghamshire Police, Police Scotland, and Thames Valley Police. Using advanced visualizations, the series bridges the gap between real and virtual worlds, showing how investigators create "digital crime boards" to piece together evidence. It premiered on April 15, 2024, on Channel 4 and is available to stream for free on Channel 4+.?

Highlight of The Year

Revisit the key discussions on the role of digital forensics in fraud detection and legal support and discover how to stay ahead in the digital investigations landscape.

??Watch the video below.

In the comments section, please share your thoughts on the session and let us? know what other topics you would want us to cover. We look forward to them!

TenIntelligence emphasises preserving evidence, ethical practices, and working closely with businesses to recover and secure digital data. This commitment ensures that organisations can maintain trust and operational efficiency, even during the hectic holiday period. If you have any questions on Digital Forensics, drop us your query and we'll get back to you promptly.?

Until next time,?

Lisseth Ortiz Diaz | Digital Forensics Associate