Andrea Fortuna
AboutSearch
Tools
DFIR Toolkit OSINT Toolkit
  • Mar 29, 2026

    iOS Lockdown mode and forensic analysis: a technical perspective

    Apple introduced Lockdown Mode in iOS 16 as a hardened protection layer targeted at a narrow group of users exposed to targeted attacks and mercenary spyware.… read more »
  • Mar 26, 2026

    All code is sorcery, until it isn't

    In 1966, Joseph Weizenbaum created a program called ELIZA. It was, by any technical measure, trivial: a pattern-matching engine that reflected the user's words back as open-ended questions, mimicking the style of.… read more »
  • Mar 21, 2026

    When the city becomes the weapon: IoT, AI, and the new face of warfare

    There is a quiet assumption most of us carry around about the devices that fill our cities. Traffic cameras sit on their poles to catch speeding drivers. Smart sensors monitor air quality.… read more »
  • Mar 19, 2026

    Windows 11 quietly introduced a new execution artifact investigators should start checking

    Digital forensics often rewards people who look in places nobody else is checking yet. This article provides practical context, implications, and actions for security teams.… read more »
  • Mar 17, 2026

    Introducing DFIR Toolkit: Privacy-First DFIR utilities that run entirely in your browser

    A new collection of browser-based DFIR tools designed for fast triage, zero setup, and local analysis only: IOC Extractor, Timestamp Converter, Hash Calculator, and Email Header Analyzer.… read more »
  • Mar 9, 2026

    Cloud repatriation: when moving workloads back on premises is a strategic choice, not a retreat

    "The cloud is just someone else's computer." The old sysadmin joke has held up better than many forecasts from the last decade. After years of cloud-first mandates, digital transformation roadmaps, and hyperscaler.… read more »
  • Mar 4, 2026

    MalHunt gets a major overhaul: Volatility3, smarter YARA handling, and better error recovery

    If you have been following my open-source work, you probably know MalHunt, the memory forensics tool I built to automate malware hunting on top of Volatility. Yesterday I pushed a significant batch.… read more »
  • Mar 1, 2026

    Ten problems every Volatility2 analyst will hit when migrating to Volatility3

    After years of daily use in incident response and forensic investigations, This article provides practical context, implications, and actions for security teams.… read more »
  • Feb 28, 2026

    Face ID vs. Android Face Unlock: A Security Comparison

    Apple built Face ID around dedicated hardware that most competitors have never replicated at scale. The TrueDepth camera system, introduced with the iPhone X in 2017 and refined across every subsequent generation,.… read more »
  • Feb 27, 2026

    Audit-Proofing your NIS2 training plan: a strategic guide

    How to build an audit-proof NIS2 training plan with governance ownership, role-based content, assessment metrics, and evidence packages regulators can verify.… read more »
  • Feb 26, 2026

    Privileged access management: risks and best practices for zero trust implementations

    In any enterprise environment, privileged accounts represent the highest-value target for attackers. These are not just administrator credentials; they encompass service accounts, DevOps pipelines.… read more »
  • Feb 23, 2026

    CERT-EU's cyber threat intelligence framework: a common language for European digital defence

    On February 13, 2026, CERT-EU (the Computer Emergency Response Team for the EU Institutions, Bodies and Agencies) released its Cyber Threat Intelligence Framework, a document that formalizes how.… read more »
  • Feb 22, 2026

    The end of security as we knew it: what Claude Code Security really means

    When Anthropic launched Claude Code Security in February 2026, cybersecurity stocks dropped sharply. But the real disruption is not in the market — it is in the model itself.… read more »
  • Feb 20, 2026

    ClickFix: the new frontier of social engineering between DNS and Google Ads

    A new generation of ClickFix attacks abuses DNS lookups and Google-sponsored ads to deliver malware, bypassing traditional defenses and exploiting user trust in legitimate platforms.… read more »
  • Feb 19, 2026

    Italy's cyber perimeter under fire: two institutional breaches in fifteen days

    Between the night of February 1 and February 2, 2026, Sapienza University of Rome experienced something far more serious than a routine IT outage. What struck its campus was a full digital.… read more »
  • Feb 17, 2026

    Fake recruiters weaponize job offers to target cryptocurrency developers

    A sophisticated cyber campaign orchestrated by the North Korean Lazarus Group is using fake job opportunities to compromise cryptocurrency developers worldwide. Security researchers at ReversingLabs have uncovered a.… read more »
  • Feb 6, 2026

    The Trojan horse in your cluster: a deep dive into container image security

    It is 2:00 AM. Your phone lights up with the notification every CISO and SecOps engineer dreads. Your Security Operations Center is lighting up like a Christmas tree. An attacker has just.… read more »
  • Feb 5, 2026

    24/7 Security monitoring for small teams

    Most organizations don't fail at security because they lack tools, they fail because they can't sustain attention at 2:00 AM. The hard part is not collecting logs; it's sustaining focus when people.… read more »
  • Feb 4, 2026

    iOS Forensics without Jailbreak: a practical guide to mobile evidence acquisition

    Every time I work on an iOS forensic case, someone asks me: "Do we need to jailbreak this thing?" It's a fair question, and the answer has changed a lot over the.… read more »
  • Jan 31, 2026

    Why you should remove 'ClawdBot' (or whatever it's called) right now

    If you’ve been keeping an eye on developer news in 2026, you’ve probably come across ClawdBot . Maybe you know it as MoltBot or the latest fork, OpenClaw . No matter what.… read more »
« Previous page Next page »

Andrea Fortuna

  • Andrea Fortuna
  • andrea@andreafortuna.org
  • andreafortuna
  • andreafortunaig
  • andrea-fortuna

Cybersecurity expert, software developer, experienced digital forensic analyst, musician