[ Android ]  Use scheduling feature to detect Android Emulator - http://drops.wooyun.org/mobile/13486 (Chinese) - based on http://www.dexlabs.org/blog/btdetect

[ Android ]  Today's #Android patches include a fix for a vulnerability exploited by a rooting application - http://ow.ly/10hqsA

[ Android ]  Surreptitious Sharing on Android : https://www.ibr.cs.tu-bs.de/papers/schuermann-sicherheit2016.pdf (pdf)

[ Attack ]  Don’t be an April Fool: Inside a common phone scam http://bit.ly/1ToWagK @ r0bf4lc #Unit42 #AprilFools

[ Attack ]  New NCC Group blog post: Can breach impact be measured? https://www.nccgroup.trust/uk/about-us/newsroom-and-events/blogs/2016/april/can-breach-impact-be-measured/

[ Attack ]  Turkey's Entire Citizenship Database May Have Been Leaked https://packetstormsecurity.com/news/view/26497/Turkeys-Entire-Citizenship-Database-May-Have-Been-Leaked.html

[ Cloud ]  Cloud Forensic Framework For IaaS With Support for Volatile Memory http://trap.ncirl.ie/2068/1/matusbanus.pdf

[ Crypto ]  DROWN – How the deprecated SSLv2 protocol can compromise modern TLS connections. https://truesecdev.wordpress.com/2016/04/04/250/

[ Debug ]  Debug Edge in VS Code, Sublime, or other tools that work with the Chrome Remote Debug Protocol #EdgeWebSummit https://twitter.com/auchenberg/status/717108260709408768

[ Exploit ]  A New CVE-2015-0057 Exploit Technology https://www.blackhat.com/docs/asia-16/materials/asia-16-Wang-A-New-CVE-2015-0057-Exploit-Technology.pdf https://www.blackhat.com/docs/asia-16/materials/asia-16-Wang-A-New-CVE-2015-0057-Exploit-Technology-wp.pdf

[ Firmware ]  A Tour Beyond BIOS Launching a STM to Monitor SMM - https://firmware.intel.com/sites/default/files/A_Tour_Beyond_BIOS_Launching_STM_to_Monitor_SMM_in_EFI_Developer_Kit_II.pdf and STM source code - https://github.com/jyao1/STM

[ iOS ]  The so called #SideStepper attack (by CheckPoint) is totally not worth to consider. Slides is here (don't read it!): https://www.blackhat.com/docs/asia-16/materials/asia-16-Bashan-Enterprise-Apps-Bypassing-The-iOS-Gatekeeper.pdf

[ iOS ]  Potential security problems introduced by iOS hot patching SDKs, episode 2: https://www.fireeye.com/blog/threat-research/2016/04/rollout_or_not_the.html (by @ jxiej)

[ IoTDevice ]  Quanta LTE routers: backdoor, backdoor accounts, RCE, weak WPS, hardcoded ssh key and the list goes on #iotsecurity https://pierrekim.github.io/blog/2016-04-04-quanta-lte-routers-vulnerabilities.html

[ Linux ]  The initcall mechanism : https://github.com/0xAX/linux-insides/blob/master/Concepts/initcall.md //linux-inside series cont'd cc: @ 0xAX

[ Linux ]  bcc/BPF : Dynamic Tracing Tools for Linux : https://iovisor.github.io/bcc/ ; ply (Github) : https://github.com/iovisor/ply cc: @ brendangregg

[ Linux ]  Mounting Bitlocker Volumes Under Linux - http://blog.airbuscybersecurity.com/post/2016/01/Mounting-Bitlocker-Volumes-Under-Linux

[ NetworkDevice ]  Cisco 'high severity' flaw lets #malware bypass FirePower firewall - http://ow.ly/10hdO7

[ Others ]  MIT turns Wi-Fi Into Indoor GPS : http://spectrum.ieee.org/tech-talk/telecom/wireless/mit-turns-wifi-into-indoor-gps

[ Others ]  ACTIVE DETECTION AND ESCAPE OF DYNAMIC BINARY INSTRUMENTATION https://www.blackhat.com/docs/asia-16/materials/asia-16-Sun-Break-Out-Of-The-Truman-Show-Active-Detection-And-Escape-Of-Dynamic-Binary-Instrumentation.pdf

[ Others ]  Reading @ GRC_Ninja on the Cisco Talos Blog: Research Spotlight: Enabling Evil for Pocket Change http://blog.talosintel.com/2016/04/enabling-evil.html?utm_source=twitterfeed&utm_medium=twitter&utm_campaign=Feed:+feedburner/Talos+(Talos+Blog)&m=1

[ Others ]  PS4-dlclose : Fully implemented dlclose exploit for PS4 w/ included linux loader: https://github.com/kR105/PS4-dlclose ,Details : http://wololo.net/2016/04/02/release-fully-operational-dlclose-exploit-linux-for-ps4-by-kr105/

[ Popular Software ]  Groovy, Scala and other JVM languages are as vulnerable as Java https://github.com/pwntester/JVMDeserialization #javadeser -> #jvmdeser #LetTheHungerGamesBegin

[ Popular Software ]  [SE-2012-01] Broken security fix in IBM Java 7/8 http://goo.gl/fb/njfLIN #FullDisclosure

[ Popular Software ]  New advisory! An UNC NTLM Relay issue @ nmonkee found in SAGE ERP 1000 during a security assessment! https://labs.mwrinfosecurity.com/advisories/sage-erp-1000/

[ ThreatIntelligence ]  The dangers of bad cyber threat intelligence programs - Help Net Security http://ow.ly/10g7Gm

[ Tools ]  Very handy binary visualisation tool "biteye" & "vix" http://actinid.org/vix/

[ Tools ]  Eli.Decode - tool to decode obfuscated shellcodes using the Unicorn engine https://github.com/DeveloppSoft/Eli.Decode

[ Web Security ]  [POC-Writeup] Obtaining Login Tokens for an Outlook, Office or Azure Account – via @ fin1te http://bgcd.co/1S3XNLv

[ Windows ]  EXD: An attack surface for Microsoft Office | Fortinet Blog http://ow.ly/10g8Vx