[ Android ]  While working on something, found this article on Android kernel security — https://github.com/ukanth/afwall/wiki/Kernel-security

[ Android ]  WhatsApp Encryption Overview: Technical white paper https://www.whatsapp.com/security/WhatsApp-Security-Whitepaper.pdf [PDF] https://t.co/yGVMtak0Gy

[ Attack ]  A list of compromised databases, http://vigilante.pw/

[ Attack ]  Take a trip around the #cybecriminal world with our latest research: http://bit.ly/25gA1pI https://t.co/PlcRQpZDPA

[ Attack ]  APT6 compromised the US government networks for years http://securityaffairs.co/wordpress/46013/cyber-warfare-2/apt6-state-sponsored-hackers.html

[ Browser ]  MSIE MSHTML!CSVGHelpers::SetAttributeStringAndPointer Use-After-Free https://packetstormsecurity.com/files/136544/GS20160404172619.tgz

[ Browser ]  2,000 Firefox extensions vulnerable to reuse flaw - http://ow.ly/10iXxd

[ Challenges ]  #0ctf 2016 boomshakalaka writeup - http://ele7enxxh.com/0ctf-2016-boomshakalaka-writeup.html

[ Challenges ]  #bctf 2016 LostFlower writeup - http://ele7enxxh.com/bctf-2016-LostFlower-writeup.html

[ Challenges ]  #0ctf 2016 State of the ART writeup - http://ele7enxxh.com/0ctf-2016-State-of-the-ART-writeup.html

[ Crypto ]  TLS Client Pitfalls https://lukasa.co.uk/2016/04/In_Response_To_Sucuri/

[ Exploit ]  Exploiting Buffer Overflows on MIPS Architectures : https://www.exploit-db.com/docs/39658.pdf (pdf)

[ iOS ]  Apple iOS 9.3.1 (iPhone 6S & iPhone Plus) - (3D Touch) Passcode Bypass Vulnerability http://seclists.org/fulldisclosure/2016/Apr/19

[ Linux ]  More than you ever wanted to know about Linux system calls http://blog.packagecloud.io/eng/2016/04/05/the-definitive-guide-to-linux-system-calls/

[ Linux ]  Oh yay, fixing CVE-2015-1805 lead to CVE-2016-0774 how nice! https://bugzilla.redhat.com/show_bug.cgi?id=1303961

[ Malware ]  Technical Dive into a Hardened Phish Kit http://blog.phishlabs.com/technical-dive-into-a-hardened-phish-kit

[ Malware ]  New post on the personalized emails we've seen delivering Nymaim, Ursnif, Dridex, etc. https://www.proofpoint.com/us/threat-insight/post/phish-scales-malicious-actor-target-execs IOCs: https://www.proofpoint.com/sites/default/files/proofpoint-personalized-actor-iocs.pdf

[ Malware ]  Analysis of the Locky infection process http://www.welivesecurity.com/2016/04/04/analysis-of-the-locky-infection-process/

[ Others ]  GPG signature verification on github - https://github.com/blog/2144-gpg-signature-verification

[ Others ]  WhatsApp Adds End-to-End Encryption To One Billion Users: https://threatpost.com/whatsapp-adds-end-to-end-encryption-to-one-billion-users/117213/ via @ threatpost

[ Others ]  Pinpointing and Hiding Surprising Fragments in an Obfuscated Program https://www.cs.auckland.ac.nz/~cthombor/Pubs/swprot/pprew5-stealth.pdf

[ Others ]  Interesting read: “Remote #IOC scanning with #Powershell” by @ CyberForce_Be: http://www.cyberforce.be/blog/remote-ioc-scanning-powershell #DFIR

[ Pentest ]  Meterpreter New Windows PowerShell Extension http://www.darkoperator.com/blog/2016/4/2/meterpreter-new-windows-powershell-extension #PowerShell #Metasploit #Meterpreter

[ Popular Software ]  Nice java deserialization info collection https://github.com/GrrrDog/Java-Deserialization-Cheat-Sheet

[ Popular Software ]  Dameware Mini Remote Control 0day POC http://zpr.io/hwdV #InfoSec

[ Popular Software ]  Adobe to release an emergency Flash Player update this week for a vuln under attack: https://threatpost.com/emergency-update-coming-for-flash-vulnerability-under-attack/117219/ via @ threatpost

[ SecurityProduct ]  Panda Security Multiple Business Products – Privilege Escalation https://www.nettitude.co.uk/panda-security-multiple-business-products-privilege-escalation/

[ Tools ]  @ halvarflake I got slides from organisers — https://www.area41.io/downloads/slides/thomas_dullien_heap_visualisation_tools.pdf

[ Tools ]  The Swift bindings for Frida are ready to be used! https://github.com/frida/frida-swift #ios #re

[ Web Security ]  Pwncloud – bad crypto in the Owncloud encryption module https://blog.hboeck.de/archives/880-Pwncloud-bad-crypto-in-the-Owncloud-encryption-module.html

[ Windows ]  Did you know: Using Drag/drop from your mail client may defeat Windows security? https://textplain.wordpress.com/2016/04/04/downloads-and-the-mark-of-the-web/

[ Windows ]  New publication released: "Windows Kernel Exploitation 101: Exploiting CVE-2014-411" by @ _samdb_ https://labs.mwrinfosecurity.com/publications/windows-kernel-exploitation-101-exploiting-cve-2014-411/