[ Android ]  The evolution of mobile ransomware https://blog.avast.com/the-evolution-of-mobile-ransomware

[ Android ]  Trojan found in more than 100 Android apps on Google Play Store https://www.grahamcluley.com/2016/04/advertising-trojan-100-android-apps-google-play-store/

[ Attack ]  Financial Trojan detection has dropped, but the #malware family upped their game. Read on: http://symc.ly/1UVKgws https://t.co/noAyR75yOI

[ Browser ]  New write-up by @ avlidienbrunn: CSP: bypassing form-action with reflected XSS http://labs.detectify.com/2016/04/04/csp-bypassing-form-action-with-reflected-xss/ https://t.co/lW4uKFgc4E

[ Defend ]  Security Rules for Email: https://matt.sh/security-rules-for-email

[ Fuzzing ]  I'm doing a talk with @ 4c1d3 on Linux filesystem fuzzing using @ lcamtuf's AFL at Vault 2016: http://sched.co/68kL http://events.linuxfoundation.org/sites/events/files/slides/AFL%20filesystem%20fuzzing%2C%20Vault%202016.pdf

[ iOS ]  New blog post: Enabling Serial I/O on iOS Devices http://embeddedideation.com/2016/04/06/enabling-serial-io-on-ios-devices/

[ Linux ]  CVE-2016-3672 - Unlimiting the stack not longer disables ASLR http://goo.gl/fb/do7eI3 #FullDisclosure

[ Linux ]  Ubuntu Patches Kernel Vulnerabilities https://threatpost.com/ubuntu-patches-kernel-vulnerabilities/117229/

[ Mac OS X ]  Our 1st guest blog post: 'Analysis of an Intrusive Cross-Platform Adware; OSX/Pirrit' ->https://objective-see.com/blog.html Mahalo @ 0xAmit! #OSXAdware

[ Malware ]  Samsam may signal a new trend of targeted ransomware http://www.symantec.com/connect/ko/blogs/samsam-may-signal-new-trend-targeted-ransomware

[ Malware ]  Decrypting PowerWare Ransomware https://www.alienvault.com/open-threat-exchange/blog/powerware-or-poshcoder-comparison-and-decryption

[ Operating System ]  Subgraph OS: A hardened OS that prioritizes security http://ow.ly/10jQQu

[ Others ]  USB key drop study is here: https://zakird.com/papers/usb.pdf

[ Others ]  Rupture, "A framework for BREACH and other compression-based crypto attacks" https://github.com/dionyziz/rupture from BH Asia https://www.blackhat.com/docs/asia-16/materials/asia-16-Karakostas-Practical-New-Developments-In-The-BREACH-Attack.pdf

[ Others ]  Safe Clearing of Private Data. http://www.viva64.com/en/b/0388/ (#cpp, #memset, #security, #securecoding, #vulnerability) https://t.co/Ogws4M926s

[ Popular Software ]  Flash CVE-2016-1019 being actively exploited, advisory: https://helpx.adobe.com/security/products/flash-player/apsa16-01.html with credits to @ kafeine and @ _clem1

[ Popular Software ]  New post: A Root Cause Analysis of the Recent Flash Zero-Day Vulnerability, CVE-2016-1010 http://bit.ly/22bCgX4 @ TrendMicro

[ SecurityProduct ]  Panda Security 2016 Home User Products - Privilege Escalation http://goo.gl/fb/Je55rf #FullDisclosure

[ ThirdParty ]  new SSL test framework in OpenSSL https://github.com/openssl/openssl/commit/453dfd8d5ee0893146e0fb61a5978ab59ba95c01

[ Tools ]  Usercorn is a fantastic binary emulator using Unicorn engine! Try to see its magic: https://github.com/lunixbochs/usercorn https://twitter.com/lunixbochs/status/717584959565762560

[ Tools ]  New post and tool! ADOffline written by @ ukstufus, details on creating the offline SQL database from AD at https://labs.mwrinfosecurity.com/blog/offline-querying-of-active-directory

[ Tools ]  Aggressor Script’s Secret mIRC Scripting Past http://blog.cobaltstrike.com/2016/04/06/aggressor-scripts-secret-mirc-scripting-past/ https://t.co/dXEGCju8kT

[ Tools ]  My newest post! Advanced Burp Suite #cybersecurity #infosec @ Burp_Suite http://hack-ed.net/2016/04/02/advanced-burp-suite/

[ Tools ]  Python Decoders for Common Remote Access Trojans https://github.com/kevthehermit/RATDecoders #RE #malware

[ Tools ]  Smile - Statistical Machine Intelligence and Learning Engine http://buff.ly/1S0tbAX

[ Web Security ]  XSS Attacks through PATH https://speakerdeck.com/masatokinugawa/xss-attacks-through-path

[ Web Security ]  Operating System Based Redirection with Apache mod_rewrite https://bluescreenofjeff.com/2016-04-05-operating-system-based-redirection-with-apache-mod_rewrite/ (post #3 of Strengthening Your Phishing with mod_rewrite)

[ Windows ]  WMI Persistence http://windowsir.blogspot.com.tr/2016/04/cool-stuff-re-wmi-persistence.html #DFIR #infosec