[ Android ]  All of the presentation materials for the Android browser @ InfiltrateCon talk can be found here - https://github.com/LifeForm-Labs/all_your_browsers_belong_to_us

[ Android ]  Release a PoC for CVE-2016-0846, IMemory bug leak to arbitrary memory read/write, first reported by @ tiraniddo https://github.com/secmob/CVE-2016-0846

[ Android ]  New advisory released: A Bluetooth pairing authentication bypass in Android discovered by @ bouuntyyy https://labs.mwrinfosecurity.com/advisories/bluetooth-pairing-authentication-bypass/

[ Attack ]  New Blog Post - PHP Files in CMS, Targeted for Alteration ^AF http://blog.jpcert.or.jp/2016/04/php-files-in-cms-targeted-for-alteration.html

[ Browser ]  ZDI-16-224: Google Chrome libANGLE glGetUniformfv Buffer Overflow Remote Code Execution Vulnerability http://www.zerodayinitiative.com/advisories/ZDI-16-224/

[ Browser ]  Here are my "On the Security of Browser Extensions" slides: http://stuff.iceqll.eu/slides/2016-on-the-security-of-browser-exts/

[ Cloud ]  New on our AWS #BigData Blog: "Encrypt Your Amazon Redshift Loads with Amazon S3 & AWS KMS" http://amzn.to/1YhZPwj https://t.co/RqbEN1CAqU

[ Crypto ]  TLSkex : Harnessing virtual machine introspection for decrypting TLS communication : http://www.dfrws.org/2016eu/proceedings/DFRWS-EU-2016-12.pdf (pdf)

[ Firmware ]  #NDSS2016 FIRMADYNE: Dynamic analysis of 23k embedded firmware https://www.internetsociety.org/sites/default/files/07_1-ndss2016-slides.pdf [git https://github.com/firmadyne https://t.co/kI07YRDPIZ

[ Forensics ]  Automatic profile generation for live Linux Memory analysis : http://www.dfrws.org/2016eu/proceedings/DFRWS-EU-2016-2.pdf (pdf)

[ Hardware ]  Turns out you can run a USB device in "promiscuous" mode. Check out our new work http://static.securegoose.org/papers/uscramble_cr.pdf @ sictune https://t.co/B2mCpZDNnV

[ Hardware ]  Neat find @ dklinedinst http://www.kb.cert.org/vuls/id/615456

[ Industry News ]  Govt Bug Bounty program - Peter Cook http://www.defense.gov/News/News-Releases/News-Release-View/Article/709818/statement-by-pentagon-press-secretary-peter-cook-on-dods-partnership-with-hacke#.VwdUVG-c3gU.twitter

[ Malware ]  Cylance Quick Brief: TeslaCrypt 4.0 https://blog.cylance.com/cylance-quick-brief-teslacrypt-4.0

[ Malware ]  ModPOS: A Framework Lurking in Point-of-Sale System Kernels http://labs.lastline.com/modpos-a-framework-lurking-in-point-of-sale-system-kernels

[ Network ]  "El flagelo del ID numérico" Slides de la presentación en PROTOSEC 2016 [PDF en inglés] http://www.fundacionsadosky.org.ar/pub/2016-03-30-Protosec2016-iarce.pdf

[ NetworkDevice ]  Juniper removes Dual_EC from ScreenOS. https://threatpost.com/juniper-completes-removal-of-dual_ec/117297/ via @ threatpost

[ Others ]  Attacks on Biometric Systems : A Case Study in Fingerprints : http://citeseerx.ist.psu.edu/viewdoc/download?doi=10.1.1.10.7168&rep=rep1&type=pdf (pdf)

[ Others ]  The #DeepLearning textbook is now complete! Check it out. #MachineLearning http://www.deeplearningbook.org/ https://t.co/25tkmfTcwP

[ Others ]  Breaking Semantic Image CAPTCHAs - Schneier on Security https://www.schneier.com/blog/archives/2016/04/breaking_semant.html

[ Others ]  #Unit42 finds #Locky #ransomware, #TeslaCrypt, & other #malware families use new tool to evade detection http://bit.ly/1qcp3RI

[ Popular Software ]  Killing a zero-day in the egg: Adobe CVE-2016-1019 - https://www.proofpoint.com/us/threat-insight/post/killing-zero-day-in-the-egg https://t.co/QWLR0NVM6j

[ Popular Software ]  #Adobe #Flash Player #security updates available (APSB16-10) - details @ http://adobe.ly/1VbLVh1

[ Popular Software ]  ZDI-16-228: (Pwn2Own) Adobe Flash JPEG-XR Parsing Stack Buffer Overflow Remote Code Execution Vulnerability http://www.zerodayinitiative.com/advisories/ZDI-16-228/

[ Tools ]  .@ _fel1x shared a cool tool for efficient, high-speed memory tracing: http://simutrace.org/

[ Tools ]  Pazuzu: reflective DLL to run binaries from memory http://www.shelliscoming.com/2016/04/pazuzu-reflective-dll-to-run-binaries.html

[ Tools ]  I wrote a simple IOCTL decoder to demonstrate how to parse binary data using bit math in #PowerShell. https://gist.github.com/mattifestation/844d01bd5c378f9b1f52d76219deaf0f

[ Tools ]  We're releasing our tools for collecting kernel logs from our servers, check it out here: https://github.com/facebook/fbkutils

[ Tools ]  WAFW00F allows one to identify and fingerprint Web Application Firewall (WAF) products protecting a website https://github.com/sandrogauci/wafw00f

[ Tools ]  Hack all the IPV6 things... (H/T @ DaveMarcus) https://goo.gl/y1dfm7