[ Attack ]  Just released! The 2016 Symantec Internet Security Threat Report. The details: http://symc.ly/1XsTQVc #SymantecISTR https://t.co/fpg8MeO7AV

[ Attack ]  2013 DDoS Attacks on US Banking Sector Used Sweden's Military Servers http://ow.ly/10z8QZ

[ Browser ]  Microsoft Edge supports an early version of the Web Authentication spec. Log in with your face or finger! Read more https://blogs.windows.com/msedgedev/2016/04/12/a-world-without-passwords-windows-hello-in-microsoft-edge/

[ Defend ]  Intel® Software Guard Extensions SDK for Linux* Availability Update: Whenever I talk with developers about Int... http://intel.ly/23qiOMa

[ iOS ]  Just updated #libirecovery to support iPhone SE and iPad Pro (9.7 inch) https://github.com/libimobiledevice/libirecovery.git

[ Malware ]  Rokku Ransomware shows possible link with Chimera : https://blog.malwarebytes.org/threat-analysis/2016/04/rokku-ransomware/ cc: @ hasherezade || @ Malwarebytes https://t.co/d3NafG9KQv

[ Malware ]  New post: ATM Malware on the Rise http://bit.ly/1T1iECo @ TrendMicro

[ Malware ]  C&C Flaw Offers Glimpse into Dridex Operations | http://SecurityWeek.Com http://ow.ly/10xifI

[ Malware ]  Manamecrypt – a ransomware that takes a different route https://blog.gdatasoftware.com/2016/04/28234-manamecrypt-a-ransomware-that-takes-a-different-route

[ Malware ]  New Locky Variant Implements Evasion Techniques : http://blog.checkpoint.com/2016/04/11/new-locky-variant-implements-evasion-techniques/ https://t.co/PAudFTxiOV

[ Malware ]  A great summary of Android Ransomware techniques and ecosystem by my ex-colleague Qing Dong: http://blogs.360.cn/360mobile/2016/04/12/analysis_of_mobile_ransomware/ (in Chinese)

[ Malware ]  ZeuS banking Trojan resurfaces as #Atmos variant - https://threatpost.com/zeus-banking-trojan-resurfaces-as-atmos-variant/117344/

[ MalwareAnalysis ]  Using reverse engineering techniques to see how a common malware packer works https://labs.detectify.com/2016/04/12/using-reverse-engineering-techniques-to-see-how-a-common-malware-packer-works/

[ Network ]  Clandestine DNS lookups with gdns http://rud.is/b/2016/04/11/clandestine-dns-lookups-with-gdns/

[ Others ]  Static Identification of Program Behavior using Sequences of API Calls - https://insights.sei.cmu.edu/sei_blog/2016/04/static-identification-of-program-behavior-using-sequences-of-api-calls.html

[ Others ]  Control Flow Hardening with Program Counter Encoding for ARM® Processor Architecture http://www.inase.org/library/2015/crete/COCI.pdf#page=32

[ Others ]  #infiltrate Java deserialization vuls by @ matthias_kaiser http://www.slideshare.net/codewhitesec/java-deserialization-vulnerabilities-the-forgotten-bug-class [tragedy in 4 acts, more to come] https://t.co/BS6nj8cBSM

[ Others ]  Exploiting PHP Serialization/Object Injection Vulnerabilities : https://crowdshield.com/blog.php?name=exploiting-php-serialization-object-injection-vulnerabilities cc: @ crowdshield

[ Others ]  Why MAC Address Randomization is not Enough : An Analysis of Wi-Fi Network Discovery Mechanisms : http://papers.mathyvanhoef.com/asiaccs2016.pdf (pdf)

[ Pentest ]  Getting the goods with CrackMapExec (Part 1) : https://byt3bl33d3r.github.io/getting-the-goods-with-crackmapexec-part-1.html cc: @ byt3bl33d3r

[ Popular Software ]  Links to my @ InfiltrateCon and @ SyScan360 slide decks about Pwning Adobe Reader with XFA are now online on our blog http://siberas.blogspot.de

[ Popular Software ]  [SE-2012-01] Yet another broken security fix in IBM Java 7/8 http://goo.gl/fb/aoA1kv #FullDisclosure

[ Programming ]  Visual C++ for Linux and Raspberry Pi Development via @ shanselman http://bit.ly/1VeF9Hm @ shanselman #vs2015 https://t.co/dEn73nYGYM

[ ReverseEngineering ]  Reverse of a Mifair Laundry card system (github) https://github.com/LesMargoulins/Margoulineur2000

[ Tools ]  GEF - Multi-Architecture GDB Enhanced Features for Exploiters & Reverse-Engineers http://bit.ly/1qJAgtQ #infosec #hacking #pentest #tech

[ Tools ]  A new Metasploit module from @ ukstufus for generating CSV org charts from AD https://github.com/rapid7/metasploit-framework/pull/6377 https://t.co/diVQcuEkBK

[ Web Security ]  Git All the Payloads! A collection of web attack payloads: https://github.com/foospidy/payloads

[ Windows ]  #MSFT releases 13 bulletins for 30 CVEs - MS16-039 under active attack. Plus a fix for a NTLM MiTM with a name. https://technet.microsoft.com/library/security/ms16-apr

[ Windows ]  On #Badlock for Samba (CVE-2016-2118) and Windows (CVE-2016-0128): https://community.rapid7.com/community/infosec/blog/2016/04/12/on-badlock-cve-2016-2118-for-samba-and-windows via @ todb https://t.co/Wua23vJ5kG