[ Android ]  How I defeated an obfuscated and anti-tamper APK with some Python and a home-made Smali emulator : https://www.evilsocket.net/2016/04/18/how-i-defeated-an-obfuscated-and-anti-tamper-apk-with-some-python-and-a-home-made-smali-emulator/

[ Attack ]  New post: “Operation C-Major” Actors Also Used Android, BlackBerry Mobile Spyware Against Targets http://bit.ly/1Wb4EbY @ TrendMicro

[ Attack ]  Over the last year Google detected nearly 800,000 compromised websites. #big #number https://security.googleblog.com/2016/04/helping-webmasters-re-secure-their-sites.html

[ Attack ]  How I hacked my local ISP and some general advice/learnings. https://blog.harshillodhi.co.in/how-i-hacked-into-my-isp-and-what-i-learnt-in-the-process/

[ Attack ]  Between Hong Kong and Burma: Tracking UP007 and SLServer Espionage Campaigns https://citizenlab.org/2016/04/between-hong-kong-and-burma/

[ Exploit ]  Dynamic or live demonstration of classical exploitation techniques of typical memory corruption vulnerabilities https://github.com/NoviceLive/bintut

[ Hardware ]  #GSM "Hacking as Transgressive Infrastructuring": Interesting paper about #Osmocom and other GSM hacks around #CCC http://mkorn.binaervarianz.de/pub/korn-cscw2016.pdf

[ iOS ]  su-a-cyder - An Home-Brewed iOS Malware PoC Generator https://github.com/Mi3Security/su-a-cyder

[ Mac OS X ]  Remote code execution, git, and OS X http://rachelbythebay.com/w/2016/04/17/unprotected/

[ Malware ]  MMD-0053-2016 - A bit about ELF/STD IRC Bot: x00's CBack aka xxx.pokemon(.)inc http://blog.malwaremustdie.org/2016/04/mmd-0053-2016-bit-about-elfstd-irc-bot.html

[ Malware ]  Dissection of an obfuscated PHP script used for spamming : https://jelleraaijmakers.nl/2016/04/dissecting-spammers-spam-script https://t.co/TnU4KOqUxP

[ Malware ]  Powershell - A boon or Curse : Malware Created with Microsoft PowerShell Is on the Rise : https://www.carbonblack.com/wp-content/uploads/2016/04/Cb-Powershell-Deep-Dive-A-United-Threat-Research-Report-1.pdf (pdf)

[ OpenSourceProject ]  [SuggestedReading] Bypassing password authentication of users that have 2FA enabled http://ift.tt/1NxBXz6

[ Others ]  60 Minutes overtime footage of our phone hacking: http://www.cbsnews.com/news/60-minutes-overtime-how-strangers-can-hack-the-phone-in-your-pocket/

[ Others ]  WhatsApp vs Telegram | Fortinet Blog http://ow.ly/4mOITU

[ Others ]  On the SS7 network, probably worth revisiting @ DonAndrewBailey & @ nickdepetrillo's 2010 We Found Carmen San Diego https://infocon.org/cons/SOURCE/SOURCE%20Boston%202010/Presentation%20Slides/carmen.pdf

[ Others ]  Seeing a lot of traffic around an Android app deobfuscation blog post compels me to remind everyone about https://github.com/CalebFenton/simplify

[ Others ]  Securely Implementing (De)Serialization in PHP https://paragonie.com/blog/2016/04/securely-implementing-de-serialization-in-php

[ Others ]  Understanding ysoserial's CommonsCollections1 exploit http://gursevkalra.blogspot.gr/2016/01/ysoserial-commonscollections1-exploit.html

[ Others ]  Finding security bugs in web applications using domain-specific static analysis https://dspace.mit.edu/handle/1721.1/99841#files-area

[ Others ]  A look inside Hacking Team's Latin American empire. https://motherboard.vice.com/read/hacking-team-illegal-latin-american-empire https://t.co/lUNfa01rhP

[ Tools ]  Just pushed my Rust bindings for @ unicorn_engine on crates.io : https://crates.io/crates/unicorn https://github.com/ekse/unicorn-rs

[ Tools ]  New @ MIT scanner finds web app flaws in a minute - http://ow.ly/4mPwOI

[ Web Security ]  Wordpress Plugins jQuery Html5 File Upload https://cxsecurity.com/issue/WLB-2016040121

[ Web Security ]  Experts discovered a number of flaws in the Avactis PHP Shopping Cart http://securityaffairs.co/wordpress/46431/hacking/avactis-php-shopping-cart-flaws.html

[ Web Security ]  Oooh. http://bugs.chromium.org has deployed Content Security Policy with an experimental 'unsafe-dynamic' expression. https://w3c.github.io/webappsec-csp/#unsafe-dynamic-usage

[ Windows ]  Passwords for zip archives opened with Windows Explorer in Win8.x/10 are automatically cached. #facepalm http://goo.gl/4WXTQc