[ Attack ]  #Unit42 finds new Poison Ivy RAT dubbed #SPIVY targeting Hong Kong pro-Democracy activists http://bit.ly/1NngT3t

[ Attack ]  Nuclear Exploit Kit Service Cashes In With Ransomware https://packetstormsecurity.com/news/view/26563/Nuclear-Exploit-Kit-Service-Cashes-In-With-Ransomware.html

[ Browser ]  Here's how the new #Opera "#VPN" works behind the curtains, including captured API calls when the "VPN" is set up: https://gist.github.com/spaze/558b7c4cd81afa7c857381254ae7bd10

[ Hardware ]  Hardware Reverse Engineering : Access, Analyze, & Defeat : https://media.blackhat.com/bh-dc-11/Grand/BlackHat_DC_2011_Grand-Workshop.pdf (pdf) #b2b

[ Linux ]  Update on the [Linux] Kernel Self Protection Project by @ kees_cook : https://outflux.net/slides/2016/cs/kspp.pdf -- "Killing bug classes is better"

[ Malware ]  A case study of a recent ransomware attack : https://community.rsa.com/community/products/security-analytics/blog/2016/04/18/held-for-ransom-a-case-study-of-a-recent-ransomware-attack

[ Malware ]  New downloader for #Locky malware http://bddy.me/1XMDDdP #ransomware https://t.co/o8K9pwhSMX

[ Malware ]  Added Nivdort to monitoring system https://intel.malwaretech.com/botnet/nivdort_dga

[ Malware ]  PowerShell Used For Spreading Trojan.Laziok Through Google Docs https://www.fireeye.com/blog/threat-research/2016/04/powershell_used_for.html #DFIR #infosec

[ Obfuscation ]  Symbolic Execution of Obfuscated Code https://www.cs.arizona.edu/people/debray/Publications/ccs2015-symbolic.pdf

[ Others ]  PS4 WebKit exp looks awesome, https://github.com/Fire30/PS4-2014-1303-POC/blob/master/pcsploit.html, reminding of my talk on Blackhat EU 2014: https://www.blackhat.com/eu-14/briefings.html#webkit-everywhere-secure-or-not

[ Others ]  Just Published: 1 Million People use Facebook over Tor https://www.facebook.com/notes/facebook-over-tor/1-million-people-use-facebook-over-tor/865624066877648

[ Others ]  Hacking Nagios: The Importance of System Hardening https://blog.anitian.com/hacking-nagios/ (3rd party plugin actually not nagios)

[ Others ]  The little black book of Computer viruses : http://www.cin.ufpe.br/~mwsa/arquivos/THE_LITTLE_BLACK__BOOK_OF_C.PDF (pdf) #b2b

[ Pentest ]  Offensive Active Directory (With PowerShell!) : http://www.slideshare.net/harmj0y/psconfeu-offensive-active-directory-with-powershell (Slides) cc: @ harmj0y

[ Pentest ]  GitHub - leonjza/qrxfer: Transfer files from Air gapped machines using QR codes https://github.com/leonjza/qrxfer

[ Tools ]  (State of) The Art of War : Offensive Techniques in Binary Analysis : https://www.cs.ucsb.edu/~vigna/publications/2016_SP_angrSoK.pdf (pdf)

[ Tools ]  OSBoxes – Virtual Machines for VirtualBox and VMware : http://www.osboxes.org/

[ Tools ]  Slides: "Malware Analysis with Vivisect" http://nest.unm.edu/files/5514/1254/9114/Malware_Analysis_with_Vivsect.pdf

[ Windows ]  More improvements in Narrator on Windows 10... @ Microsoft seriously giving it some! https://blogs.msdn.microsoft.com/accessibility/2016/04/11/improvements-to-narrator-in-windows-10/?platform=hootsuite

[ Windows ]  Cool Write up on the regsvr32 bypass thing. http://drops.wooyun.org/tips/15124

[ Windows ]  @ byt3bl33d3r @ subTee link to the module https://github.com/byt3bl33d3r/CrackMapExec/blob/master/modules/code_execution/bypass/com_exec.py

[ Windows ]  Hyper-V Architecture - https://msdn.microsoft.com/en-us/library/cc768520%28v=bts.10%29.aspx