[ Android ]  Android Banking Trojan First to Gain Root Privileges https://threatpost.com/android-banking-trojan-first-to-gain-root-privileges/120707/

[ Android ]  Great Android Security article. @ AndroidTamer thanks for sharing! https://androidtamer.com/learn_android_security

[ Browser ]  Browser Bug Searcher https://browser-issue-tracker-search.appspot.com/ ? a thing to ? for ? across all major browser vendor issue trackers. https://t.co/0jBV09Pw42

[ Browser ]  Apple Safari 10 (multiple remote code execution vulns) https://support.apple.com/en-us/HT207157

[ Crypto ]  Slides and videos from #whibox2016 are now available! https://www.cryptoexperts.com/whibox2016/ https://t.co/Whj80wMmUE

[ Crypto ]  Ruby OpenSSL + GCM Nonce Reuse Bug http://www.openwall.com/lists/oss-security/2016/09/19/9

[ Hardware ]  Remote Attack Tesla Motors: Video demonstration by Keen Security http://keenlab.tencent.com/en/2016/09/19/Keen-Security-Lab-of-Tencent-Car-Hacking-Research-Remote-Attack-to-Tesla-Cars/

[ Linux ]  "Anatomy of a Real Linux Intrusion Part II: OpenSSH trojanized toolkit" http://blog.angelalonso.es/2016/09/anatomy-of-real-linux-intrusion-part-ii.html (by @ Angelill0, based on MiTM SSH honeypot)

[ Malware ]  iSpy Keylogger Analysis | @ zscaler https://www.zscaler.com/blogs/research/ispy-keylogger

[ Mobile ]  Threat Analysis of Malicious Applications on Mobile Operating Systems : https://www.ernw.de/download/newsletter/ERNW_Newsletter_55_Threat_Analysis_v1.0_signed.pdf (pdf) cc @ Enno_Insinuator

[ Mobile ]  Mobile Security News Update September 2016 https://www.mulliner.org/blog/blosxom.cgi/security/mobile_security_news_update_sep2016.html <-- Very Android Heavy

[ Network ]  Link to my @ 44con slides on VLAN Hopping http://info-assure.co.uk/public_downloads/not-only-frogs-can-hop.pdf and the Frogger2 tool https://github.com/commonexploits/vlan-hopping

[ Network ]  A peek behind the great firewall of Russia #blogpost https://www.nccgroup.trust/uk/about-us/newsroom-and-events/blogs/2016/september/a-peek-behind-the-great-firewall-of-russia/

[ Others ]  North Korea accidentally leaks DNS for .kp: only 28 domains https://github.com/mandatoryprogrammer/NorthKoreaDNSLeak

[ Others ]  When students are sent to modify a modern JIT engine: http://www.cs.cmu.edu/~auc/CompilersReport.pdf

[ Others ]  Oh noes!!!11! They put WebKit into Emacs: https://www.reddit.com/r/emacs/comments/4srze9/watching_youtube_inside_emacs_25/

[ Others ]  RCE exploit found in Metasploit itself, delighting irony lovers everywhere : https://github.com/justinsteven/advisories/blob/master/2016_metasploit_rce_static_key_deserialization.md

[ Popular Software ]  Hacking WordPress Sites on Shared Servers https://blog.sucuri.net/2016/09/hacking-wordpress-sites-shared-servers.html

[ SecurityProduct ]  RogueKiller, Inside WMI Scanner http://www.adlice.com/roguekiller-inside-wmi-scanner/

[ SecurityProduct ]  More Symantec and Norton remote code execution vulnerabilities fixed today, full advisory is here. https://www.symantec.com/security_response/securityupdates/detail.jsp?fid=security_advisory&pvid=security_advisory&year=&suid=20160919_00

[ Tools ]  A quick slides on why we created Keypatch assembler for IDA, and how this tool is designed &amp; implemented: https://t.co/ikBXn9kKmD

[ Windows ]  My last writeup "Microsoft Windows usp10.dll "GetFontDesc()" Integer Underflow Vulnerability": http://blogs.flexerasoftware.com/vulnerability-management/2015/12/vulnerability-in-microsofts-unicode-scripts-processor-allows-execution-of-arbitrary-code.html

[ Windows ]  Jason Shirk on "PowerShell Engine Enhancements" https://msdn.microsoft.com/en-us/powershell/wmf/5.1/features-scenarios-cache/ps-engine-enhancements

[ WirelessSecurity ]  LTE MOBILITY SECURITY AND VIRTUALIZATION [PDF] http://www.ee.columbia.edu/~roger/LTE_security_tutorial_ICC_May_2016.pdf #LTE #SDR https://t.co/xXmCcuuORJ

[ WirelessSecurity ]  srsUE:Open source software radio 3GPP LTE UE https://github.com/srslte/srsue #bladeRF #SDR #LTE

[ WirelessSecurity ]  MANA Toolkit – Rogue Access Point (evilAP) And MiTM Attack Tool http://www.darknet.org.uk/2016/09/mana-toolkit-rogue-access-point-evilap-mitm-attack-tool/

[ WirelessSecurity ]  Spooftooph - Automated Tool for Spoofing or Cloning Bluetooth Device http://ethicalhackingnews.blogspot.jp/2013/02/spooftooph-automated-tool-for-spoofing.html https://t.co/kimQUvU1S1

[ WirelessSecurity ]  Guide to Bluetooth Security [PDF] http://large.stanford.edu/courses/2012/ph250/roth1/docs/890066.pdf #Bluetooth #Checklist #IoT https://t.co/qNzsHvCScE