[ Browser ]  Mozilla to distrust WoSign and StartCom https://docs.google.com/document/d/1C6BlmbeQfn4a9zydVi2UvjBGv6szuSB4sMYUcVrR8vQ/preview

[ Conference ]  Derbycon 2016 Videos: http://www.irongeek.com/i.php?page=videos/derbycon6/mainlist

[ Detect ]  Introducing DeepBlue CLI : A PowerShell module for Hunt Teaming via Windows Event Logs : https://drive.google.com/file/d/0ByeHgv6rpa3gNU4wLVZKNjd4cTA/edit

[ Fuzzing ]  Project Springfield : Fuzz your code before hackers do https://www.microsoft.com/en-us/springfield/#examples

[ iOS ]  My slides "Malware wellbeing on iOS devices" https://dsec.ru/upload/medialibrary/29f/29f57cef406125e9169da733e1aaf83f.pdf

[ macOS ]  New #Unit42 research on Komplex: an OS X Trojan with links to #Sofacy group http://bit.ly/2d73xem

[ Others ]  New blog post: Diving into EMET https://www.insinuator.net/2016/09/diving-into-emet/

[ Others ]  Simple Guide to Finding a JavaScript Memory Leak in Node.js : https://www.alexkras.com/simple-guide-to-finding-a-javascript-memory-leak-in-node-js

[ Others ]  If you patched OpenSSL last week, do it again: https://www.openssl.org/news/secadv/20160926.txt :)

[ Pentest ]  Here are the slides from our talk on Mettle at @ derbycon, now with diagrams: http://www.slideshare.net/BrentCook2/static-pie-how-and-why-metasploits-new-posix-payload-mettle

[ Popular Software ]  MSI ntiolib.sys/winio.sys local privilege escalation http://blog.rewolf.pl/blog/?p=1630

[ Tools ]  Introducing MailSniper : A Tool For Searching Every User’s Email for Sensitive Data : http://www.blackhillsinfosec.com/?p=5296

[ Tools ]  from markdown to slides https://yhatt.github.io/marp/ #porn

[ Windows ]  A new version of my TpmInit UAC bypass tool (using PEB Masquerading) is available at https://github.com/Cn33liz/TpmInitUACBypass and https://t.co/GuiltQjE7j

[ Windows ]  New blog post about @breenmachine's Derby talk - Privilege Escalation from Service Accounts to SYSTEM in Windows https://t.co/ta0RTTaEMs

[ WirelessSecurity ]  气象卫星云图观测接收 MeteorologicalSatellite Observation And Receiving #SDR #HackRF #BladeRF http://blog.csdn.net/xdyegong/article/details/49851507 https://t.co/CnHdPzJlFn