[ Android ]  New post on a vulnerability I found in the #Android Blackphone (BP1) is now up https://www.sentinelone.com/blog/vulnerability-in-blackphone-puts-devices-at-risk-for-takeover/ CVE-2015-6841

[ Attrack ]  SMS Phishing Campaign Spreads in China https://blogs.mcafee.com/mcafee-labs/sms-phishing-campaign-spreads-china/

[ Attrack ]  Part two of our analysis of a phishing campaign targeting financial data theft in the healthcare field http://ow.ly/WIDTh #infosec

[ Browser ]  In IE11 (latest docmode), the event handling for passive elements depends on "markup quality" (i.e. quirks mode): http://pastebin.com/raw/BSGDKYUn

[ Defend ]  Protecting Windows Networks - Applocker : http://dfir-blog.com/2016/01/03/protecting-windows-networks-applocker/

[ Detect ]  Malicious PDF Analysis : http://blog.didierstevens.com/2010/09/26/free-malicious-pdf-analysis-e-book/ cc: @ DidierStevens #b2b (E-book/pdf)

[ Forensics ]  NTFS Forensics : A Programmers View of Raw Filesystem Data Extraction : http://grayscale-research.org/new/pdfs/NTFS%20forensics.pdf

[ Forensics ]  File system forensic Analysis : http://www.campus64.com/digital_learning/data/cyber_forensics_essentials/info_file_system_forensic_analysis.pdf (pdf) #b2b

[ Hardware ]  GunCon3 Reversing and Linux Driver https://beardypig.github.io/2016/01/06/guncon3/

[ Linux ]  [local] - Ubuntu 14.04 LTS, 15.10 overlayfs - Local Root Exploit: Ubuntu 14.04 LTS, 15.10 overlayfs - Local Ro... http://bit.ly/1mzKFGg

[ Malware ]  New TeslaCrypt Ransomware Arrives via Spam https://blogs.mcafee.com/mcafee-labs/new-teslacrypt-ransomware-arrives-via-spam/

[ Malware ]  Destructive Disakil malware linked to Ukraine power outages : http://www.symantec.com/connect/blogs/destructive-disakil-malware-linked-ukraine-power-outages-also-used-against-media-organizations ,Sample : https://ics.sans.org/blog/2016/01/01/potential-sample-of-malware-from-the-ukrainian-cyber-attack-uncovered

[ Malware ]  Yet Another Signed Malware - Spymel http://research.zscaler.com/2016/01/yet-another-signed-malware-spymel.html

[ Network ]  New post: Let’s Encrypt Now Being Abused By Malvertisers http://bit.ly/1TEMwDY @ TrendMicro

[ Network ]  Running a Hidden Tor Service with Docker Compose : http://randywestergren.com/running-a-hidden-tor-service-with-docker-compose/

[ Network ]  Scanning the Internet for backdoored ScreenOS devices: some statistics and tales of evading honeypots http://blog.whatever.io/2016/01/06/scanning-the-internet-for-backdoored-screenos-devices-some-statistics-and-tales-of-evading-honeypots/

[ Others ]  Unauthenticated remote code execution in OpenMRS http://goo.gl/fb/iPuRtN #FullDisclosure

[ Others ]  Analysis Of A Corrupt OLE File : http://videos.didierstevens.com/2015/12/30/analysis-of-a-corrupt-ole-file/ cc: @ DidierStevens

[ Others ]  MEDCIN Engine Exploitation – Part 2 (CVE-2015-2898-2901, CVE-2015-6006) https://www.securifera.com/blog/2016/01/06/medcin-engine-exploitation-part-2-cve-2015-2898-2901-cve-2015-6006/

[ Others ]  Security Analysis of VoLTE, Part 1 https://www.insinuator.net/2016/01/security-analysis-of-volte-part-1/

[ Others ]  Security experts disclosed SCADAPASS, a list of default credentials for ICS and SCADA systems http://securityaffairs.co/wordpress/43344/hacking/experts-disclosed-scadapass.html

[ Others ]  Monads to Machine Code (Part 1) - JIT compilation to x86 machine code in Haskell http://www.stephendiehl.com/posts/monads_machine_code.html

[ Popular Software ]  Kaspersky Labs DLL Hijacking https://cxsecurity.com/issue/WLB-2016010022

[ ReverseEngineering ]  Reverse Engineering for Malware Analysis - cheat sheet wallpaper : http://r00ted.com/cheat%20sheet%20reverse%20v5.png cc: @ r00tbsd

[ Tools ]  ViDi (Visual Disassembler) - tool for static analysis of PE files : https://hshrzd.wordpress.com/vidi-visual-disassembler/ cc:@ hasherezade https://t.co/8Xh4Sb3QSM

[ Tools ]  Writing a Malware Config Parser Using Radare2 and Ruby http://www.morphick.com/blog/2016/1/6/writing-a-malware-config-parser-using-radare2-and-ruby

[ Tools ]  Frida-cfg-hook - instrumentation script which leverages CFG to intercept indirect calls in CFG-enabled Win binaries https://github.com/fdfalcon/frida-cfg-hook

[ Tools ]  We wrapped up #Unit42's series on how to use #IDAPython to make your life easier. Part 4: http://bit.ly/1Rj73AG @ jgrunzweig @ Unit42_Intel

[ Vulnerability ]  Signature forgery vulnerability in python-rsa : https://blog.filippo.io/bleichenbacher-06-signature-forgery-in-python-rsa/ //CVE-2016-1494 cc: @ FiloSottile

[ Web Security ]  Web vulnerabilities to gain access to the system http://www.enye-sec.org/en/papers/web_vuln-en.txt

[ Web Security ]  DOM XSS 101 Walk-Through : http://neonprimetime.blogspot.in/2016/01/dom-xss-101-walk-through.html

[ Web Security ]  All versions of @ Drupal vulnerable to code execution, credential theft via #MitM attack - http://ow.ly/WIUHo

[ Windows ]  Reversing and Recreating a Protected DLL : http://reverseengineeringtips.blogspot.in/2016/01/bypassing-protections-reversing-and.html