[ Attack ]  EMEA #CyberPredictions - Leadership become cyber security conscious. Full Report here: http://bddy.me/22Y3J1B https://t.co/Frlpo6mYk0

[ Attack ]  In Brazil, anyone can be an overnight sensation in #cybercrime: http://bit.ly/1RzHzit #deepweb https://t.co/dLqQHq1KgV

[ Attack ]  The Canadian underground is vastly different from its neighbor: http://bit.ly/1Z4qnR2 #deepweb

[ Attack ]  New RAT Trochilus Skilled at Espionage, Evading Detection https://asert.arbornetworks.com/wp-content/uploads/2016/01/ASERT-Threat-Intelligence-Brief-Uncovering-the-Seven-Pointed-Dagger.pdf

[ Browser ]  Bugs From Hell: Injected Third-party Code + Detours = a Bad Time - http://dblohm7.ca/blog/2016/01/11/bugs-from-hell-injected-third-party-code-plus-detours-equals-a-bad-time/

[ Debug ]  ret-sync is a set of plugins that helps to synchronize a debugging session (WinDbg/GDB/LLDB/Oldbg2/x64dbg) with IDA https://github.com/bootleg/ret-sync

[ Device ]  Turning a webcam into a backdoor http://blog.vectranetworks.com/blog/turning-a-webcam-into-a-backdoor via @ revskills

[ Device ]  SSH Backdoor for FortiGate OS Version 4.x up to 5.0.7 http://seclists.org/fulldisclosure/2016/Jan/26

[ Device ]  Some vulns affecting Samsung "Security" cameras(hint: trivial arbitrary file read with clear-text pwds) cc @ joystick http://blog.emaze.net/2016/01/multiple-vulnerabilities-samsung-srn.html

[ Fuzzing ]  Exploiting Trade-offs* in Symbolic Execution for Identifying Security Bugs : http://sas2015.inria.fr/sas_invited_talk.pdf (Slides)

[ Hardware ]  Counting bits in hardware: reverse engineering the silicon in the ARM1 processor http://www.righto.com/2016/01/counting-bits-in-hardware-reverse.html

[ iOS ]  iOS 9.3 Beta 1 arm64 Jailbreak Demo (w/ Code Injection) https://www.youtube.com/watch?v=ZDMWIl3bde8

[ Linux ]  Write a filesystem with FUSE - http://engineering.facile.it/write-filesystem-fuse/

[ Linux ]  Minnowboard Max: Enable the firmware (TXE) TPM 2.0 http://prosauce.org/blog/2016/1/11/minnowboard-max-enable-and-test-the-firmware-txe-tpm-20

[ Mac OS X ]  Our #FOSS FSEvents parser for OSX and IOS is now available on Github https://github.com/dlcowen/FSEventsParser/tree/master #dfir #infosec as seen on the #forensiclunch

[ Malware ]  Our first post! Inside Derkziel botnet https://mlwre.github.io/2015/12/11/Derkziel-Sofware.html

[ Malware ]  Malware analysis with VM instrumentation, WMI, winexe, Volatility and Metabrik - http://www.metabrik.org/blog/2016/01/09/malware-analysis-with-vm-instrumentation-wmi-winexe-volatility-and-metabrik/

[ Malware ]  Ransomware evolution: Another brick in the CryptoWall https://nakedsecurity.sophos.com/2016/01/11/ransomware-evolution-another-brick-in-the-cryptowall/

[ Malware ]  MMD-0050-2016 - Incident report: ELF Linux/Torte infection (in Wordpress) http://blog.malwaremustdie.org/2016/01/mmd-0050-2016-incident-report-elf.html

[ Malware ]  Ransom32 – look at the malicious package http://blog.malwarebytes.org/intelligence/2016/01/ransom32-look-at-the-malicious-package/

[ Others ]  New Post! Automatically Finding Weapons in Social Media Images Part 1 | Automating OSINT Blog http://bit.ly/1SKqqSq #osint #python

[ Popular Software ]  SEC Consult whitepaper: Bypassing McAfee Application Whitelisting for… http://goo.gl/fb/AyjmbI #FullDisclosure

[ Popular Software ]  Analysis of Adobe Flash Player ID3 Tag Parsing Integer Overflow Vulnerability (CVE-2015-5560) https://blog.coresecurity.com/2016/01/12/analysis-of-adobe-flash-player-id3-tag-parsing-integer-overflow-vulnerability-cve-2015-5560/

[ Popular Software ]  . @ Adobe updates Reader and Acrobat, patches 17 code execution flaws https://threatpost.com/adobe-patches-code-execution-flaws-in-reader-acrobat/115863/ via @ threatpost

[ Vulnerability ]  Analysis of CVE-2016-0035, A Remote Code Execution in Microsoft Office Excel http://sourceincite.com/2015/12/15/analysis-of-cve-2016-0035-a-remote-code-execution-in-microsoft-office-excel/ thanks to @ msftsecresponse & @ thezdi !

[ Vulnerability ]  Windows Remote Desktop Protocol Security Bypass Vulnerability – CVE-2016-0019 https://technet.microsoft.com/library/security/MS16-007

[ Web Security ]  XSS Flaws lead to Keylogging,Webcams, & more http://neonprimetime.blogspot.com/2016/01/xss-flaws-lead-to-keyloggingwebcams-more.html

[ Web Security ]  A XSS may have exposed users of the eBay website to phishing attacks http://securityaffairs.co/wordpress/43521/hacking/ebay-website-to-phishing-attacks.html

[ Windows ]  Quick tutorial on how to go from a dead Windows process to EoP. http://googleprojectzero.blogspot.com/2016/01/raising-dead.html