[ Android ]  Samsung URL filtering in kernel land: what could possibly go wrong?https://github.com/ud2/advisories/tree/master/android/samsung/nocve-2016-0001 via @ Fuzion24

[ Attack ]  Music-themed Malvertising Lead to Angler http://research.zscaler.com/2016/01/music-themed-malvertising-lead-to-angler.html

[ Attack ]  A Guidance Template for Attack Sequence Specification in Cyber Attack Simulation http://scholarworks.rit.edu/cgi/viewcontent.cgi?article=9941&context=theses

[ Attack ]  Attackers Seek to Hack Hardware for Ultimate Control https://blogs.mcafee.com/mcafee-labs/attackers-seek-to-hack-hardware-for-ultimate-control/

[ Attack ]  MSN Home Page Drops More Malware Via Malvertising http://blog.malwarebytes.org/malvertising-2/2016/01/msn-home-page-drops-more-malware-via-malvertising/

[ Browser ]  Firefox Sandboxing Guide : https://firejail.wordpress.com/documentation-2/firefox-guide/

[ Defend ]  Intel Memory Protection Extensions Enabling Guide : https://software.intel.com/sites/default/files/managed/9d/f6/Intel_MPX_EnablingGuide.pdf (pdf)

[ Detect ]  Beyond IDS - Practical Network Hunting : https://github.com/bsidesnyc/BSidesNYC2016/blob/master/Presentations/Josh%20Liburdi%20-%20Beyond%20IDS.%20Practical%20Network%20Hunting.pdf (pdf)

[ Exploit ]  Introduction to Windows shellcode development – Part 2 http://securitycafe.ro/2015/12/14/introduction-to-windows-shellcode-development-part-2/

[ Exploit ]  Part 3 of my posts on windows kernel exploitation is up @ WhitehattersA finishing off the @ HackSysTeam vuln driver https://www.whitehatters.academy/intro-to-windows-kernel-exploitation-3-my-first-driver-exploit

[ Industry News ]  Tech Support Scammers Lure Users With Fake Norton Warnings, Turn Out To Be Symantec Reseller http://blog.malwarebytes.org/fraud-scam/2016/01/tech-support-scammers-lure-users-with-fake-norton-warnings-turn-out-to-be-symantec-reseller/

[ iOS ]  Security Content iOS 9.2.1 - https://support.apple.com/en-us/HT205732

[ IoTDevice ]  Administrator auto-logout design flaw in ASUS wireless routers http://goo.gl/fb/IoGncM #FullDisclosure

[ Linux ]  Tracking Protection In Wi-Fi Networks Coming Soon To Linux : https://blogs.gnome.org/lkundrak/2016/01/18/networkmanger-and-tracking-protection-in-wi-fi-networks/

[ Linux ]  Linux Kernel Return Oriented Programming (Part 1) : https://cyseclabs.com/page?n=17012016

[ Malware ]  Cracking Ransomware : http://blog.cylance.com/cracking-ransomware

[ Malware ]  Linux.Ekoms.1 the Linux trojan that takes screenshots http://securityaffairs.co/wordpress/43763/cyber-crime/linux-ekoms-1-linux.html

[ Network ]  Cheating VoIP Security by Flooding the SIP http://goo.gl/N7scAq #Hacking #MobileSecurity #Vulnerabilities

[ NetworkDevice ]  Cisco Guide to Harden Cisco IOS Devices : http://www.cisco.com/c/en/us/support/docs/ip/access-lists/13608-21.html

[ Operating System ]  Writing a 16-bit dummy kernel in C/C++ - http://www.codeproject.com/Articles/737545/Writing-a-bit-dummy-kernel-in-C-Cplusplus

[ Popular Software ]  LiteSpeed Web Server - Security Advisory - HTTP Header Injection… http://goo.gl/fb/qzxyBk #FullDisclosure

[ Popular Software ]  Warm up your fibres… “Oracle Critical Patch Update - January 2016” http://www.oracle.com/technetwork/topics/security/cpujan2016-2367955.html

[ Popular Software ]  Node JS Remote Memory Disclosure https://cxsecurity.com/issue/WLB-2016010127

[ Programming ]  Developing Secure Java Code – Best Practices for a Team http://goo.gl/GmnhB3 #SecureCodingforJava

[ ReverseEngineering ]  #CodeXplorer updated with pull request by @ noobdoesre https://github.com/REhints/HexRaysCodeXplorer/pull/20 Fixed type RE crash on v6.9 https://github.com/REhints/HexRaysCodeXplorer #REhints

[ Sandbox ]  An Adversarial View of SaaS Sandboxes : https://github.com/bsidesnyc/BSidesNYC2016/blob/master/Presentations/Jason%20Trost%20%26%20Aaron%20Shelmire%20-%20An%20Adversarial%20View%20of%20SaaS%20Sandboxes.pdf (Slides - 7.07 Mb)

[ SecurityProduct ]  Avast sandbox escape by @ taviso http://code.google.com/p/google-security-research/issues/detail?id=700#c3

[ Tools ]  Scripting A Windows Key Logger : http://www.patch-tuesday.net/2016/01/scripting-windows-key-logger.html

[ Tools ]  Qiew - Hex/File format viewer. Designed to be useful for reverse engineering malware. Based on pefile, Capstone https://github.com/mtivadar/qiew

[ Tools ]  Docker Containers for Malware Analysis : https://github.com/bsidesnyc/BSidesNYC2016/blob/master/Presentations/Lenny%20Zeltser%20-%20Docker%20Containers%20for%20Malware%20Analysis.pdf (Slides - 3.79 Mb) cc: @ lennyzeltser

[ Tools ]  A modification of @ breenmachine original Hot Potato Priv Esc Exploit Bypasses AppLocker via InstallUtil https://github.com/Cn33liz/SmashedPotato @ Cneelis

[ Web Security ]  OpenCart LFI mitigation bypass 0day http://www.openwall.com/lists/oss-security/2016/01/19/16

[ Web Security ]  GRR <= 3.0.0-RC1 (all versions) file upload filter bypass (authenficated) http://goo.gl/fb/a4iyTv #FullDisclosure