[ Android ]  Android ADB Debug Server Remote Payload Execution https://packetstormsecurity.com/files/135370/adb_server_exec.rb.txt

[ Android ]  Samsung Android Security Updates January 2016: http://security.samsungmobile.com/smrupdate.html#SMR-JAN-2016

[ Android ]  Android application development - Securing source code - http://drops.wooyun.org/mobile/12172 (Chinese)

[ Android ]  Mobile Application Penetration Testing Cheat Sheet : https://github.com/tanprathan/MobileApp-Pentest-Cheatsheet/

[ Attack ]  #Unit42 investigates a series of attacks they attributed to a group they code named Scarlet Mimic http://bit.ly/1PdGcDV

[ Attack ]  FireEye Labs has collected data on the 6 most prominent #malware families delivered during the holiday season http://bddy.me/1lK8daa

[ Crypto ]  Analysing and Exploiting the Mantin Biases in RC4 : https://eprint.iacr.org/2016/063.pdf (pdf) cc : @ kennyog

[ Firmware ]  UEFI boot script table exploit (https://github.com/Cr4sh/UEFI_boot_script_expl) with Linux DMA attack stuff should work fine on vulnerable Lenovo ThinkPad laptops

[ Hardware ]  #DeepSec Video: Bridging the Air-Gap - Data #Exfiltration from Air-Gap Networks: … http://wp.me/p6PE4U-CJ #GSMem #Wireless

[ iOS ]  Apple can access your encrypted iMessages http://securityaffairs.co/wordpress/43937/digital-id/apple-can-access-imessages-data.html

[ Linux ]  Integer overflow in nfssvc system call: https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=206626

[ MalwareAnalysis ]  #NanoLocker ransomware analysis by @ CyberClues: http://blog.malwareclipboard.com/2016/01/nanolocker-ransomware-analysis.html #malware

[ Others ]  Analyzing Arithmetic Prolog Programs by Symbolic Execution https://www.react.uni-saarland.de/publications/AWeinert_MSC.pdf

[ Others ]  Hiding in Plain Sight: Malware’s Use of TLS and Encryption http://blogs.cisco.com/security/malwares-use-of-tls-and-encryption

[ Others ]  Amazon's Customer Service Backdoor http://rss.slashdot.org/~r/Slashdot/slashdot/~3/8z8UlXwYCbk/amazons-customer-service-backdoor

[ Others ]  Microsoft releases CNTK, its open source deep learning toolkit, on GitHub: http://blogs.microsoft.com/next/2016/01/25/microsoft-releases-cntk-its-open-source-deep-learning-toolkit-on-github/ Comments: https://news.ycombinator.com/item?id=10967196

[ Popular Software ]  PHP-FPM fpm_log.c memory leak and buffer overflow http://seclists.org/bugtraq/2016/Jan/117

[ Popular Software ]  [CORE-2016-0002] - Lenovo ShareIT Multiple Vulnerabilities http://goo.gl/fb/pRXjuh #FullDisclosure

[ Popular Software ]  PayPal Remote Code Execution Vulnerability* using Java Deserialization : http://artsploit.blogspot.in/2016/01/paypal-rce.html //*Fixed

[ Programming ]  Embedded Programming with the GNU Toolchain : http://www.bravegnu.org/gnu-eprog/ #b2b

[ ReverseEngineering ]  [Blog] Swift Reverse Engineering | Digging into Objects - http://rotlogix.com/2016/01/25/digging-into-swift-objects/ #mobile #iOS

[ Tools ]  Good Cuckoo Sandbox installation guide for first timers http://mostlyaboutsecurity.com/security/cuckoo-sandbox-installation-guide/

[ Tools ]  RWMC – Retrieve Windows Credentials With PowerShell http://www.darknet.org.uk/2016/01/rwmc-retrieve-windows-credentials-powershell/

[ Tools ]  Pumpernickel is a simple kernel mode driver that enables you to sandbox (limit) write attempts of processes. https://excubits.com/content/en/products_beta.html