[ Attack ]  Our research team has released its annual @ Windows Exploitation in 2015 report: http://www.welivesecurity.com/2016/01/26/windows-exploitation-in-2015/?utm_source=twitter.com&utm_medium=social&utm_campaign=fanpage https://t.co/riDgcbQ3iW

[ Attack ]  Government Agencies Audit for Juniper Backdoor: https://threatpost.com/government-agencies-audit-for-juniper-backdoor/116021/ via @ threatpost

[ Attack ]  Cyber Criminals Gain in Sophistication With Integrity Attacks https://blogs.mcafee.com/mcafee-labs/cyber-criminals-gain-sophistication/

[ Browser ]  Rogue Google Chrome Extension Spies On You http://blog.malwarebytes.org/online-security/2016/01/rogue-google-chrome-extension-spies-on-you/

[ Defend ]  Chronomorphic Programs: Using Runtime Diversity to Prevent Code Reuse Attacks http://www.sift.net/sites/default/files/publications/icds_2015_4_40_10108%20(2).pdf

[ Exploit ]  Access X86 TEB/PEB w/ C & Assembly : http://securityblog.gr/3208/access-x86-tebpeb-with-c-and-assembly/

[ Hardware ]  Siemens OZW672 and OZW772 XSS Vulnerability https://ics-cert.us-cert.gov/advisories/ICSA-16-019-01

[ Hardware ]  Rockwell Automation MicroLogix 1100 PLC Overflow Vulnerability https://ics-cert.us-cert.gov/advisories/ICSA-16-026-02

[ Hardware ]  Reverse engineering Google Nest Devices http://experimental-platform.tumblr.com/post/137835649425/reverse-engineering-google-nest-devices

[ Hardware ]  Hacking the Zsun WiFi SD Card Reader : https://wiki.hackerspace.pl/projects:zsun-wifi-card-reader

[ IoTDevice ]  Reversing the Dropcam (Part 3): Digging into complied Lua functionality : http://blog.includesecurity.com/2014/08/Reverse-Engineering-Dropcam-Lua-Bytecode.html , Part 2 : http://blog.includesecurity.com/2014/04/reverse-engineering-dropcam-rooting-the-device.html

[ MalwareAnalysis ]  Some analysis on the batch script based ransomware https://www.sentinelone.com/blog/xrtn-more-batch-script-based-ransomware/

[ Network ]  This is a pretty cool project: https://github.com/sailro/Bdtunnel BoutDuTunnel is able to create virtual connections tunnelled in HTTP requests.

[ NetworkDevice ]  Remote shutdown vulnerability in Buffalo NAS (Linkstation 420) http://www.securityfocus.com/archive/1/537356

[ Others ]  NCC Group has published an eBook called Cyber Risk & Security Guidance for Non-Executive Directors https://www.nccgroup.trust/uk/about-us/newsroom-and-events/blogs/2016/january/cyber-risk-and-security-guidance-for-non-executive-directors-nxds/

[ Pentest ]  PowerShell PoC of Hot Potato privesc - https://github.com/Kevin-Robertson/Tater

[ Popular Software ]  PoC Exploit (and Analysis) of yesterday’s CVE-2016-0752 - Rails Remote Code Execution by @ forced_request: https://nvisium.com/blog/2016/01/26/rails-dynamic-render-to-rce-cve-2016-0752/

[ Popular Software ]  Exciting Tuesday nginx security advisory! CVE-2016-0742, CVE-2016-0746, CVE-2016-0747 http://mailman.nginx.org/pipermail/nginx/2016-January/049700.html

[ Tools ]  Compiled IDASkins for OS X (attached to the post) http://www.surrendercontrol.com/2016/01/compiling-non-osx-ida-pro-plugins-on-os.html

[ Tools ]  Check out Trishula - a spampot with a built-in machine learning phishing classifier https://github.com/mertam/shiva (based on the Shiva honeypot)

[ Tools ]  a static analyzer for PE executables (untested, feedback welcome) https://github.com/JusticeRage/Manalyze by @ JusticeRage

[ Tools ]  Triton - A DBA Framework (ver 0.3 released) : http://triton.quarkslab.com/changelog/

[ Web Security ]  [Blog] Some words on CSRF and cookies http://blog.dornea.nu/2016/01/26/some-words-on-csrf-and-cookies/ #infosec #security #appsec #owasp

[ Windows ]  New Blog Post - Windows Commands Abused by Attackers ^ST http://blog.jpcert.or.jp/2016/01/windows-commands-abused-by-attackers.html

[ Windows ]  Privilege escalation (System) via Dolby's DAX2_Api_Service on Windows 10: http://x42.obscurechannel.com/?p=263 https://t.co/FF5CtfmTQr