[ Android ]  Top 10 reasons to use Visual Studio for C++ Android Development! : http://blogs.msdn.com/b/vcblog/archive/2016/01/25/ten-good-reasons-to-use-visual-studio-for-c-android-development.aspx

[ Attack ]  Global mass injection affects thousands of websites. Take action to avoid a future attack: http://symc.ly/1JFDS8s https://t.co/wjgvgUWJCM

[ Attack ]  Popular Site Leads To Angler EK & CVE-2015-8651 Flash Player Exploit http://blogs.forcepoint.com/security-labs/popular-site-leads-angler-ek-cve-2015-8651-flash-player-exploit

[ Browser ]  Oracle to Kill Java Browser Plugin http://threatpost.com/oracle-to-kill-java-browser-plugin/116065/

[ Defend ]  New VB2015 paper and video: Effectively testing APT defences https://www.virusbtn.com/blog/2016/01_27.xml https://www.youtube.com/watch?v=KmaoAMkg7Ik https://t.co/vRld2Ytamu

[ Firmware ]  UEFI Firmware Parser: set of scripts 4 parsing, extracting & recreating UEFI firmwa. volumes https://github.com/theopolis/uefi-firmware-parser https://t.co/tKsIcJC03X

[ Forensics ]  Windows Logging for PCI-DSS http://goo.gl/zARzG2 #MalwareAnalysis #Vulnerabilities

[ Hardware ]  LTE security and protocol Exploits : http://www.ee.columbia.edu/~roger/ShmooCon_talk_final_01162016.pdf (pdf)

[ iOS ]  New iOS security bugs from Google Project Zero: https://code.google.com/p/google-security-research/issues/list?can=1&q=iOS+modified-after%3A2016%2F1%2F26&sort=-id&colspec=ID+Type+Status+Priority+Milestone+Owner+Summary&cells=tiles HT @ 0x56 @ willstraf

[ iOS ]  Elaborate iCloud Phish Used To Activate Stolen iPhones http://blog.malwarebytes.org/phishing/2016/01/elaborate-icloud-phish-used-to-activate-stolen-iphones-2/

[ IoTDevice ]  Getting A Reverse Shell On Your Seagate Personal NAS https://packetstormsecurity.com/news/view/26278/Getting-A-Reverse-Shell-On-Your-Seagate-Personal-NAS.html

[ Malware ]  Self-modifying malware & protection waves in popular packers https://www.virusbtn.com/pdf/conference_slides/2015/Calvet-etal-VB2015.pdf [also https://twitter.com/daniel_bilar/statuses/599160020199206912?tw_i=599160020199206912&tw_e=permalink&tw_p=archive ] https://t.co/zNFeLJhVEr

[ MalwareAnalysis ]  Check out my latest research on the #APT #Bergard toolset! https://www.proofpoint.com/us/exploring-bergard-old-malware-new-tricks

[ MalwareAnalysis ]  New version of #CenterPOS, known in the cybercrime underground as Cerebrus, has been found http://bddy.me/1lWQa0D https://t.co/pKr2TrdF5a

[ MalwareAnalysis ]  Ransomware Used as a Distraction http://www.secureworks.com/resources/blog/ransomware-used-as-a-distraction/

[ MalwareAnalysis ]  Introducing Hi-Zor RAT http://www.threatgeek.com/2016/01/introducing-hi-zor-rat.html

[ MalwareAnalysis ]  Quick analysis of BlackEnergy .DOC dropper https://securelist.com/blog/research/73440/blackenergy-apt-attacks-in-ukraine-employ-spearphishing-with-word-documents/ https://t.co/xjt5LjNwtC

[ Others ]  Trend Micro Direct Pass - Filter Bypass & Persistent Web Vulnerability http://goo.gl/fb/QPG2cd #FullDisclosure

[ ThirdParty ]  OpenSSL Key Recovery Attack on DH small subgroups : http://intothesymmetry.blogspot.in/2016/01/openssl-key-recovery-attack-on-dh-small.html //CVE-2016-0701

[ Tools ]  Updates to Avatar, our dynamic analysis framework for embedded systems: http://www.s3.eurecom.fr/tools/avatar/

[ Tools ]  VirusTotal adds support for analyzing EFI firmware files http://blog.virustotal.com/2016/01/putting-spotlight-on-firmware-malware_27.html

[ Tools ]  Neat new tool from Microsoft called Policy Analyzer, let's you treat GPOs as single configuration, to spot errors http://blogs.technet.com/b/secguide/archive/2016/01/22/new-tool-policy-analyzer.aspx

[ Vulnerability ]  Win32k Elevation of Privilege Vulnerability MS15-073 CVE-2015-2365 http://bit.ly/1V9Samz CVE-2015-2366 http://bit.ly/1ix9AI1

[ Web Security ]  New Post - "An XSS on Facebook via PNGs & Wonky Content Types" https://fin1te.net/articles/xss-on-facebook-via-png-content-types/ #bugbounty #facebook #xss

[ Web Security ]  Web Application Firewall 101: How to Prevent Web Hacking http://goo.gl/IvuU0x #Hacking

[ Web Security ]  bitdump : A tool to extract database data from a blind SQL injection vulnerability : https://github.com/nbshelton/bitdump

[ Windows ]  Digging this site and the BypassUAC/Priv Esc post https://secinfodb.wordpress.com/windows-uacprivilegescredentials/