[ Android ]  #SherlockDroid/#Alligator identified a new #Android #malware family: BadMirror. See http://blog.fortinet.com/post/badmirror-new-android-malware-family-spotted-by-sherlockdroid

[ Android ]  New post: Android Vulnerabilities Allow For Easy Root Access http://bit.ly/1UbG9u1 @ TrendMicro

[ Attack ]  Attackers compromised Burrp to redirect to Angler #exploit kit & drop Teslacrypt ransomware http://symc.ly/1T9tWHI https://t.co/mORnTmFfUS

[ Crypto ]  Password hashing basics for developers http://ithare.com/password-hashing-why-and-how/

[ iOS ]  iOS apps in App Store sent #Snapchat password to their own servers via HTTP, discovered by @ chronic thru Verify.ly: http://9to5mac.com/2016/03/08/ios-apps-snapchat-harvest-credentials/

[ Linux ]  erebus : A reverse engineering tool suite for linux : https://github.com/SuppenGeist/erebus

[ Malware ]  #Unit42 finds #Banload #malware affecting Brazil exhibits unusually complex infection process http://bit.ly/1Tq41vb

[ Malware ]  CVE-2016-0034 Silverlight Runtime Remote Code Execution Vulnerability - Sample MD5 01ce22f87227f869b7978dc5fe625e16 http://bit.ly/1pcS3J4

[ Malware ]  Locky Ransomware on Rampage With JavaScript Downloader https://blogs.mcafee.com/mcafee-labs/locky-ransomware-rampage-javascript-downloader/

[ Others ]  Cool Lecture Videos from MIT 6-858 Computer Systems Security http://ocw.mit.edu/courses/electrical-engineering-and-computer-science/6-858-computer-systems-security-fall-2014/video-lectures/ #cybersecurity #MITx #MOOC

[ Others ]  ROP gadget quality in MPX compiled binaries [more useful gadgets, decrease in side effects] http://www.bodden.de/pubs/fbb16analyzing.pdf https://t.co/NSzWH8rqyM

[ Pentest ]  New Tool: Invoke-InstallUtilNSExec - InstallUtil + .NET 4.5 to load executables from network share. http://bit.ly/1QB6e3q @ subTee

[ Popular Software ]  Adobe Patches Reader and Acrobat, Teases Upcoming Flash Update: https://threatpost.com/adobe-patches-reader-and-acrobat-teases-upcoming-flash-update/116662/ via @ threatpost

[ Popular Software ]  Wireshark Wtap_optionblock_free Use-After-Free https://packetstormsecurity.com/files/136110/GS20160307233508.tgz

[ Popular Software ]  Exim Local User Privileges Escalation (CVE-2016-1531) http://exim.org/static/doc/CVE-2016-1531.txt

[ Popular Software ]  NCC Group Advisories: SAP Netweaver - https://www.nccgroup.trust/uk/our-research/multiple-security-vulnerabilities-in-sap-netweaver-bsp-logon/ and https://www.nccgroup.trust/uk/our-research/potential-false-redirection-of-web-site-content-in-internet-in-sap-netweaver-web-applications/ - CVE-2015-8774 and CVE-2015-8775 by @ irsdl

[ ReverseEngineering ]  BinNavi's BinExport plugin is now open source: https://github.com/google/binexport

[ ReverseEngineering ]  Decoding syscalls in ARM64 - http://arm.ninja/2016/03/07/decoding-syscalls-in-arm64/

[ ThirdParty ]  (Another analysis) CVE 2015-7547 glibc getaddrinfo() vuln analysis https://labs.jumpsec.com/2016/03/07/cve-2015-7547-glibc-getaddrinfo-dns-vulnerability/

[ Tools ]  [Update]Powertool x64 V2.0 - Latest version of x64 Rootkit Analysis tool released, download http://d-h.st/users/powertool https://t.co/PRvcbujOI7

[ Tools ]  Nice volatility plugin. parses the Ethernet packets stored by ndis.sys in Windows kernel space memory. https://github.com/bridgeythegeek/ndispktscan/blob/master/README.md

[ Tools ]  Csmith is a tool to generate random C programs to test tools that process C code https://embed.cs.utah.edu/csmith/ https://t.co/d25pG0DYGk

[ Tools ]  Google Open Sources Vendor Security Assessment Framework http://www.securityweek.com/google-releases-source-code-security-assessment-questionnaire?utm_source=feedburner&utm_medium=feed&utm_campaign=Feed%3A+Securityweek+%28SecurityWeek+RSS+Feed%29

[ Tools ]  The IDA Pro plug-in for the Kam1n0 engine. Based on IDAPython. https://github.com/McGill-DMaS/Kam1n0-Plugin-IDA-Pro

[ Tools ]  Dell open sources DCEPT, a honeypot tool for detecting network intrusions http://bit.ly/1QAjeGp #virus #malware https://t.co/YjttZscaYn

[ Web Security ]  ATutor SQLi / RCE ! http://sourceincite.com/research/src-2016-04/ http://sourceincite.com/research/src-2016-05/ http://sourceincite.com/research/src-2016-06/ http://sourceincite.com/research/src-2016-07/ http://sourceincite.com/research/src-2016-08/

[ Windows ]  MS16-034 - Important: Security Update for Windows Kernel-Mode Drivers to Address Elevation of Privilege https://technet.microsoft.com/en-us/library/security/MS16-034

[ Windows ]  How MAC Address Randomization Works on Windows 10 http://www.mathyvanhoef.com/2016/03/how-mac-address-randomization-works-on.html

[ Windows ]  #MS16025 fixes DLL hijack in Windows Mail Find People object #CVE20160100 https://www.securify.nl/advisory/SFY20150904/windows_mail_find_people_dll_side_loading_vulnerability.html https://t.co/UBAoZgdBjX