[ Android ]  #Android banking malware can easily change this targeted attack to different countries or banking apps! http://www.welivesecurity.com/2016/03/09/android-trojan-targets-online-banking-users/ #malware

[ Android ]  Android emulator internals by @ freesamael http://www.slideshare.net/freesamael/study-on-android-emulator-53069679

[ Android ]  Android with machine learning to detect malicious code - http://drops.wooyun.org/mobile/13428 (Chinese)

[ Android ]  Sending of multiple certificate chains leads to some broken TLS cert pinning implementations on Android: https://www.cigital.com/blog/ineffective-certificate-pinning-implementations/

[ Browser ]  Latest @ Firefox update fixes 40 vulnerabilities, 22 critical - http://ow.ly/ZgHFp

[ Browser ]  This P0 bug in IE is marked as Read AV, underlying cause is indirect call to null function ptr caught by CFG https://code.google.com/p/google-security-research/issues/detail?id=669

[ Hardware ]  New blog post (technical): Anvil and next generation rowhammer attacks: http://dreamsofastone.blogspot.de/2016/03/anvil-next-generation-row-hammer-attacks.html

[ Industry News ]  Trend Micro welcomes TippingPoint, DVLabs and the Zero Day Initiative. http://bit.ly/1Tstowt https://t.co/FWNVj8ycYQ

[ Linux ]  Linux netfilter IPT_SO_SET_REPLACE memory corruption: https://code.google.com/p/google-security-research/issues/detail?id=758

[ Linux ]  Sigreturn-oriented programming and its mitigation - https://lwn.net/Articles/676803/ https://lkml.org/lkml/2016/2/6/166

[ Malware ]  Macro Malware Associated With Dridex Finds New Ways to Hide https://blogs.mcafee.com/mcafee-labs/macro-malware-associated-dridex-finds-new-ways-hide/

[ Malware ]  Alpha Testing the AlphaLeon HTTP Bot http://www.arbornetworks.com/blog/asert/alpha-testing-alphaleon-http-bot/

[ MalwareAnalysis ]  Slides of my DCC2016 presentation: Stealthy, Hypervisor-based Malware Analysis http://www.slideshare.net/tklengyel/stealthy-hypervisorbased-malware-analysis

[ MalwareAnalysis ]  unpacker - script to automate malware unpacking. Based on WinAppDbg. https://github.com/malwaremusings/unpacker/

[ Network ]  How to exploit TFTP protocol to launch powerful DDoS amplification attacks http://securityaffairs.co/wordpress/45159/hacking/tftp-ddos-amplification-attacks.html

[ Others ]  The Problem with Dynamic Program Analysis http://blog.trailofbits.com/2016/03/09/the-problem-with-dynamic-program-analysis

[ Others ]  [CORE-2016-0003] - Samsung SW Update Tool MiTM http://goo.gl/fb/8SBwu8 #FullDisclosure

[ Others ]  Fingerprinting anonymous TOR users by their mouse wheel movements. Impressive. https://twitter.com/mikko/status/707217643686785024

[ Others ]  SSD Advisory – Zyxel Remote Unauthenticated Code Execution (NSA310) https://blogs.securiteam.com/index.php/archives/2694

[ Others ]  360's report on OnionDog APT set “洋葱狗”潜伏3年终曝光 定期偷袭能源及交通行业 #cybersecurity #China http://bobao.360.cn/learning/detail/2783.html

[ Pentest ]  Sneaky #ActiveDirectory Persistence: Computer Accounts & Domain Controller Silver Tickets https://adsecurity.org/?p=2753 https://t.co/jLZ8r2JXQz

[ Pentest ]  WMI Post-Exploitation with CrackMapExec https://www.trustedsec.com/march-2016/wmi-post-exploitation/

[ Popular Software ]  Bind DNS remote exploit vuln: CVE-2016-1285: An error parsing input received by the rndc control channel... https://kb.isc.org/article/AA-01352/74/CVE-2016-1285%3A-An-error-parsing-input-received-by-the-rndc-control-channel-can-cause-an-assertion-failure-in-sexpr.c-or-alist.c.html

[ ThirdParty ]  Memory Corruption Vulnerability in "libotr" https://www.x41-dsec.de/lab/advisories/x41-2016-001-libotr/

[ ThreatIntelligence ]  Threat Intelligence Foundations: Crawl, Walk, Analyze (part 1) http://bit.ly/1P0n8UL Blog series by @ PDXbek

[ ThreatIntelligence ]  New Security Tool: MrLooquer - IPv6 Intelligence http://goo.gl/fb/cmkq6a #FullDisclosure

[ Tools ]  [BLOG+TOOL] Binmap: a system scanner http://blog.quarkslab.com/binmap-a-system-scanner.html Vulnerability research is not only about luck, it is also about strategy

[ Web Security ]  One XSS vector to rule them all: https://github.com/0xsobky/HackVault/wiki/Unleashing-an-Ultimate-XSS-Polyglot #infosec #xss

[ Web Security ]  Exploring Server-Side Template Injection in Flask/Jinja2 https://nvisium.com/blog/2016/03/09/exploring-ssti-in-flask-jinja2/

[ Web Security ]  Analysis on a remote code execution on SpagoBI https://remoteawesomethoughts.blogspot.com/2016/03/spagobi-remote-code-execution-by.html