[ Android ]  Mobile Security News Update March 2016 https://www.mulliner.org/blog/blosxom.cgi/security/mobile_security_newsupdate_march2016.html #notmuchhappening

[ Android ]  Android Marcher now marching via porn sites http://research.zscaler.com/2016/03/android-marcher-now-marching-via-porn.html

[ Android ]  CuriousDroid: Automated User Interface Interaction for Android Application Analysis Sandboxes - https://mulliner.org/collin/publications/fc2016curiousdroid.pdf (via @ collinrm)

[ Browser ]  Is there a better mobile browser usage list than here: http://caniuse.com/usage-table ?

[ Browser ]  ZDI-16-197: Google Chrome Pdfium JPEG2000 Out-Of-Bounds Write Remote Code Execution Vulnerability http://www.zerodayinitiative.com/advisories/ZDI-16-197/

[ Browser ]  Chrome gpu process sandbox escape due to use of invalid iterator in IPC handler https://code.google.com/p/google-security-research/issues/detail?id=665

[ Browser ]  #DailyBug Microsoft Edge CDOMTextNode::get_data type confusion http://blog.skylined.nl/20160310001.html

[ Crypto ]  Sample "Diffie Hellman Key Exchange" usage in Java : https://github.com/codvio/diffie-hellman-helloworld

[ Defend ]  "Using Formal Methods to Eliminate Exploitable Bugs" is the most up-to-date summary of this topic and a must watch https://www.usenix.org/conference/usenixsecurity15/technical-sessions/presentation/fisher

[ iOS ]  Pangu9 V1.3.0(Win) V1.1.0(Mac) now support iOS 9.1 for all 64bit devices. Check at http://pangu.io

[ Linux ]  "Executing BSD ELFs on Windows"; blog post about the less-explored details of doing it! http://blog.ghettoha.xxx/executing-bsd-elfs-in-windows/

[ Linux ]  X11Forwarding is enabled by default on AMZ Linux, RH/Cent 6.x, Oracle, some Debian, but exploit needs local auth. https://twitter.com/damienmiller/status/707902149250822144

[ Malware ]  Macro-Malware Connecting to GitHub http://labs.bromium.com/2016/03/09/macro-malware-connecting-to-github/ PowerShell + WMI Scripting. #DFIR

[ Malware ]  Cerber Ransomware – New, But Mature https://blog.malwarebytes.org/intelligence/2016/03/cerber-ransomware-new-but-mature/

[ Malware ]  #Unit42 finds #PowerSniff malware used in macro-based attacks http://bit.ly/1QNjOSu

[ Malware ]  From Macro to SSL with Shellcode A Detailed Deconstruction : http://community.hpe.com/t5/Security-Research/From-Macro-to-SSL-with-Shellcode-A-Detailed-Deconstruction/ba-p/6839623#.VuIiTHUrKtF

[ Operating System ]  Beautiful collection of microkernel projects (HT: @ jjermar): “Microkernels - The component-based operating systems” http://microkernel.info/

[ Others ]  Image Processing 101 : https://codewords.recurse.com/issues/six/image-processing-101

[ Pentest ]  Local Group Enumeration : http://www.harmj0y.net/blog/redteaming/local-group-enumeration/ cc: @ harmj0y

[ ThirdParty ]  Several out of bounds reads in ProFTPD https://blog.fuzzing-project.org/40-Several-out-of-bounds-reads-in-ProFTPD.html Ceterum censeo test your C code with ASAN!

[ ThreatIntelligence ]  Part 3 of 3 of #ThreatIntel Foundations with @ PDXbek is live—Intelligence Analysis in Security Operations— https://community.rapid7.com/community/infosec/blog/2016/03/11/threat-intelligence-foundations-crawl-walk-analyze-part-3

[ Tools ]  Is this mail malicious or not? Checkout MAIL Analyzer: https://www.mail-analyzer.net/ analyze saved mails for free! https://t.co/Up7C3lphaB

[ Web Security ]  Web application scanning with Htcap - Help Net Security http://ow.ly/ZkG33