[ Android ]  honggfuzz 0.7 - ASAN code coverage for all OS, and Intel PT for Linux. OS: Linux, FreeBSD, Windows/Cygwin, MacOSX - https://github.com/google/honggfuzz/releases/tag/0.7

[ Attack ]  Malvertising Campaign in US Leads to Angler Exploit Kit/BEDEP http://blog.trendmicro.com/trendlabs-security-intelligence/malvertising-campaign-in-us-leads-to-angler-exploit-kitbedep/

[ Attack ]  All your creds are belong to us The evolution of malware targeting Steam accounts https://securelist.com/blog/research/74137/all-your-creds-are-belong-to-us/ https://t.co/Tm5fL7pK5N

[ Attack ]  Chrome Extension Caught Stealing Bitcoin from Users - UPDATE http://ow.ly/ZsBMj

[ Attack ]  Ottawa Hospital computers infected by Ransomware virus http://ow.ly/ZsKVc

[ Attack ]  More Details on APT Ransomware http://carnal0wnage.attackresearch.com/2016/03/apt-ransomware.html

[ Cloud ]  How to Reduce Security Threats and Operating Costs Using AWS WAF and Amazon CloudFront http://blogs.aws.amazon.com/security/post/Tx1G747SE1R2ZWE/How-to-Reduce-Security-Threats-and-Operating-Costs-Using-AWS-WAF-and-Amazon-Clou

[ Crypto ]  Great slides by @ martijn_grooten on "How Broken Is Our Crypto Really?" https://www.rsaconference.com/writable/presentations/file_upload/pdac-r02-how-broken-is-our-crypto-really_final.pdf

[ Debug ]  ProDBG is a very cool debugger written in #Rust & uses Capstone inside! https://github.com/emoon/ProDBG (by @ daniel_collin) https://t.co/HQTeDpRbxb

[ Detect ]  We sponsored an ESG survey on Incident Response Automation and Orchestration: http://blog.phantom.us/2016/03/15/new-research-finds-companies-ignore-majority-of-security-alerts/ #phantom

[ Exploit ]  Race Condition (TOCTOU) Vulnerability Lab http://resources.infosecinstitute.com/race-condition-toctou-vulnerability-lab/?utm_source=feedburner&utm_medium=feed&utm_campaign=Feed%3A+infosecResources+%28InfoSec+Resources%29

[ Fuzzing ]  nice detailed post about afl usage http://foxglovesecurity.com/2016/03/15/fuzzing-workflows-a-fuzz-job-from-start-to-finish/

[ Hardware ]  How Keyless Entry Lets Cybercriminals Hack Your Connected Car https://blogs.mcafee.com/consumer/keyless-entry-car-hacks/

[ iOS ]  New blog post: "Fingerprint as a trojan" https://godpraksis.no/2016/03/fingerprint-trojan/ Please RT! Comments wanted.

[ Linux ]  A New, In-Kernel Debugger Proposed For Linux 4.6 http://www.phoronix.com/scan.php?page=news_item&px=In-Kernel-Debugger-Linux-4.6 #linux #kernel #debugger #exploitdev #hacking #infosec @ phoronix

[ Malware ]  Android banking trojan poses as Flash Player http://www.welivesecurity.com/2016/03/14/security-review-android-banking-trojan-poses-flash-player/

[ Network ]  OnionCat - An Anonymous VPN-Adapter (P2P layer 3 VPN based on Tor or I2P): OnionCat is a VPN-adapter ... http://bit.ly/22gIJll #PenTest

[ NetworkDevice ]  nice command injection on a Netgear router https://github.com/0x3d5157636b525761/bezeq_netgear_exploit_poc_2016/blob/master/bezeq_poc.html

[ Others ]  Bughunters, we released the slides from the "Secrets of Google VRP" training delivered at #Nullcon - https://sites.google.com/site/bughunteruniversity/behind-the-scenes/secrets-of-google-vrp.

[ Others ]  Understanding Consumer Behaviour from Wi-fi Insights | Fortinet Blog http://ow.ly/ZsKRa

[ Others ]  Python 3.6 gets a builtin memory debugger https://docs.python.org/dev/whatsnew/3.6.html#pythonmalloc-environment-variable Detect buffer under/over-flow, fill memory with a byte pattern, etc.

[ Others ]  One cool feature of the new HTTPS Transparency Report is the Certificate Transparency query tool: https://www.google.com/transparencyreport/https/ct/?hl=en

[ Pentest ]  Sneaky #ActiveDirectory Persistence Methods: Leveraging Group Policy to Retain Domain Admin https://adsecurity.org/?p=2716 https://t.co/LJcJz35pg4

[ Pentest ]  Embedding EXE files into PowerShell scripts https://truesecdev.wordpress.com/2016/03/15/embedding-exe-files-into-powershell-scripts/

[ SecurityProduct ]  Bypassing Antivirus With Ten Lines of Code http://www.attactics.org/2016/03/bypassing-antivirus-with-10-lines-of.html

[ Tools ]  An open source, multi-architecture ROP compiler using pyvex https://github.com/jeffball55/rop_compiler/tree/master/pyrop

[ Web Security ]  Yahoo! Plugs Mail Spoofing Bug https://packetstormsecurity.com/news/view/26425/Yahoo-Plugs-Mail-Spoofing-Bug.html

[ Windows ]  H1N1 loader v2 | Rewrote UAC bypass method and "new" trick to elevate privileges via WMI console http://www.kernelmode.info/forum/viewtopic.php?f=16&t=3851#p28028

[ Windows ]  Windows Kernel ATMFD.DLL OTF Font Processing Stack Corruption (MS16-026) https://cxsecurity.com/issue/WLB-2016030081