[ Android ]  Who viewed your #Instagram account? And who stole your password? https://kas.pr/1jrT by @ r0bertmart1nez & @ thiagoolmarques

[ Android ]  The “SpyLocker” Malware in Android – What you Need to Know https://blogs.mcafee.com/consumer/spylocker-malware-what-you-need-to-know/

[ Attack ]  Taiwan Presidential Election: A Case Study on Thematic Targeting http://pwc.blogs.com/cyber_security_updates/2016/03/taiwant-election-targetting.html

[ Challenges ]  Writing generic exploits for browsers 101 : http://blog.frizn.fr/bkpctf-2016/qwn2own-bkpctf16 cc: @ Friz_N

[ Hardware ]  Awesome framework for black-box CAN bus/network analysis https://github.com/eik00d/CANToolz

[ iOS ]  iOS 9.3 fixes crypto attack on iMessage (@ matthew_d_green et al) and code signing bypass (@ ericmonti). Update ASAP: http://support.apple.com/en-au/HT206166

[ iOS ]  Blog post about our iMessage work: http://blog.cryptographyengineering.com/2016/03/attack-of-week-apple-imessage.html. Paper here: https://isi.jhu.edu/~mgreen/imessage.pdf

[ Linux ]  Intel memory protection extensions( intel mpx ) for linux - https://01.org/blogs/2016/intel-mpx-linux #mpx #intel #linux

[ Malware ]  Malware Word Search: Identifying Angler’s Dictionary http://blogs.cisco.com/security/talos/malware-word-search-identifying-anglers-dictionary

[ Malware ]  Let's Analyze: Dridex (Part 1) http://www.malwaretech.com/2016/03/lets-analyze-dridex-part-1.html

[ Malware ]  Looking at a CryptoWall Drop http://sketchymoose.blogspot.com/2016/03/looking-at-cryptowall-drop.html

[ Malware ]  Locky’s JavaScript downloader https://blog.avast.com/lockys-javascript-downloader

[ Malware ]  Teslacrypt Spam Campaign: “Unpaid Issue…” https://blog.malwarebytes.org/intelligence/2016/03/teslacrypt-spam-campaign-unpaid-issue/

[ Malware ]  Release the Hydra: Umbra Loader With Tor Support https://www.recordedfuture.com/umbra-loader-tor-support/

[ Malware ]  New Family of Ransom Locker Found, Uses TOR Hidden Service http://www.cyphort.com/new-family-of-ransom-locker-found-uses-tor-hidden-service/

[ Malware ]  #Unit42 finds #Locky #ransomware installed through nuclear exploit kits http://bit.ly/1RdRYxS

[ Malware ]  Stop Scanning My Macro: Interesting downloader techniques used to evade signature-based detection https://www.fireeye.com/blog/threat-research/2016/03/stop_scanning_mymac.html #DFIR #malware

[ Network ]  Both dnscrypt and randomdns (https://github.com/pwnsdx/RandomDNS) are great, but ISPs can still see website names via TLS SNI and IP correlation.

[ Operating System ]  Just pushed the #QNX security auditing scripts. https://github.com/alexplaskett/QNXSecurity There's firmware and attack surface analysis scripts, fuzzers, etc.

[ Others ]  Yahoo Deploys Passwordless Account Key Tool http://threatpost.com/yahoo-deploys-passwordless-account-key-tool/116892/

[ ReverseEngineering ]  Reverse Engineering An Obsolete Security System - http://bit.ly/1Ovnrv0 https://t.co/61VnnFoGSv

[ Tools ]  Nmap v7.10 Released , Added 12 NSE scripts and more ~ http://www.toolswatch.org/2016/03/nmap-v7-10-released/

[ Tools ]  Released new version of the Shodan Python library (1.5.1), includes improved error messages: http://shodan.readthedocs.org/en/latest/

[ Tools ]  EhTrace : a tool for tracing execution of binaries on Windows : https://github.com/K2/EhTrace cc: @ capstone_engine

[ Web Security ]  Troy Hunt: Understanding CSRF, the video tutorial edition http://www.troyhunt.com/2016/03/understanding-csrf-video-tutorial.html

[ Windows ]  Exploiting MS16-032 without ROP gadget in sight. https://googleprojectzero.blogspot.de/2016/03/exploiting-leaked-thread-handle.html