[ Android ]  CVE-2015-1805 PoC, untested https://twitter.com/idl3r/statuses/711371009874485249

[ Attack ]  China-based ad giant serves malicious code through ad slots http://bddy.me/25iHW5J #infosec

[ Attack ]  In our March Threats Report, we uncovered a rise in new #malware in Q4, after 3 quarters of decline: http://intel.ly/1LBYoI1

[ Detect ]  YARA Rule To Detect VBE Scripts by @ DidierStevens http://blog.didierstevens.com/2016/03/22/yara-rule-to-detect-vbe-scripts/

[ Exploit ]  Slides of CansecWest2016 - Getting Physical: Extreme Abuse of Intel Based Paging Systems: https://github.com/n3k/CansecWest2016_Getting_Physical_Extreme_Abuse_of_Intel_Based_Paging_Systems @ NicoEconomou #CanSecWest

[ Exploit ]  Slides of Windows SMEP Bypass U=S: https://github.com/n3k/EKOParty2015_Windows_SMEP_Bypass @ NicoEconomou #ekoparty

[ Fuzzing ]  Virtualised USB Fuzzing using QEMU and Scapy - Tobias Muller: http://youtu.be/EyljYN22_rU?a via @ YouTube

[ Hardware ]  New blog post: 'Inside the IOActive #Silicon #Lab: Interpreting Images,' by @ azonenberg of @ IOActive http://ioac.tv/1UhTfIf #infosec

[ iOS ]  In Alibaba's IPO day, Taobao app got crash on just released iOS 8. The bug was fixed via hot patch project https://github.com/alibaba/wax in hours.

[ IoTDevice ]  Remote Code Execution in CCTV-DVR affecting over 70 different vendors http://www.kerneronsec.com/2016/02/remote-code-execution-in-cctv-dvrs-of.html

[ Linux ]  You can install a GSM network with a single command now - $sudo apt-get install gsm-network - ref: https://tracker.debian.org/news/755641 #osmocom #gsm

[ Linux ]  LibHeap - python library for examining the glibc heap https://github.com/cloudburst/libheap via @ rotlogix

[ Mac OS X ]  watchOS 2.2 Security Notes: https://support.apple.com/en-us/HT206168 tvOS 9.2 Security Notes: https://support.apple.com/en-us/HT206169

[ Mac OS X ]  OSX / iOS execve logic error allows arbitrary mem read/write of suid processes leading to kernel code exec: https://googleprojectzero.blogspot.com/2016/03/race-you-to-kernel.html

[ Mac OS X ]  Vulnerability Spotlight: Apple OS X Graphics Kernel Driver Local Privilege Escalation Vulnerability http://blog.talosintel.com/2016/03/apple-gfx-vuln.html

[ Mac OS X ]  Update OS X to v10.11.4, it patches a vulnerability discovered by Inverse Path using the USB armory (CVE-2016-1734) https://support.apple.com/en-ca/HT206167

[ Malware ]  Flashback: Who is the Joe? https://securelist.com/blog/research/68350/the-syrian-malware-part-2-who-is-the-joe/ #SyrianElectronicArmy #SEA Today: https://www.justice.gov/opa/pr/computer-hacking-conspiracy-charges-unsealed-against-members-syrian-electronic-army

[ Malware ]  Dridex Code Breaking – Modify the Malware to Bypass the VM Bypass http://phishme.com/dridex-code-breaking-modify-the-malware-to-bypass-the-vm-bypass/ #DFIR #malware #infosec

[ Malware ]  TeslaCrypt 4.0 Released with Bug Fixes and Stops Adding Extensions : http://www.bleepingcomputer.com/news/security/teslacrypt-4-0-released-with-bug-fixes-and-stops-adding-extensions/

[ Malware ]  #Unit42 examines the campaign evolution of #Darkleech to pseudo-Darkleech http://bit.ly/1T53Q7M #ransomware

[ MalwareAnalysis ]  Recovering Files From Brand New Crypt0l0cker http://marcoramilli.blogspot.com/2016/03/recovering-files-from-brand-new.html

[ Network ]  A Complete Guide on IPv6 Attack and Defense : http://www.sans.org/reading-room/whitepapers/detection/complete-guide-ipv6-attack-defense-33904 (pdf)

[ Network ]  Slides of Gabriel Mueller's #TR16 IPv6 Sec Summit talk "NATTED – A Field Report": https://www.ernw.de/download/NATTED_A_Field_Report_V11.pdf [PDF] https://t.co/hE7K7B23cs

[ Network ]  StartSSL Domain validation Vulnerability discovered : http://oalmanna.blogspot.in/2016/03/startssl-domain-validation.html

[ Others ]  Nice wiki on reverse engineering and other things security (fuzzing, dfir, ctf writeups) #re http://wiki.yobi.be/wiki/Reverse-Engineering http://wiki.yobi.be/wiki/Table_of_contents#Security

[ Others ]  Strengthen Your Phishing with Apache mod_rewrite and Mobile User Redirection https://bluescreenofjeff.com/2016-03-22-strengthen-your-phishing-with-apache-mod_rewrite-and-mobile-user-redirection/

[ Others ]  Serious Sam shooter anniversary - finding bugs in #opensource code of the Serious Engine http://www.viva64.com/en/b/0384/ #gamedev #GameProgramming

[ Others ]  @ osquery application security assessment by @ NCCsecurityUS https://www.nccgroup.trust/globalassets/our-research/us/whitepapers/security_assessment_2016_01_25pdf/

[ Others ]  Ubers bug bounty program is now open to all - http://techcrunch.com/2016/03/22/uber-launches-bug-bounty-program-that-pays-hackers-to-find-security-issues/

[ Others ]  . @ Google #Submariner Logs Untrusted CAs: https://threatpost.com/google-submariner-logs-untrusted-cas/116935/ via @ threatpost

[ Popular Software ]  Adobe Flash Wild Write Crash https://packetstormsecurity.com/files/136338/GS20160322002341.tgz

[ Programming ]  Detecting Overflows of 32-Bit Variables in Long Loops in 64-Bit Programs. http://www.viva64.com/en/b/0385/ (#cpp #64bit #overflow #programming)

[ SecurityProduct ]  Comodo antivirus forwards emulated Win32 API calls to the real API during scans. ¯\_(ツ)_/¯ https://bugs.chromium.org/p/project-zero/issues/detail?id=769

[ Tools ]  My latest hack: an LLVM bitcode interpreter + VM written in C with no external deps. https://github.com/andoma/vmir

[ Tools ]  VolUtility : Web App for Volatility framework : https://github.com/kevthehermit/VolUtility cc: @ kevthehermit

[ Tools ]  Hacking Tools with Python (Part 1 - 2) : http://resources.infosecinstitute.com/writing-hacking-tools-with-python-part-1/#article

[ Tools ]  PE format Poster : http://www.openrce.org/reference_library/files/reference/PE%20Format.pdf (pdf)

[ Windows ]  On April 12th, 2016 a crucial security bug in Windows and Samba will be disclosed. We call it: Badlock. http://badlock.org/