[ Android ]  Android v. Stagefright? The latter is still winning. https://blog.zimperium.com/reflecting-on-stagefright-patches/ HT @ zimperium https://t.co/buL5jb7dJk

[ Android ]  CENSUS advisories (+ trigger files) for Android libstagefright bugs CVE-2016-0816 and CVE-2016-0824 are now public: https://census-labs.com/news/tag/advisories/

[ Attack ]  Attacking like a professional http://bddy.me/1RkAc9Y #FEYERedTeam #DFIR https://t.co/LYk9Fz9yQL

[ Attack ]  New post: Indian Military Personnel Targeted by “Operation C-Major” Information Theft Campaign http://bit.ly/1o6aiOK @ TrendMicro

[ Challenges ]  Wow, Google Organising a CTF. https://capturetheflag.withgoogle.com/

[ Crypto ]  Unboxing the White-Box Practical attacks against Obfuscated Ciphers https://www.blackhat.com/docs/eu-15/materials/eu-15-Sanfelix-Unboxing-The-White-Box-Practical-Attacks-Against-Obfuscated-Ciphers-wp.pdf

[ Crypto ]  my Ephemeral Diffie-Hellman backdoor works!!!! ( https://github.com/mimoo/Diffie-Hellman_Backdoor ) https://t.co/R7F0CsoPSZ

[ Hardware ]  BlackBox Testing CAN network with help of CANToolz (https://github.com/eik00d/CANToolz - beta) http://www.slideshare.net/AlexeySintsov/testing-can-network-with-help-of-cantoolz

[ iOS ]  Facebook Messenger (iOS) Certificate Validation Vulnerability http://goo.gl/fb/WnhE8c #FullDisclosure

[ IoTDevice ]  LoRa Security Whitepaper: Building a secure LoRa solution - https://labs.mwrinfosecurity.com/publications/lo

[ Linux ]  Securing Debian Manual : https://www.debian.org/doc/manuals/securing-debian-howto/securing-debian-howto.en.pdf (pdf)

[ Linux ]  Analyzing Samba with PVS-Studio on Linux. http://emacsdump.blogspot.ru/2016/03/running-pvs-studio-on-samba.html (#samba, #pvsstudio, #opensource, #codeanalysis, #programming)

[ Mac OS X ]  OS X Kernel AppleKeyStore Use-After-Free https://packetstormsecurity.com/files/136356/GS20160322234851.tgz

[ Mac OS X ]  OS X El Capitan - Sinking the S\H/IP https://www.slideshare.net/mobile/i0n1c/syscan360-stefan-esser-os-x-el-capitan-sinking-the-ship

[ Mac OS X ]  APPLE-SA-2016-03-21-7 OS X Server 5.1 http://goo.gl/fb/CB35h2 #FullDisclosure

[ Malware ]  SamSam: The Doctor Will See You, After He Pays The Ransom http://blog.talosintel.com/2016/03/samsam-ransomware.html

[ Malware ]  Check out how Kovter #malware abuses mshta.dll, JavaScript, PowerShell, WMI & RegSvr32 for a "fileless" #foothold. http://blog.airbuscybersecurity.com/post/2016/03/FILELESS-MALWARE-%E2%80%93-A-BEHAVIOURAL-ANALYSIS-OF-KOVTER-PERSISTENCE

[ Malware ]  New self-protecting USB trojan able to avoid detection http://www.welivesecurity.com/2016/03/23/new-self-protecting-usb-trojan-able-to-avoid-detection/

[ Malware ]  W97M Downloader Serves Vawtrak Malware https://blogs.mcafee.com/mcafee-labs/w97m-downloader-serving-vawtrak/

[ Malware ]  A look at Locky ransomware http://research.zscaler.com/2016/03/a-look-at-locky-ransomware.html

[ Network ]  New findings from our data science team: Topology of Malicious Activity on IPv4 [BLOG] http://bit.ly/1pz2KVK

[ Network ]  TLS Certificate Optimization: The Technical Details behind "No Browser Left Behind" https://blog.cloudflare.com/tls-certificate-optimization-technical-details/

[ Others ]  Quite a nice summary of protections: http://hypervsir.blogspot.sg/2014/10/introduction-on-hardware-security.html?m=1

[ Popular Software ]  Adobe Flash Zlib Codec Heap Overflow https://packetstormsecurity.com/files/136361/GS20160322235529.tgz

[ Popular Software ]  Foxit Reader 7.3.0 UAF PoC ( Patched in latest version) #DailyBug #Foxit http://www.vnsecurity.net/research/2016/03/23/Foxit-Reader-730-use-after-free.html

[ Popular Software ]  Foxit Reader <= 7.3.0 ObjStm decode Use-After-Free Remote Code Execution 1day! http://sourceincite.com/2016/03/23/foxit-reader-7-3-0-objstm-decode-use-after-free-remote-code-execution-1-day/

[ SecurityProduct ]  Comodo Antivirus Composite Document Parsing Heap Overflow https://packetstormsecurity.com/files/136368/GS20160323002103.tgz

[ SecurityProduct ]  Comodo Antivirus LZMA Decoder Heap Overflow https://packetstormsecurity.com/files/136369/GS20160323002237.tgz

[ ThreatIntelligence ]  @ JohnLaTwC @ MattT_Cyber @ 4Dgifts And 12 years later, we added the power of @ MSAdvAnalytics to it http://www.slideshare.net/RamShankarSivaKumar/transforming-incident-response-to-intelligent-response-using-graphs

[ Tools ]  MS open sources Visual Studio Productivity Power Tools https://github.com/Microsoft/VS-PPT

[ Tools ]  Burp Suite For Beginners : http://hack-ed.net/2016/01/09/burp-suite-for-beginners/

[ Web Security ]  Classic Web Vulns Found in Google Search Appliance 7.4 https://www.insinuator.net/2016/03/classical-web-vulns-found-in-google-search-appliance-7-4/

[ Web Security ]  99 Problems but Two-Factor Ain’t One http://bddy.me/25m607O #FEYERedTeam #DFIR https://t.co/7H1QyCIzsz

[ Web Security ]  Uber Bug Bounty: Turning Self-XSS into Good-XSS - https://fin1te.net/articles/uber-turning-self-xss-into-good-xss/ #bugbounty #xss #uber

[ Windows ]  @ WEareTROOPERS @ kiqueNissim HAL+Paging exploitation... it remind me something... https://drive.google.com/file/d/0B3P18M-shbwrNWZTa181ZWRCclk :p

[ Windows ]  Continuing the series on building a AD Audit #PowerShell module http://www.darkoperator.com/blog/2016/3/18/lxlzwnjiti3c4w7zj1uh8lc3lsv7cg