[ Android ]  Google Patches More Trouble in Mediaserver https://threatpost.com/google-patches-more-trouble-in-mediaserver/117758/

[ Android ]  CVE-2016-2445 POC:https://raw.githubusercontent.com/ScottyBauer/Android_Kernel_CVE_POCs/master/CVE-2016-2445.c Full exploit soon.

[ Android ]  QSEE privilege escalation vulnerability & exploit : https://bits-please.blogspot.in/2016/05/qsee-privilege-escalation-vulnerability.html , Exploit : https://github.com/laginimaineb/cve-2015-6639 https://t.co/DjHiUu1aBk

[ Attack ]  Pwnedlist vulnerability exposed 866M accounts http://www.scmagazine.com/pwnedlist-vulnerability-exposed-866m-accounts/article/493722/

[ Browser ]  Google Chrome Overtakes Microsoft’s Internet Explorer, Edge Nowhere to Be Found http://windowsitpro.com/windows-10/google-chrome-overtakes-microsoft-s-internet-explorer-edge-nowhere-be-found

[ Detect ]  using pDNS logs to spot malicious activity on your networks: what to look for for low FPs http://buff.ly/1Ob7rez https://t.co/QxMTK7WxyJ

[ Forensics ]  Expanding Skype Forensics with OSINT: Email Accounts via @ bellingcat https://www.bellingcat.com/resources/2016/05/02/expanding-skype-forensics-with-osint-email-accounts/

[ Hardware ]  Source code to the @ UPSat_gr cube satellite: https://github.com/librespacefoundation?query=upsat

[ Hardware ]  Reverse Engineering a Discovered #ATM #Skimmer ~ https://trustfoundry.net/reverse-engineering-a-discovered-atm-skimmer/

[ IoTDevice ]  Vulnerabilities in Samsung's SmartThings https://www.schneier.com/blog/archives/2016/05/vulnerabilities_5.html

[ Linux ]  SLAB freelist randomization on linux-next http://git.kernel.org/cgit/linux/kernel/git/next/linux-next.git/commit/?id=b735905a4f60283735001c3edef9996e9675e25f & http://git.kernel.org/cgit/linux/kernel/git/next/linux-next.git/commit/?id=1a354eccfe6f685eb1ec2a11f6f03aece8db5f11

[ Malware ]  #Locky #ransomware spreads via #Flash & Windows kernel #exploit: http://bit.ly/1NEFDEt

[ Malware ]  Cryptolocker 4 White Paper Available: The Evolution Continues http://blog.talosintel.com/2016/05/cryptolocker-4-white-paper-available.html

[ Malware ]  Prince of Persia: #Unit42 identifies #Infy #malware active in decade of targeted attacks http://bit.ly/1Z3cQu3

[ Malware ]  Ransomware deployments after brute force RDP attack https://blog.fox-it.com/2016/05/02/ransomware-deployments-after-brute-force-rdp-attack/

[ OpenSourceProject ]  Slack users expose corporate credentials while creating new 'bot' tools http://www.scmagazine.com/slack-users-expose-corporate-credentials-while-creating-new-bot-tools/article/493375/

[ Others ]  Read the April 2016 Exodus #Intel newsletter: http://ow.ly/4nkOrp #ThreatIntel #CyberSec

[ Others ]  Neat paper comparing @ Hacker0x01 and WooYun ecosystems, complete with #Wassenaar warnings! https://s2.ist.psu.edu/paper/An-Empirical-Study-of-Web-Vulnerability-Discovery-Ecosystems.pdf https://t.co/KlpTNF9GDv

[ Others ]  Software Update Destroys $286 Million Japanese Satellite : http://global.jaxa.jp/projects/sat/astro_h/files/topics_20160415.pdf (pdf)

[ Others ]  SSH for Fun and Profit : https://karla.io/2016/04/30/ssh-for-fun-and-profit.html

[ Others ]  A decade of exploits analyzed - http://offs.ec/1rNL9LE

[ Sandbox ]  I wrote a blog on the unprivileged containers I talked about at craft conf & container camp https://blog.jessfraz.com/post/getting-towards-real-sandbox-containers/

[ Tools ]  X11 Guide | Firejail https://firejail.wordpress.com/documentation-2/x11-guide/

[ Web Security ]  CORS Enabled XSS http://brutelogic.com.br/blog/cors-enabled-xss/

[ Windows ]  @ tourismgeek @ Taylorb_msft @ jsnover @ PowerShell_Team just put out an SDK for PowerShell Core on Nano: https://www.powershellgallery.com/packages/Microsoft.PowerShell.NanoServer.SDK/1.0.0.4