[ Android ]  We uncovered a campaign of Android/Clicker.G in dozens of malicious apps on #GooglePlay: http://intel.ly/26Vd6kC https://t.co/SXcxV86Mec

[ Android ]  A Study of Android Malware Detection Techniques and Machine Learning - http://ecommons.udayton.edu/cgi/viewcontent.cgi?article=1015&context=maics

[ Android ]  War of the Worlds - Hijacking the Linux Kernel from QSEE http://bits-please.blogspot.com/2016/05/war-of-worlds-hijacking-linux-kernel.html

[ Android ]  Android N media stack hardening (-fsanitize=integer in trapping mode and split up + better sandboxed mediaserver): https://android-developers.blogspot.ca/2016/05/hardening-media-stack.html.

[ Android ]  CENSUS advisory & details for CVE-2016-0842 (Android stagefright ih264d_read_mmco_commands OOB write) https://census-labs.com/news/2016/05/04/libstagefright-ih264d-read-mmco-commands-overflow/ by @ anestisb

[ Android ]  Exploiting CVE-2016-2060 on Qualcomm devices http://bddy.me/21A5ujD #mobile #Android https://t.co/BYzDxJKSkm

[ Attack ]  Hacker collects 272m email addresses and passwords, some from Gmail http://flip.it/qKnQ9

[ Attack ]  The DBIR’s ‘Forest’ of Exploit Signatures http://blog.trailofbits.com/2016/05/05/the-dbirs-forest-of-exploit-signatures/ via @ trailofbits

[ Debug ]  Debugging Node.js apps using core dumps - https://reaktor.com/blog/debugging-node-js-applications-using-core-dumps/

[ Exploit ]  Introduction to Win32 Shellcode Using Visual Studio's Compiler : http://winternl.com/2016/05/02/hello-world/

[ Linux ]  Linux (Ubuntu 16.04) - Reference Count Overflow Using BPF Maps https://cxsecurity.com/issue/WLB-2016050015

[ Malware ]  Petya : the two-in-one trojan : https://securelist.com/blog/research/74609/petya-the-two-in-one-trojan/ https://t.co/JLx1tyODLH

[ Malware ]  Sophisticated New Packer Identified in CryptXXX Ransomware Sample https://www.sentinelone.com/blogs/sophisticated-new-packer-identified-in-cryptxxx-ransomware-sample/

[ MalwareAnalysis ]  Looking for code similarities between malware binaries - a case study of Regin & Qwerty https://hal.inria.fr/hal-01263123/document

[ MalwareAnalysis ]  PDF/XDP Malware Reversing http://cerbero-blog.com/?p=1612

[ NetworkDevice ]  Here’s a CSRF PoC that levels up LAN-only vulns to WAN-exploitable on Netgear routers. https://github.com/zcutlip/exploit-poc/tree/master/netgear/r6200/addportmapping-csrf

[ OpenSourceProject ]  My OpenSSL bug (CVE-2016-2107) provides a direct padding oracle, not a timing oracle as many claim. Updated my post: http://web-in-security.blogspot.de/2016/05/curious-padding-oracle-in-openssl-cve.html

[ Others ]  Lede Project, OpenWRT reboot https://goo.gl/q5zRh9

[ Others ]  Introduction to Intel® SGX Sealing http://ift.tt/1X9hckS #TECH #IamIntel #Intel

[ Others ]  WordPress Redirect Hack via http://Test0.com/Default7.com https://blog.sucuri.net/2016/05/wordpress-redirect-hack-test0-default7.html

[ Others ]  Writeup on exploiting a double-free in PHP double-link-list by manipulating the small heap allocator. http://www.libnex.org/blog/doublefreeinstandardphplibrarydoublelinklist #CVE-2016-3132

[ Others ]  Reverse Engineering Sneaker Bots – Stealing Your New Shoes https://blog.perimeterx.com/sneaker-bots/

[ Others ]  High-severity Vulnerability in Squid Proxy Server Allows Cache Poisoning http://blog.ptsecurity.com/2016/05/squoison-attack-high-severity.html

[ Others ]  Read how I accidentally stalked someone with Bluetooth LE http://www.contextis.com/resources/blog/bluetooth-le-increasingly-popular-still-not-very-private/

[ Pentest ]  Meterpreter Cheat Sheet : https://scadahacker.com/library/Documents/Cheat_Sheets/Hacking%20-%20Meterpreter%20Cheat%20%20Sheet.pdf (pdf)

[ Pentest ]  A followup on my blog on SNMP best practices - How to leverage SNMP during pen testing https://community.rapid7.com/community/services/blog/2016/05/05/snmp-data-harvesting-during-penetration-testing @ rapid7

[ Popular Software ]  Using CA Process Automation to Get Command Execution as SYSTEM https://securityriskadvisors.com/blog/post/using-ca-process-automation-to-get-command-execution-as-system/ // "Designer for the win". Indeed.

[ Tools ]  #SpringSecurity 4.1 GA released! Config improve, CSP, HPKP, AngularJS, Path Vars, meta annotation, … https://spring.io/blog/2016/05/05/spring-security-4-1-0-released #spring #javaee

[ Tools ]  FeatherDuster is public! https://github.com/nccgroup/featherduster

[ Tools ]  injector : command-line interface dll injector : https://code.google.com/archive/p/injector/

[ Windows ]  Developing PowerShell Cmdlets for Nano Server using the PowerShell Core SDK https://blogs.msdn.microsoft.com/powershell/2016/05/04/developing-powershell-cmdlets-for-nano-server-using-the-powershell-core-sdk/