[ Android ]  #Malware may abuse Android's accessibility service to bypass security enhancements. More: http://symc.ly/21QD5Wp https://t.co/WR5XGITODo

[ Android ]  ApkSecurityAnalysis - https://github.com/Andy10101/ApkSecurityAnalysis

[ Attack ]  Random OSINT lead: https://www.passivetotal.org/passive/linkconf.net #kaspersky #mask #careto http://kasperskycontenthub.com/wp-content/uploads/sites/43/vlpdfs/unveilingthemask_v1.0.pdf

[ Attack ]  Threat actor leverages #Windows #0day exploit in payment card data attacks https://www.fireeye.com/blog/threat-research/2016/05/windows-zero-day-payment-cards.html https://t.co/Q1ixWLjWbv

[ Browser ]  Browser as an Interactive Disassembler, by Vyacheslav Egorov http://mrale.ph/blog/2015/03/29/browser-as-an-interactive-disassembler.html

[ Browser ]  Detect audio frequency using HTML5 (and more) - Web Audio DAW. Use HTML5 Web Audio API for dynamic sound synthesis : https://github.com/rserota/wad

[ Detect ]  How You Can Set up Honeytokens Using Canarytokens to Detect Intrusions : https://zeltser.com/honeytokens-canarytokens-setup/

[ Detect ]  How to tell if you’re infected with malware http://ow.ly/mh7P1000GJh

[ Exploit ]  New blogpost: "Getting Physical: Extreme abuse of Intel based Paging Systems – Part 1" ... https://blog.coresecurity.com/2016/05/10/getting-physical-extreme-abuse-of-intel-based-paging-systems-part-1/ https://t.co/y2Lw106ag7

[ Exploit ]  APT Advanced shell-code dissection, 1/56 on VT http://blog.morphisec.com/recycling-exploits-cyber-security , @ u_analysis thanks for sample, @ PhysicalDrive0 @ r41p41 @ DEYCrypt

[ Fuzzing ]  Zesty assessment of #infiltrate 2016 talks by @ daveaitel http://cybersecpolitics.blogspot.com/2016/05/the-common-thread-fuzzing-bug-triage.html [bonmots galore; "fuzzers are mightier than the sword"]

[ Hardware ]  AMD CPUs more susceptible to #rowhammer than Intel CPUs http://www.thirdio.com/rowhammera1.pdf (via @ mark_lanteigne) It's all about the access patterns.

[ IoTDevice ]  Rooting the Amazon Echo : https://rbfi.io/dl.php?key=/w3kf/rooting_the_amazon_echo.pdf (pdf)

[ Linux ]  Slides and demo from my @ thotcon talk have been posted! Thanks for the good questions/discussions, keep em coming! https://speakerdeck.com/ropnop/abusing-linux-trust-relationships-authentication-back-alleys-and-forgotten-features

[ Malware ]  Let's Analyze: Dridex (Part 3) http://www.malwaretech.com/2016/05/lets-analyze-dridex-part-3.html

[ Malware ]  New post: Backdoor as a Software Suite: How TinyLoader Distributes and Upgrades PoS Threats http://bit.ly/1OfKLz9 @ TrendMicro

[ OpenSourceProject ]  So arbitrarily wddx packet injection via PHP’s wddx_serialize_value() is not security issue. LOL https://bugs.php.net/bug.php?id=72142

[ Others ]  Most anonymous VNC servers run on a non-standard port - full report: http://buff.ly/24LUeWs

[ Others ]  Locky Gets Clever! http://www.fireeye.com/blog/threat-research/2016/05/locky_gets_clever.html

[ Others ]  New Trojan Uses Fiddler to Redirect Infected Users to Phishing Sites http://ow.ly/esUp1000GI9

[ Others ]  On soundness of static program analysis methods: http://soundiness.org

[ Others ]  New #Unit42 report: #Ransomware is not a “#malware problem” – It’s a criminal business model http://bit.ly/23EnNUh

[ Popular Software ]  .@ Adobe warns of Flash #zeroday, patches 95 vulns in Acrobat, Reader for #PatchTuesday - http://ow.ly/L6Dp3005eeS

[ Popular Software ]  Advisory and PoC for APSB16-14 (CVE-2016-1077) : https://plmsecurity.net/APSB16-14

[ ReverseEngineering ]  #IDAPRO flirt signatures http://woodmann.com/collaborative/tools/index.php/Category:IDA_FLIRT_Signatures

[ Tools ]  #Manalyzer - free service which performs static analysis on PE executables https://manalyzer.org/ https://t.co/M52jlh0CrQ

[ Tools ]  Unik - The Unikernel Compilation and Deployment Platform - https://github.com/emc-advanced-dev/unik cc: @ amirmc @ unikernel

[ Tools ]  Pulsar. Protocol Learning, Simulation and Stateful Fuzzer https://github.com/hgascon/pulsar https://t.co/nvYm3tCsND

[ Tools ]  hydrogen : Multithreaded, non-blocking Linux server framework in Rust : https://github.com/nathansizemore/hydrogen

[ Windows ]  InstallUtil.exe SSH = Bypass + Tunnels What Fun! LocalPortForwarding Example https://gist.github.com/subTee/60832e2867163c1f8e518d141672da99 Library Here: http://sshnet.codeplex.com

[ Windows ]  MS16-053 - Critical: Cumulative Security Update for JScript and VBScript (3156764) - Version: 1.0 https://technet.microsoft.com/en-us/library/security/ms16-053.aspx