[ Android ]  Following Devil’s Footprints: Cross-Platform Analysis of Potentially Harmful Libraries on Android and iOS: http://www.ieee-security.org/TC/SP2016/papers/0824a357.pdf

[ Attack ]  Widespread Vulnerable Ads (Part Two) : Flash Edition (Facebook’s LiveRail, Akamai, Adobe products affected) : https://randywestergren.com/widespread-vulnerable-ads-part-two-flash-edition-facebooks-liverail-akamai-adobe-products-affected/

[ Attack ]  Tech Support Scammers using Winlogon https://blog.malwarebytes.org/cybercrime/2016/05/tech-support-scammers-using-winlogon/

[ Attack ]  FireEye detects unique #cyber attacks targeting banks in Middle East: http://bddy.me/27Qhemh #infosec

[ Attack ]  Excellent report from MELANI / GovCERT.ch about the APT attack against RUAG: https://www.govcert.admin.ch/blog/22/technical-report-about-the-ruag-espionage-case #turla

[ Conference ]  All #PHDays video is now online http://www.phdays.com/broadcast/

[ Defend ]  Designing secure digital services: It is essential that public sector can build systems that are robust to attack https://www.cesg.gov.uk/news/designing-secure-digital-services

[ Detect ]  CapTipper is a Python tool to explore malicious HTTP traffic, also review sessions from PCAP ~ http://www.darknet.org.uk/2016/05/captipper-explore-malicious-http-traffic/

[ Detect ]  Ransomware Steals your Phone. Formal Methods Rescue it. https://www.researchgate.net/profile/Antonella_Santone/publication/301564057_Ransomware_Steals_your_Phone_Formal_Methods_Rescue_it/links/571f0ddc08aefa648899ab23.pdf [Paper - 6/2016]

[ IoTDevice ]  Abusing Easy Smart TP-Link switches. How to sniff and crack admin creds: https://www.pentestpartners.com/blog/how-i-can-gain-control-of-your-tp-link-home-switch/ https://t.co/NqjojKcpCL

[ Mac OS X ]  Staying Secure and Unprepared: Understanding and Mitigating the Security Risks of Apple ZeroConf: http://www.ieee-security.org/TC/SP2016/papers/0824a655.pdf

[ Malware ]  Dridex Updates Payload Distribution : http://www.malwaretech.com/2016/05/dridex-updates-payload-distribution.html cc @ MalwareTechBlog

[ Malware ]  #Unit42 discovers Operation #Ke3chang has resurfaced with new #TidePool #malware http://bit.ly/22l2g3S

[ Malware ]  DMA Locker 4.0 – Known Ransomware Preparing For A Massive Distribution https://blog.malwarebytes.org/threat-analysis/2016/05/dma-locker-4-0-known-ransomware-preparing-for-a-massive-distribution/

[ Obfuscation ]  Effectiveness of Synthesis in Concolic Deobfuscation https://hal.inria.fr/hal-01241356/document

[ Others ]  Our side-channel attack on inferring visited websites on #Android (in #Tor browser) accepted @spw2016 w/@SGriesmayr https://t.co/dpGV5qn8iy

[ Others ]  The Megaprocessor - Architecture : http://www.megaprocessor.com/architecture.html ,Instruction Set : http://www.megaprocessor.com/instruction_set.pdf (pdf)

[ Others ]  Spawning a Shell by LFI Poisoning Log Files http://infoseczone.net/spawning-a-shell-by-lfi-poisoning-log-files/

[ Popular Software ]  Adobe patches Connect: https://helpx.adobe.com/security/products/connect/apsb16-17.html

[ Popular Software ]  Exploring Java deserialization in GitHub http://philwantsfish.github.io/security/java-deserialization-github

[ ReverseEngineering ]  Practical Reverse Engineering (Part 3) - Following the Data : http://jcjc-dev.com/2016/05/23/reversing-huawei-3-sniffing/ ,Part 2 : http://jcjc-dev.com/2016/04/29/reversing-huawei-router-2-scouting-firmware/

[ Tools ]  Free decryptor for TeslaCrypt #ransomware https://kas.pr/Zth7 https://t.co/kfKmOxC5F1

[ Tools ]  #malware #shellcode detector https://www.malwaretracker.com/shellcode.php

[ Tools ]  Slides for my presentation on predictive modeling ecosystem at @ pydataberlin: http://ogrisel.github.io/decks/2016_pydata_berlin/ / notebook: https://github.com/ogrisel/docker-distributed

[ Web Security ]  Slides from my #XSS Talk @ BsidesBoston http://brutelogic.com.br/docs/advanced-xss.pdf @ plaverty9 @ _larry0 @ danielcid @ perezbox https://t.co/8v8QtNdLMF

[ Web Security ]  My slides from @ BsidesBoston https://gitlab.com/lcashdol/slides/blob/master/wordpress-1352.pdf cc @ forced_request

[ Windows ]  #DFIR analysts: get familiar w/native BootExecute apps like #Furtim https://technet.microsoft.com/en-us/sysinternals/bb897447.aspx https://kobyk.wordpress.com/2008/07/26/debugging-user-mode-bootexecute-native-applications-with-kd/ https://t.co/IOFo0N7PDC

[ Windows ]  Pico Process Overview - https://blogs.msdn.microsoft.com/wsl/2016/05/23/pico-process-overview/ project drawbridge and wsl