[ Android ]  Google to kill passwords on Android, replace 'em with 'trust scores' http://www.theregister.co.uk/2016/05/24/google_smartphone_password_replacement_trust_scores/

[ Android ]  How to: Testing Android Application Security, Part 1 https://blogs.mcafee.com/mcafee-labs/testing-android-application-security-part-1/

[ Attack ]  #Unit42 discovers new #Wekby attack using DNS requests as C2 mechanism http://bit.ly/1TUGTQN #cybersecurity

[ Crypto ]  How to Use the REST API to Encrypt S3 Objects by Using AWS KMS http://blogs.aws.amazon.com/security/post/Tx1XVNEO1G6VT04/How-to-Use-the-REST-API-to-Encrypt-S3-Objects-by-Using-AWS-KMS

[ Defend ]  Waf.js: How to Protect Web Applications using JavaScript @ ru_raz0r and my slides from our talk at @ phdays: http://www.slideshare.net/DenisKolegov/wafjs-how-to-protect-web-applications-using-javascript

[ Detect ]  Identifying VM Checking and Detecting in Malware http://www.morphick.com/blog/2014/12/3/vm-checking-and-detecting

[ Detect ]  .NET GUIDs to help hunt for malware https://www.virusbulletin.com/virusbulletin/2015/06/using-net-guids-help-hunt-malware used to determine whether multiple malware samples are from the same VS Project

[ Fuzzing ]  mutation-based general purpose fuzzer, written in JavaScript https://github.com/attekett/Surku

[ Hardware ]  FBI: Wireless Keystroke Logger Disguised as USB Device Charger Targets Wireless Keyboards http://www.americanbar.org/content/dam/aba/administrative/cyberalert/keysweeper.authcheckdam.pdf https://t.co/DYvpOSRptw

[ Hardware ]  One gate to rule them all. Fabrication-time hardware attack gets best paper award at IEEE S&P (PDF) http://ieee-security.org/TC/SP2016/papers/0824a018.pdf

[ Hardware ]  The Secret Life of SIM Cards http://fb.me/7QfXEWESh

[ iOS ]  This is what a user sees when my captive portal prompts to install a malicious root CA https://www.sensepost.com/blog/2016/too-easy-adding-root-cas-to-ios-devices/ https://t.co/SA9zyrQp2M

[ IoTDevice ]  Hacking the Kinect (Guide to Reverse Engineering USB protocols) : https://learn.adafruit.com/hacking-the-kinect/overview

[ Linux ]  Netdata - Real-Time Performance Monitoring -- http://www.kitploit.com/2016/05/netdata-real-time-performance-monitoring.html

[ Network ]  Tor - Building the Next Generation of Onion Services : https://blog.torproject.org/blog/mission-montreal-building-next-generation-onion-services

[ Network ]  Invisible Hijacking: a case study of hijacking millions of IP address invisibly with BGP - RIPE72 presentation https://ripe72.ripe.net/presentations/45-Invisible_Hijacking.pdf

[ Network ]  A Forensic Case Study on AS Hijacking : The Attacker’s Perspective : http://www.sigcomm.org/sites/default/files/ccr/papers/2013/April/2479957-2479959.pdf (pdf)

[ Obfuscation ]  Breaking simple executable cryptor http://yurichev.com/blog/breaking_simple_exec_crypto/

[ Others ]  Patterns and anti-patterns in password hygiene by #AzureAD @ RobynHicock from analyzing millions of leaked passwords http://research.microsoft.com/pubs/265143/Microsoft_Password_Guidance.pdf

[ Others ]  Pastejacking : Using JavaScript to override your clipboard contents and trick you into running malicious commands : https://github.com/dxa4481/Pastejacking

[ Pentest ]  New blog post in the EmPyre series from @ Killswitch_GUI and I that covers persistence with EmPyre. https://www.xorrior.com/the-return-of-the-empyre/

[ Popular Software ]  Publishing more of my slide decks http://www.slideshare.net/LarryCashdollar/mining-ruby-gem-vulnerabilities-for-fun-and-no-profit

[ Popular Software ]  Dropbox developed their own .kext to run in your OS X kernel. But end-to-end crypto is too hard? ¯\_(ツ)_/¯ https://blogs.dropbox.com/tech/2016/05/going-deeper-with-project-infinite/

[ Popular Software ]  PayPal remote code execution using Java deserialization ? - http://artsploit.blogspot.co.uk/2016/01/paypal-rce.html

[ Popular Software ]  Mogwai Security Advisory MSA-2016-01: PowerFolder Remote Code Execution Vulnerability http://lab.mogwaisecurity.de/advisories/MSA-2016-01/

[ Tools ]  How to Build a PCI-DSS Dashboard with ELK and Wazuh http://logz.io/blog/how-to-build-a-pci-dss-dashboard-with-elk-and-wazuh/

[ Tools ]  CJExploiter - Drag and Drop ClickJacking Exploit Development Assistance Tool -- http://www.kitploit.com/2016/05/cjexploiter-drag-and-drop-clickjacking.html

[ Tools ]  Clair - Vulnerability Static Analysis for Containers -- http://www.kitploit.com/2016/05/clair-vulnerability-static-analysis-for.html

[ Windows ]  New ERNW Newsletter: "Security Assessment of Microsoft DirectAccess" https://www.ernw.de/download/newsletter/ERNW_Newsletter_53_MS_DA_Security_Assessment_Signed.pdf [PDF] #IPv6 https://t.co/0zdln5ihkg

[ WirelessSecurity ]  WiFi-Pumpkin v0.7.5 - Framework for Rogue Wi-Fi Access Point Attack -- http://www.kitploit.com/2016/05/wifi-pumpkin-v075-framework-for-rogue.html