[ Android ]  LG Smartphones Affected by Two Severe Vulnerabilities http://ow.ly/6Rrr300Iz9J

[ Android ]  Android 6.0 Marshmallow permission-granting model is under attack http://securityaffairs.co/wordpress/47865/malware/android-marshmallow.html

[ Android ]  Interacting with Samsung radio layer from unprivileged applications http://roberto.greyhats.it/2016/05/samsung-access-rild.html (“stealth call” video: https://twitter.com/rpaleari/status/701780929791008768)

[ Android ]  A reference guide that shows private notes of @ doriancussen about Android Security: https://github.com/doridori/Android-Security-Reference

[ Attack ]  Hackers Stole 68 Million Passwords From Tumblr, New Analysis Reveals https://motherboard.vice.com/read/hackers-stole-68-million-passwords-from-tumblr-new-analysis-reveals

[ Attack ]  Awesome report published by @ citizenlab on Stealth Falcon. Infra indicators are available inside of @ PassiveTotal. https://citizenlab.org/2016/05/stealth-falcon/

[ Browser ]  A fun old MSc thesis (ca. 2009) that deals with heap corruptions, SpiderMonkey v1.7, infoleak construction etc.: https://drive.google.com/file/d/0B5hBKwgSgYFaalNIYVc3OXdrQW8/view?usp=sharing

[ Browser ]  Microsoft Internet Explorer 8 Divide By Zero Proof Of Concept https://packetstormsecurity.com/files/137217/ie8xpsp3-divide-crash-poc.zip

[ Crypto ]  How to Generate Secure Random Numbers (in Various Programming Languages) https://paragonie.com/blog/2016/05/how-generate-secure-random-numbers-in-various-programming-languages

[ Firmware ]  SMM unchecked pointer vulnerability : http://esec-lab.sogeti.com/posts/2016/05/30/smm-unchecked-pointer-vulnerability.html cc @ BrunoPujos https://t.co/7C44kChzQg

[ IoTDevice ]  Hacking an IP camera (Grandstream GXV3611_HD) : http://boredhackerblog.blogspot.in/2016/05/hacking-ip-camera-grandstream-gxv3611hd.html (No cache for URL,for few URL may not work) https://t.co/4HJ25d3s9z

[ Obfuscation ]  Protecting Software through Obfuscation: Can It Keep Pace with Progress in Code Analysis? http://www.cs.rhul.ac.uk/home/kinder/papers/csur16-obfuscation.pdf

[ Others ]  Process Hollowing http://marcoramilli.blogspot.com/2016/05/process-hollowing.html

[ Others ]  Environmental Systems Corporation (ESC) 8832 Data Controller, remotely exploitable, no patch/update -mitigate only: https://ics-cert.us-cert.gov/advisories/ICSA-16-147-01

[ Others ]  TCP Timing Attacks: Practical Web App attacks using "Nanown" presented at back hat ~ https://www.blackhat.com/docs/us-15/materials/us-15-Morgan-Web-Timing-Attacks-Made-Practical.pdf&ved=0ahUKEwiCsp7GvYDNAhUGSlIKHTwYByoQFggdMAE&usg=AFQjCNHfJ5yap96vOANXx3y6vmjFWOXjNg&sig2=Gd_eiqnFG-Vou0cz_675Ow https://github.com/ecbftw/nanown

[ Others ]  Wired Mobile Charging – Is it Safe? https://securelist.com/blog/mobile/74804/wired-mobile-charging-is-it-safe/ via @ Securelist

[ Others ]  Hijacking Bitcoin: Large-scale Network Attacks on Crypto-currencies ~ Maria Apostolaki ~ http://arxiv.org/abs/1605.07524

[ Popular Software ]  The 0day by niubl of Knownsec 404 Security Team has been killed http://blog.knownsec.com/2016/05/imagemagick-popen-remote-command-execution-vulnerability/

[ Popular Software ]  Boot & Crypto Analysis of Sophos SafeGuard Enterprise https://www.logicista.com/2016/sophosboot

[ ReverseEngineering ]  Good morning. I've fixed the IDA Pro console for everyone. Have a look: https://github.com/eset/ipyida https://t.co/Y7snSUQyG4

[ Tools ]  Email Reconnaissance and Phishing Template Generation Made Simple http://cybersyndicates.com/2016/05/email-reconnaissance-phishing-template-generation-made-simple/

[ Web Security ]  wpDiscuz Supercharged native comments 3.1.4 Reflected #XSS http://security.szurek.pl/wpdiscuz-supercharged-native-comments-314-reflected-xss.html #WordPress

[ Windows ]  Duqu 2.0 kernel exploitation technique analysis (part 1 of 2) - https://blogs.technet.microsoft.com/mmpc/2016/05/29/%E2%80%8Bduqu-2-0-kernel-exploitation-technique-analysis-part-1-of-2-2/