[ Attack ]  Android Spyware Targets Security Job Seekers in Saudi Arabia https://blogs.mcafee.com/mcafee-labs/android-spyware-targets-security-job-seekers-in-saudi-arabia/

[ Attack ]  North Korea Fingered In Swift Payments Systems Heists https://packetstormsecurity.com/news/view/26674/North-Korea-Fingered-In-Swift-Payments-Systems-Heists.html

[ Crypto ]  If you’re looking for a comprehensive history of SSL/TLS and PKI, look no further: I built a detailed timeline https://www.feistyduck.com/ssl-tls-and-pki-timeline/

[ Defend ]  XnR No-Execute-After-Read,Preventing Code Disclosure in Commodity Software - http://cs.unc.edu/~jjwerner/near-asiaccs.pdf code https://github.com/UNCSecLab/VMXXNR #VMM #XnR

[ Exploit ]  Writing my first shellcode - iptables -P INPUT ACCEPT : https://0day.work/writing-my-first-shellcode-iptables-p-input-accept/

[ IoTDevice ]  Diagnosis of Embedded Devices (In Japanese) - http://io.cyberdefense.jp/entry/2016/05/09/%E7%B5%84%E8%BE%BC%E6%A9%9F%E5%99%A8%E3%81%AE%E8%A8%BA%E6%96%AD%E3%82%92%E7%B4%B9%E4%BB%8B_1/2 (Part 1) http://io.cyberdefense.jp/entry/2016/05/31/%E7%B5%84%E8%BE%BC%E6%A9%9F%E5%99%A8%E3%81%AE%E8%A8%BA%E6%96%AD%E3%82%92%E7%B4%B9%E4%BB%8B_2/2 (Part 2) Reminds me of my buddies

[ Language ]  .@ gvanrossum announced (optional) static typing in #Python. #PyCon2016 #programming Slides: https://www.dropbox.com/s/efatwr0pozsargb/PyCon%20mypy%20talk%202016.pdf?dl=0 https://t.co/zinKI4l8kg

[ Linux ]  Analysis of stack disclosure vulnerabilities in FreeBSD compatibility layers: http://cturt.github.io/compat-info-leaks.html

[ Malware ]  Locky Ransomware Shipping With a New Loader https://reaqta.com/2016/05/locky-ransomware-new-loader/

[ Malware ]  An analysis of the MBR bootkit referred to as “HDRoot” : http://williamshowalter.com/a-universal-windows-bootkit/ https://t.co/0SM5h5130J

[ Malware ]  Javascript Attachment executing a Payload http://neonprimetime.blogspot.com/2016/05/javascript-attachment-executing-payload.html

[ OpenSourceProject ]  Looking for XSS in PHP Source Code http://brutelogic.com.br/blog/looking-xss-php-source/

[ Others ]  Interesting read on Israeli surveillance vendor, 'Ability,' offering global mobile surveillance http://www.forbes.com/sites/thomasbrewster/2016/05/31/ability-unlimited-spy-system-ulin-ss7/#142723297595 by @ iblametom

[ Others ]  这些年, 我们虐过的漏洞 - http://keenlab.tencent.com/zh/2016/05/25/CVEs-in-KeenLab/ By @ keen_lab Awesome stuff from them for last 10years.

[ Pentest ]  OS X Office Macros with EmPyre http://www.harmj0y.net/blog/empyre/os-x-office-macros-with-empyre/

[ Pentest ]  Wfuzz – Web Application Brute Forcer http://www.darknet.org.uk/2016/05/wfuzz/

[ Popular Software ]  [RT-SA-2016-004] Websockify: Remote Code Execution via Buffer Overflow http://goo.gl/fb/zztjtb #FullDisclosure

[ Popular Software ]  Out-of-Box Exploitation : A Security Analysis of OEM Updaters : https://duo.com/assets/pdf/out-of-box-exploitation_oem-updaters.pdf (pdf)

[ Tools ]  w0w, Cisco just released ROPMEMU tool to analyze ROP chains! Powered by @ capstone_engine & @ unicorn_engine \O/ https://github.com/vrtadmin/ROPMEMU

[ Tools ]  Canape is a network testing tool for arbitrary protocols, specifically designed for binary http://www.contextis.com/services/research/canape/ https://t.co/yA2MJhb6d1

[ Tools ]  Knocked together some debugger detection in PowerShell - https://github.com/FuzzySecurity/PowerShell-Suite/blob/master/Detect-Debug.ps1 https://t.co/uuFJWZYKhC

[ Tools ]  I built KaliBrowser to run @ kalilinux in a @ Docker container with a full web gui. http://jerrygamblin.com/2016/05/31/kalibrowser/

[ Tools ]  Tracking Down Heap Overflows with rr https://sean.heelan.io/2016/05/31/tracking-down-heap-overflows-with-rr/ tl;dr https://github.com/mozilla/rr/wiki/Usage#reverse-execution

[ Tools ]  Get all the Keystone source code, precompiled binaries for Windows & Python modules from our website at http://www.keystone-engine.org/download/

[ Web Security ]  Web Storage: the lesser evil for session tokens? http://blog.portswigger.net/2016/05/web-storage-lesser-evil-for-session.html

[ Windows ]  Windows Zero Day Selling for $90,000: https://threatpost.com/windows-zero-day-selling-for-90000/118380/ via @ threatpost

[ Windows ]  [Blog Post] Comparing PowerShell Objects with CLIXML - http://bit.ly/1Z9eWc0