[ Android ]  Secure Containers in #Android: the Samsung KNOX Case Study https://arxiv.org/pdf/1605.08567v1.pdf

[ Attack ]  There is no barrier to developing malware. Even ISIS managed to produce custom malware for a targeted attack! https://citizenlab.org/2014/12/malware-attack-targeting-syrian-isis-critics/

[ Browser ]  Text to speech in Edge with Speech synthesis API https://blogs.windows.com/msedgedev/2016/06/01/introducing-speech-synthesis-api/

[ Browser ]  Interesting new feature in Chrome 53 https://chromium.googlesource.com/chromium/src/+/e14e5ad593f4b86b03ba71357117bf2ec1bf29c8/third_party/WebKit/LayoutTests/presentation/resources/embedded-smoke-tests.html#52 new PresentationRequest('https://example.com'); p.start()

[ Browser ]  Exploiting Browser-based timing attacks : http://www.slideshare.net/phdays/ss-62583382 (Slides)

[ Browser ]  Scalable and Effective Fuzzing of Google Chrome Browser : http://www.slideshare.net/phdays/google-chrome-62582929 (Slides)

[ Conference ]  SSTIC keynote slides by spender: https://grsecurity.net/SSTIC2016.pdf

[ Debug ]  Very Mighty eXtension for debugging : http://www.slideshare.net/phdays/ss-62582252 (Slides)

[ Detect ]  Exploiting Redundancy Properties of Malicious Infrastructure for Incident Detection : http://www.slideshare.net/phdays/exploiting-redundancy-properties-of-malicious-infrastructure-for-incident-detection (Slides)

[ Forensics ]  New Blog Post: Expanding Skype Forensics With OSINT: IP Addresses | Automating OSINT Blog http://bit.ly/1VwiMwY #osint #dfir

[ Industry News ]  Kaspersky Lab Assists in Russia’s Largest Cybercriminal Arrest: The Hackers Who Stole $45 Million http://www.kaspersky.com/about/news/virus/2016/The-Hackers-Who-Stole-45-Million-Dollars via @ kaspersky

[ Malware ]  Decodes, Downloads and Disguises: Three New Methods for Distributing Malware Using Windows Internal Tools. http://www.invincea.com/2016/05/decodes-downloads-and-disguises-three-new-methods-for-distributing-malware-using-windows-internal-tools/

[ MalwareAnalysis ]  Using Python to Decrypt Dispind.A and Helminth HTTP Beacons : https://breakpoint-labs.com/using-python-to-decrypt-dispind-a-and-helminth-http-beacons/

[ MalwareAnalysis ]  Polichombr :Collaborative malware analysis framework : https://github.com/ANSSI-FR/polichombr

[ Network ]  Monitoring Reflective DDoS with Honeypots : http://www.slideshare.net/phdays/building-digita-ddosl-threat-intelligence-programs-ru-autosaved (Slides)

[ Network ]  HOWTO: Port Forwards through a SOCKS proxy http://blog.cobaltstrike.com/2016/06/01/howto-port-forwards-through-a-socks-proxy https://t.co/lFvaIL1DuW

[ NetworkDevice ]  Cisco Guide to Harden IOS XR Devices http://www.cisco.com/c/en/us/about/security-center/increase-security-ios-xr-devices.html

[ Others ]  Analysis of 10 Million Passwords: http://wpengine.com/unmasked/?SSAID=392587 https://t.co/i93PSgH7Cq

[ Pentest ]  Discovering Subdomains : https://blog.bugcrowd.com/discovering-subdomains

[ Popular Software ]  Critical flaw in KeePass automatic update (over HTTP ?!?!) feature - allows MiTM and push bad updates (RCE). https://bogner.sh/2016/03/mitm-attack-against-keepass-2s-update-check/

[ Popular Software ]  Tcpdump crash in 4.5.1 https://www.exploit-db.com/exploits/39875/

[ Programming ]  Beyond Memory Safety With Types : https://insanitybit.github.io/2016/05/30/beyond-memory-safety-with-types

[ ReverseEngineering ]  Reversing C++ (Pt. 3) – Objects: The Basics : http://cybersmash.io/reversing-c-pt-3-objects-the-basics/ , Pt 2 : http://cybersmash.io/reversing-c-pt-2-switch-statement/ ,Pt 1 : http://cybersmash.io/reversing-c-pt-1-function-overloading-and-function-templates/

[ Tools ]  Research Spotlight: ROPMEMU – A Framework for the Analysis of Complex Code Reuse Attacks http://blogs.cisco.com/security/talos/ropmemu

[ Tools ]  AD ACL Scanner #PowerShell tool to create reports of DACLs & SACLs in AD via @ h0ng10 https://adaclscan.codeplex.com/ https://t.co/2uFsRPR6AG

[ Tools ]  gunpack - a generic tool for unpacking malware https://bitbucket.org/iwseclabs/gunpack/

[ Virtualization ]  Abusing Privileged and Unprivileged Linux Containers https://www.nccgroup.trust/us/our-research/abusing-privileged-and-unprivileged-linux-containers/

[ Web Security ]  Joomla SecurityCheck extension - Multiple vulnerabilities http://goo.gl/fb/n9WMSk #FullDisclosure

[ Web Security ]  Over a million #WordPress sites at risk due to XSS #vulnerability: http://bit.ly/280PWcZ #cybersecurity

[ Web Security ]  Discuz X系列门户文章功能SSRF漏洞挖掘与分析 - http://bobao.360.cn/learning/detail/2889.html by 360's 0kee team

[ Web Security ]  Taking over Heroku accounts : http://esevece.github.io/2016/06/01/taking-over-heroku-accounts.html

[ Web Security ]  Web Application Firewall Bypassing : http://www.slideshare.net/phdays/ss-62570233 (Slides)

[ Windows ]  Relevance of Windows EventIDs in Investigation http://resources.infosecinstitute.com/relevance-of-windows-eventids-in-investigation/

[ Windows ]  Chaining MS16-032 with Excel DDE to get macro-less command exec in a phishing payload https://sensepost.com/blog/2016/powershell-c-sharp-and-dde-the-power-within/ by @ Saif_Sherei

[ Windows ]  Spread the word…the May-June issue of The NT Insider is available: http://bit.ly/1TJHW6y https://t.co/F3POXvIUzg