[ Android ]  CVE-2016-2061 PoC: https://goo.gl/a3uR92 CVE-2016-2469 PoC: https://goo.gl/QPPri2 CVE-2016-2465 / 2489 PoC: https://goo.gl/jxWZCr

[ Android ]  Mobile Security News Update June 2016 https://www.mulliner.org/blog/blosxom.cgi/security/mobile_security_news_update_june2016.html #mobilesecurity

[ Android ]  Google patches Mediaserver, Qualcomm drivers, libwebm in #Android Security Bulletin https://threatpost.com/latest-android-security-bulletin-heavy-on-critical-qualcomm-flaws/118479/ via @ threatpost

[ Android ]  Short overview of Cryptolocker and Ransomware for Android http://forensics.spreitzenbarth.de/2016/06/06/overview-cryptolocker-and-ransomware/ https://t.co/FHNIflvAfN

[ Attack ]  171 million http://VK.com accounts stolen by hackers, and are now for sale http://www.zdnet.com/article/vkontakte-vk-hacked-171-million-accounts-sold-dark-web/

[ Attack ]  Ouch. Mark Zuckerberg's social media accounts have been hacked https://t.co/KvVmXOIg5s

[ Browser ]  WAVM : Standalone WebAssembly VM prototype : https://github.com/AndrewScheidecker/WAVM

[ Detect ]  As promised, blog post: Threat Actors Employ COM Technology in Shellcode to Evade Detection https://blogs.mcafee.com/mcafee-labs/threat-actors-employ-com-technology-shellcode-evade-detection.

[ Fuzzing ]  afl-cov 0.6 released: https://github.com/mrash/afl-cov Code coverage for afl-fuzz.

[ Hardware ]  Wi-Fi hack can disable Mitsubishi Outlander's anti-theft alarm http://www.theregister.co.uk/2016/06/06/mitsubishi_outlander_hack/

[ iOS ]  Fingerprint Unlock Security: iOS vs. Google Android http://blog.elcomsoft.com/2016/06/ios-fingerprint-unlock-security/

[ IoTDevice ]  Connect to Bluetooth devices from the browser, with just 3 lines of JavaScript : https://sabertooth-io.github.io/

[ Mac OS X ]  #OSX/#iOS #filemon utility - updated! Can now auto-stop processes and auto-hardlink files! http://NewOSXBook.com/tools/filemon.html https://t.co/nYDDSqREr1

[ Mac OS X ]  As requested - my talk from @ layer_one about #osx_pirrit is up! https://www.youtube.com/watch?v=CHiYT7vU9Fk&feature=youtu.be Slides coming soon

[ Malware ]  Angler Exploit Kit Evading EMET https://www.fireeye.com/blog/threat-research/2016/06/angler_exploit_kite.html h/t @ StuAllard

[ Malware ]  Locky Ransomware Hides Under Multiple Obfuscated Layers of JavaScript https://blogs.mcafee.com/mcafee-labs/locky-ransomware-hides-under-multiple-obfuscated-layers-of-javascript/

[ Malware ]  Hash Factory - Cerber ransomware morphs every 15 seconds http://www.invincea.com/2016/06/hash-factory-new-cerber-ransomware-morphs-every-15-seconds/

[ Others ]  RSA releases latest article on skimmers and hotel safes. Interesting http://www.rsaconference.com/blogs/the-dangers-of-skimmers-and-safes-in-hotel-rooms

[ Pentest ]  Embedding reverse shell in .lnk file or Old horse attacks : http://onready.me/old_horse_attacks.html

[ Popular Software ]  Analysis of Use-After-Free #Vulnerability (CVE-2016-4119) in #Adobe Acrobat and Reader http://blog.fortinet.com/2016/06/06/analysis-of-use-after-free-vulnerability-cve-2016-4119-in-adobe-acrobat-and-reader #Fortinet

[ SecurityProduct ]  Windows 7 firewall bypass PoC http://www.intelligentexploit.com/view-details.html?id=23956

[ Web Security ]  Double Opt-In for Download 2.0.9 Sql Injection http://security.szurek.pl/double-opt-in-for-download-209-sql-injection.html #WordPress #Exploit

[ Web Security ]  Starting to publish my WordPress XSS plugin research results https://gitlab.com/lcashdol/wpxssdb

[ Windows ]  Windows Api Hooking with x86 Assembly : http://www.bmicrosystems.com/blog/windows-api-hooking-with-x86-assembly/ cc @ BatuhanBurakcin

[ Windows ]  Windows IOCTL Reference - http://www.ioctls.net/