[ Android ]  Android Malware Analysis http://resources.infosecinstitute.com/android-malware-analysis-2/

[ Attack ]  Rotten Apples: Apple-like Malicious Phishing Domains http://www.fireeye.com/blog/threat-research/2016/06/rotten_apples_apple.html

[ Backdoor ]  browser-backdoor : Cross platform WebSocket Remote Access Tool built with Electron which has Full access to the API: https://github.com/IMcPwn/browser-backdoor

[ Crypto ]  Our paper on "Backdoors in Pseudorandom Number Generators: Possibility and Impossibility Results" is online at https://eprint.iacr.org/2016/577.pdf

[ Crypto ]  The Illusion Of An Encrypted Internet https://threatpost.com/the-illusion-of-an-encrypted-internet/118519/

[ Detect ]  We release a snort x509 certificate reputation plugin http://seclists.org/snort/2016/q2/324 source: https://github.com/CERT-Polska/snort3-x509-reputation-plugin

[ Exploit ]  Walkthrough on writing your own shellcode to spawn a shell. https://paraschetal.in/writing-your-own-shellcode/

[ MachineLearning ]  An All-In-one Docker Image for Deep Learning https://github.com/saiprashanths/dl-docker

[ Malware ]  hooray! we have a new post! https://mlwre.github.io/2016/06/06/Crypren-Ransomware-Analysis.html #malware #ransomware #crypren

[ Malware ]  New post: Ransomware Leaves Server Credentials in its Code http://bit.ly/25KvKgZ @ TrendMicro

[ Malware ]  Ransomware dominates the threat landscape https://blog.malwarebytes.org/cybercrime/2016/06/ransomware-dominates-the-threat-landscape/

[ Malware ]  In part two of this blog series, @ malware_traffic examines #Angler exploit kits http://bit.ly/22Ndi1U #cybersecurity

[ MalwareAnalysis ]  Recovering A Ransomed PDF https://blog.didierstevens.com/2016/06/07/recovering-a-ransomed-pdf/ #DFIR #malware by @ DidierStevens

[ MalwareAnalysis ]  Automatic Reverse Engineering of Malware Emulators : http://old.iseclab.org/people/andrew/download/oakland09.pdf pdf) https://t.co/3NEyEVskIz

[ OpenSourceProject ]  Try billm's new Firefox code search tool, Searchfox. It understands C++ code better, and has good builtin blame. https://billmccloskey.wordpress.com/2016/06/07/searchfox/

[ Others ]  You Don't Know JS: https://github.com/getify/You-Dont-Know-JS - This is a series of (free) books diving deep into the core mechanisms of the JS.

[ Others ]  New advisory! A command injection flaw in IBM's Spectrum Scale/GPFS clustered file system reported by @ j0hn__f https://labs.mwrinfosecurity.com/advisories/ibm-gpfs-spectrum-scale-command-injection/

[ Others ]  New blog post, first in a series introducing our LAVA bug injection system: http://moyix.blogspot.com/2016/06/how-to-add-a-million-bugs-to-a-program.html

[ Pentest ]  Your 2016 Penetration Testing Toolkit from @ Rapid7 http://conta.cc/1teWhC3

[ Popular Software ]  Valve Steam 3.42.16.13 Local Privilege Escalation https://packetstormsecurity.com/files/137343/valvesteam-escalate.txt

[ Popular Software ]  Details on a stack-based buffer overflow in the Adobe CFF rasterizer in FreeType2 (CVE-2014-2240, CVE-2014-9659) http://j00ru.vexillium.org/?p=2245

[ SecurityProduct ]  armadito-av - Armadito antivirus main repository https://github.com/armadito/armadito-av

[ SecurityProduct ]  (In-) Security of Security Applications - Mobile AVs https://www.sit.fraunhofer.de/fileadmin/dokumente/Presse/teamsik_advisories_AV.pdf?_=1464692835

[ Web Security ]  Uber disclosed a bug submitted by @ klikkioy: https://hackerone.com/reports/136531 #hackerone #bugbounty https://t.co/pklY3lhJp8

[ Web Security ]  Vulnerabilities in Facebook Chat and Messenger exploitable with basic HTML knowledge : http://blog.checkpoint.com/2016/06/07/facebook-maliciouschat/

[ Web Security ]  Wordpress Levo-Slideshow 2.3 - Arbitrary File Upload Vulnerability http://goo.gl/fb/P0BNPn #FullDisclosure

[ Windows ]  Be mindful of malicious #PowerShell proxy functions... e.g. a simple credential stealer: https://gist.github.com/mattifestation/97ceccd93133c7a1d39a1661922fe545

[ Windows ]  Auto capture a full mem dump for any #PowerShell host process upon termination w/ procdump and WMI https://gist.github.com/mattifestation/7fe1df7ca2f08cbfa3d067def00c01af @ markrussinovich

[ Windows ]  Windows 10 updates via UDP bypassing QoS restrictions : https://forums.whirlpool.net.au/forum-replies.cfm?t=2530363

[ Windows ]  Microsoft expanding Bounty program https://t.co/ndoKiOnxT2