[ Android ]  Attacks and Defence on Android Free Floating Windows - https://dl.acm.org/citation.cfm?id=2897897

[ Android ]  Interested to read this: Consumer-centric android application repackaging detection (http://www.sciencedirect.com/science/article/pii/S0167739X16301327) from @ lcavallaro

[ Android ]  LG Now Has Its Own Security Bulletin Like Google And Samsung http://www.androidpolice.com/2016/06/10/lg-now-security-bulletin-like-google-samsung/ https://t.co/SimZJsTfLL

[ Android ]  Android /system/bin/sdcard Stack Buffer Overflow https://packetstormsecurity.com/files/137404/GS20160609225743.tgz

[ Attack ]  Latest Intelligence for May 2016 http://www.symantec.com/connect/ko/blogs/latest-intelligence-may-2016-0

[ Browser ]  Window Hijacking: Using JavaScript to open a new tab then change location of tab after an arbitrary period of time : https://github.com/dxa4481/windowHijacking

[ Browser ]  This mobile performance paper is always worth re-reading: http://sealedabstract.com/rants/why-mobile-web-apps-are-slow/

[ Cloud ]  Distributed honeypot deployment in the cloud. H/T @ MalwareMustDie http://simonclary.com/wp-content/uploads/2016/05/How-feasible-is-a-distributed-honeypot-deployment-in-the-cloud-v-1.pdf (PDF) cc: @ binitamshah https://t.co/NdjvPoIzua

[ Defend ]  Intel Release New Tech Specifications to Protect Against ROP Attacks : https://blogs.intel.com/evangelists/2016/06/09/intel-release-new-technology-specifications-protect-rop-attacks/ ,CET Details: https://software.intel.com/sites/default/files/managed/4d/2a/control-flow-enforcement-technology-preview.pdf (pdf)

[ Detect ]  FUNNY HONEY – TRACKING HACKERS IN CYBERSPACE : DFIR BLOG https://dfir-blog.com/2016/05/17/funny-honey-tracking-hackers-in-cyberspace-part1/

[ Fuzzing ]  Open Source Fuzzers list : https://www.peerlyst.com/posts/resource-open-source-fuzzers-list

[ Fuzzing ]  delta debugging on afl crashes https://github.com/MarkusTeufelberger/afl-ddmin-mod readings:"Reducers are Fuzzers" http://blog.regehr.org/archives/1284 paper http://citeseerx.ist.psu.edu/viewdoc/download?doi=10.1.1.126.6907&rep=rep1&type=pdf

[ Hardware ]  Drone Bypass : http://blog.ptsecurity.com/2016/06/phd-vi-how-they-stole-our-drone.html https://t.co/h77SUtqKF9

[ Hardware ]  How I hacked the Self Balancing Scooter : http://drewspewsmuse.blogspot.in/2016/06/how-i-hacked-self-balancing-scooter.html https://t.co/NR2MHlFTAL

[ Hardware ]  Computer Engineering (A DEC View of Hardware Systems Design) : http://research.microsoft.com/en-us/um/people/gbell/Computer_Engineering/index.html #FYI #b2b

[ Hardware ]  Hacking the CampCopter (@ ToorCamp) slides are up: http://greatscottgadgets.com/slides/ossmann-spill-toorcamp-2016.pdf

[ IoTDevice ]  Practical Reverse Engineering http://jcjc-dev.com/2016/04/08/reversing-huawei-router-1-find-uart/ http://jcjc-dev.com/2016/04/29/reversing-huawei-router-2-scouting-firmware/ http://jcjc-dev.com/2016/05/23/reversing-huawei-3-sniffing/ http://jcjc-dev.com/2016/06/08/reversing-huawei-4-dumping-flash/

[ Linux ]  Linux Kernel 4.4.x (Ubuntu 16.04) - Use-After-Free vulnerability https://www.exploit-db.com/exploits/39772/ #exploitdev #vunl #infosec https://t.co/UFqyeOobgv

[ Mac OS X ]  OS X exploitable kernel NULL pointer dereference in IOAudioEngine https://bugs.chromium.org/p/project-zero/issues/detail?id=776#c_ts1465491638

[ Mac OS X ]  OS X Kernel GeFore GPU Driver Stack Buffer Overflow https://packetstormsecurity.com/files/137394/GS20160609224302.tgz

[ Mac OS X ]  OS X / iOS Kernel IOHDIXControllerUserClient Use-After-Free https://packetstormsecurity.com/files/137395/GS20160609224508.tgz

[ Mac OS X ]  Just released the Hopper plugin I wrote for demangling Swift symbols https://github.com/keith/hopper-swift-demangle https://t.co/DhEcPPnYYt

[ Malware ]  Necurs Botnet, one of the world’s largest malicious architecture has vanished http://securityaffairs.co/wordpress/48248/cyber-crime/necurs-botnet.html

[ Malware ]  New decryption utilities further bury #TeslaCrypt #ransomware https://threatpost.com/decryption-utilities-unlock-files-encrypted-by-all-teslacrypt-versions/118602/

[ Malware ]  Petya and Mischa – Ransomware Duet (part 2) https://blog.malwarebytes.org/threat-analysis/2016/06/petya-and-mischa-ransomware-duet-part-2/

[ Malware ]  #Zcrypt expands reach as "virus #ransomware," uses same Nullsoft installer as CryptoLocker http://intel.ly/1UjUwgK https://t.co/SSgnzk1jpz

[ Malware ]  Reverse-engineering DUBNIUM | @ msftmmpc #APT #Malware Analysis https://blogs.technet.microsoft.com/mmpc/2016/06/09/reverse-engineering-dubnium-2/

[ MalwareAnalysis ]  NCC Group Cyber Defense Operations Technical Note and more: on Sakula DLL Planting Analysis - https://github.com/nccgroup/Cyber-Defence/tree/master/Technical%20Notes/Sakula by @ edeca

[ Network ]  Optimizing TLS over TCP to reduce latency http://blog.cloudflare.com/optimizing-tls-over-tcp-to-reduce-latency/

[ OpenSourceProject ]  Two fresh penetration reports of ours were published via MOSS. Tested were PCRE and libjpeg-turbo - enjoy: https://wiki.mozilla.org/MOSS/Secure_Open_Source/Completed

[ OpenSourceProject ]  Talos Blog: Vulnerability Spotlight: PDFium Vulnerability in Google Chrome Web Browser http://tinyurl.com/j3ase9g

[ Others ]  Slides for my OWASP Gothenburg talk are here https://speakerdeck.com/0xtero/security-for-enterprise-hobbits

[ Others ]  DRAMA Reverse-Engineering Tool and Side-Channel Tools : https://github.com/IAIK/drama cc @ lavados

[ Others ]  "XSS vulnerabilities account for 66% of valid submissions" is why we're pushing hard on CSP in @ mozsec . src: https://pages.bugcrowd.com/hubfs/PDFs/state-of-bug-bounty-2016.pdf

[ Others ]  Build and run your unikernel in python with unik. Great project : https://github.com/emc-advanced-dev/unik/blob/master/docs/getting_started_python3.md

[ Pentest ]  Dissecting Veil-Evasion Powershell Payloads and Converting to a Bind Shell : http://threat.tevora.com/dissecting-veil-evasion-powershell-payloads-and-converting-to-a-bind-shell/

[ Pentest ]  Mapping your LAN from a web browser: http://blog.beefproject.com/2016/06/mapping-your-lan-from-web-browser.html

[ Popular Software ]  Apache Struts REST Plugin With Dynamic Method Invocation Remote Code Execution https://packetstormsecurity.com/files/137375/struts_dmi_rest_exec.rb.txt

[ ReverseEngineering ]  awesome reversing resources by @ 0xtyh https://github.com/0xtyh/awesome-reversing

[ ReverseEngineering ]  Using IDAPython to Make Your Life Easier: Part 6 http://researchcenter.paloaltonetworks.com/2016/06/unit42-using-idapython-to-make-your-life-easier-part-6/

[ Tools ]  [NEW PROJECT] A very vulnerable web in NodeJS for measure security analysis tools #nodejs https://github.com/cr0hn/vulnerable-node https://t.co/92FHLP2Js2

[ Tools ]  I wrote a python script to parse the RecentDocs key: http://www.raptir.com/2016/06/recentdocs-python-script.html Also, my first blog post!