[ Android ]  ProbeDroid - A dynamic binary instrumentation kit targeting on Android(Lollipop) 5.0 and above - https://github.com/ZSShen/ProbeDroid

[ Android ]  JEB 2.2.5 is out with ARM 64 and MIPS Android debuggers - https://www.pnfsoftware.com/jeb2cl

[ Android ]  How to recover the orig. code of an Android app protected by AppSolid, tutorial and demo at https://www.pnfsoftware.com/blog/defeating-appsolid-android-protector/ https://t.co/oMoVTZ6SE3

[ Attack ]  Dell Official Website Subdomains Hacked By Kurdish Hackers http://www.tapscape.com/dell-official-website-subdomains-hacked-kurdish-hackers/

[ Attack ]  Our June Threats Report is out! Dive into the findings: http://intel.ly/1UwCXpL

[ Attack ]  ScarCruft APT deploys Adobe Flash Player zero-day in Operation Daybreak: https://securelist.com/blog/75082/cve-2016-4171-adobe-flash-zero-day-used-in-targeted-attacks/

[ Attack ]  Crooks can clone payments cards with a hi-tech contactless device http://securityaffairs.co/wordpress/48355/cyber-crime/cloning-contactless-device.html

[ Attack ]  #Unit42 finds new #sofacy attacks against US government agency http://bit.ly/1U6GfjL

[ Browser ]  Just posted "Exploiting IE’s MS15-106, Part 2: JScript ArrayBuffer.slice Mem Disclosure(CVE-2015-6053)" + CFG bypass https://blog.coresecurity.com/2016/06/14/exploiting-internet-explorers-ms15-106-part-ii-jscript-arraybuffer-slice-memory-disclosure-cve-2015-6053/

[ Conference ]  EnFuse 2016 Slides Open #enfuse2016, https://www.guidancesoftware.com/enfuse-conference/2016/presentations

[ Detect ]  Identifying DNS sinkholes is important when tracking threat actors, here are some tips on finding them http://blog.passivetotal.org/kyf-if-might-be-a-sinkhole-if/ #FIRSTCON16

[ Detect ]  Advanced Malware Evasion Techniques HTTP-Evader http://blogs.cisco.com/security/advanced-malware-evasion-techniques-http-evader

[ iOS ]  Another risky iOS advertisement SDK "Vpon" affected 36 apps in App Store: https://www.fireeye.com/blog/threat-research/2016/06/pwned_by_vpon.html Good job @ jxiej!

[ iOS ]  iOS 9.3 to iOS 10.0 API Differences https://developer.apple.com/library/prerelease/content/releasenotes/General/iOS10APIDiffs/index.html

[ iOS ]  Digging into APFS, Apple’s new file system @ Lee_Ars | http://arstechnica.com/apple/2016/06/digging-into-the-dev-documentation-for-apfs-apples-new-file-system/

[ iOS ]  Continuing my annual tradition: "Notes from #iOS10 and the Mac #OSX 10.12 Preview" - http://newosxbook.com/forum/viewtopic.php?f=8&t=16692 … - v0.1 (more to follow later)

[ macOS ]  A new Python project 'macholibre' could parse CodeSignature and symbols in Mach-O file: https://github.com/aaronst/macholibre code clearer than macholib.

[ Malware ]  RAA - An entirely new JS #ransomware delivering #Pony malware: https://rqt.io/1m https://t.co/7vcPOfEtBv

[ Malware ]  New threat actor uses VBA macros in targeted attacks http://www.malware-reversing.com/2016/06/new-threat-actor-uses-vba-macros-in.html #Malware #Miskip

[ Malware ]  zCrypt Ransomware: under the hood https://blog.malwarebytes.org/threat-analysis/2016/06/zcrypt-ransomware/

[ Obfuscation ]  Obfuscator for the x86 assembler : https://www.pelock.com/products/obfuscator

[ Others ]  Project @ MSFTResearch : Checked C http://research.microsoft.com/en-us/projects/checkedc/ spec & code: https://github.com/Microsoft/CheckedC from David Tarditi, former Midori team member

[ Others ]  For those who missed my #FIRSTCON16 talk yesterday, the slides are online. Be sure to read through the references!! http://www.first.org/resources/papers/conf2016/FIRST-2016-122.pdf

[ Others ]  Critical Vulnerability Compromising Verizon Email Accounts (Again) https://randywestergren.com/critical-vulnerability-compromising-verizon-email-accounts/

[ Pentest ]  Common Malware Persistence Mechanisms http://resources.infosecinstitute.com/common-malware-persistence-mechanisms/

[ Protocol ]  Mobile communications: practical attacks using cheap equipment - http://www.synacktiv.ninja/ressources/synacktiv_mobile_communications_attacks.pdf @ FlUxIuS

[ SecurityProduct ]  okay, finally wrote up my notes on my ClamAV scan http://blog.erratasec.com/2016/06/scanning-for-clamav-0day.html

[ Tools ]  I've made a small script to dump functions from IDA into compilable C++ for re-usage purposes. https://github.com/agustingianni/Utilities#dumpfunctionbytespy

[ Web Security ]  Cross-Site Content Hijacking PoC project has been updated to support CORS as well :) https://github.com/nccgroup/CrossSiteContentHijacking #XSCH

[ Web Security ]  Online CSRF PoC Generator: A web alternative to the Burp Suite Pro and ZAP CSRF PoC generators https://security.love/CSRF-PoC-Genorator/

[ Windows ]  Cisco talks about Microsoft Patch Tuesday – 16 bulletins addressing 44 vulnerabilities ~ http://bit.ly/1XnVlqU via @ ciscosecurity

[ WirelessSecurity ]  Hamnet - A large scale high speed radio network : https://www.tapr.org/pdf/DCC2014-TheEuropeanHAMNET-DG8NGN.pdf (pdf) https://t.co/zXeW0WVUU6