[ Android ]  Huawei Is the Best OEM at Applying Android Security Updates http://twib.in/l/aAE9kRp7Rx4A https://t.co/rukU8iZP44

[ Attack ]  Threat Update: Nigerian Cybercriminals Target High-Impact Industries in India via Pony https://blog.cylance.com/threat-update-nigerian-cybercriminals-target-high-impact-indian-industries-via-pony

[ Attack ]  SecureWorks, bruteforcing bit.ly links, concludes HRC/DNC campaign seniors were spearphished https://www.secureworks.com/research/threat-group-4127-targets-hillary-clinton-presidential-campaign https://t.co/iSoDustILB

[ Conference ]  2016 Kcon西部 - https://drive.google.com/folderview?id=0B_thUFNIy8TdYmYyWFFqbzBua0U&usp=sharing

[ Firmware ]  Exploring and exploiting Lenovo firmware secrets http://blog.cr4.sh/2016/06/exploring-and-exploiting-lenovo.html

[ Fuzzing ]  A simple concolic execution tool for exploring the input space of a binary executable program based in Triton https://github.com/CIFASIS/nosy-newt

[ Hardware ]  Reverse Engineering Quadcopter Protocols http://hackaday.com/2016/06/28/reverse-engineering-quadcopter-protocols/

[ IoTDevice ]  .@ _jsoo_ Found it. https://drive.google.com/file/d/0B_thUFNIy8TdVktDSlVnWkdoYzA/view?usp=sharing

[ Linux ]  Two exploitable vulnerabilities in the #linux #kernel that can lead to privilege escalation or denial of service https://twitter.com/nixcraft/status/746744760442851328

[ Malware ]  Neutrino EK: fingerprinting in a Flash https://blog.malwarebytes.com/cybercrime/exploits/2016/06/neutrino-ek-fingerprinting-in-a-flash/

[ Malware ]  Satana ransomware – threat coming soon? https://blog.malwarebytes.com/threat-analysis/2016/06/satana-ransomware/

[ Network ]  WireGuard : Next generation fast,modern,secure in-kernel modern VPN (alt. to IPSec & OpenVPN) : https://www.wireguard.io/

[ OpenSourceProject ]  new post - Apache Xerces XML parser Use-After-Free (fix pending) - https://marcograss.github.io/security/2016/06/29/xerces-xml-uaf.html kudos to Gustavo Grieco who found it first!

[ OpenSourceProject ]  All Github repos (commits and code, 3TB, 145M commits, 162M files) are now queryable using BigQuery in seconds: https://github.com/blog/2201-making-open-source-data-more-available

[ Others ]  Blog post: “memcpy (and friends) with NULL pointers” https://www.imperialviolet.org/2016/06/26/nonnull.html

[ Others ]  (Deep)Learning to Break Semantic Image CAPTCHAs : http://www.cs.columbia.edu/~polakis/papers/sivakorn_eurosp16.pdf (pdf)

[ Pentest ]  Want to simulate data exfil over a variety of protocols, or malware in your network? Egress-Assess can do it - https://github.com/ChrisTruncer/Egress-Assess

[ Pentest ]  Detecting DNS Data Exfiltration http://blogs.cisco.com/security/talos/detecting-dns-data-exfiltration

[ Pentest ]  Here follow my slides from the presentation "Perform effective command injection attacks like Mr.Robot" @ BSidesAth - https://www.dropbox.com/s/om4yttb6nfix2hk/BSidesAth16_Perform_Effective_Command_Injection_Attacks_Like_Mr.Robot_Final.pdf

[ Pentest ]  渗透测试中的技巧 - https://drive.google.com/file/d/0B_thUFNIy8Tdd0FWV1JCNEliaEU/view?usp=sharing

[ Popular Software ]  Foxit Reader ConvertToPDF TIFF SamplesPerPixel Parsing Heap Buffer Overflow Remote Code Execution Vulnerability http://srcincite.io/advisories/src-2016-23/

[ Tools ]  How to quickly perform fuzzing and a customized automated scan using Burp's cookie jar: http://intel.ly/291BEn2 https://t.co/2FvWPsOxyo

[ Tools ]  Hashcat v3.00 released, the fusion of hashcat and oclHashcat into one project. Tons of updates and improvements: https://hashcat.net/forum/thread-5559.html

[ Tools ]  This is a VERY cool library. https://www.nuget.org/packages/UnmanagedExports .NET & Unmanaged dll's Hybrid #DFIR Ever seen this? https://t.co/kX5mYFaML5

[ Web Security ]  The Genesis of an XSS Worm – Part II : http://brutelogic.com.br/blog/genesis-xss-worm-part-ii/ ,Part I : http://brutelogic.com.br/blog/genesis-xss-worm-part-i/ cc @ brutelogic

[ Windows ]  [Blog Post] Unlock PowerShell ConstrainedLanguage Mode with InstallUtil.exe http://subt0x10.blogspot.com/2016/06/unlock-powershell-constrainedlanguage.html Feedback Welcome