[ Android ]  First post on our brand new blog: Samsung baseband RE tools release https://comsecuris.com/blog/posts/shannon

[ Attack ]  List of pseudo-APT campaigns - http://www.kernelmode.info/forum/viewtopic.php?f=16&t=4423 by @ hFireF0X

[ Detect ]  Detecting Spoofed Messages Using Clock Skew https://www.schneier.com/blog/archives/2016/07/detecting_spoof_1.html

[ Detect ]  We just published a paper by FireEye's Ankit Anubhav on some recent evasion tricks used by malware. https://www.virusbulletin.com/virusbulletin/2016/07/journey-evasion-enters-behavioural-phase/

[ Fuzzing ]  Choronzon, our (CENSUS) evolutionary knowledge-based fuzzer, has just been released as open source software: https://census-labs.com/news/2016/07/20/choronzon-public-release/

[ Hardware ]  NCC Group Blog:The Automotive Threat Modeling Template - https://www.nccgroup.trust/uk/about-us/newsroom-and-events/blogs/2016/july/the-automotive-threat-modeling-template/ #cybersecurity #automotive #IoT

[ Hardware ]  Curious case of Rowhammer: Flipping Secret Exponent Bits using Timing Analysis. https://eprint.iacr.org/2016/618

[ Industry News ]  I just published “InfoSec: Top acquirers and top start-ups” https://medium.com/p/infosec-top-acquirers-and-top-start-ups-cabc0ea7f74a

[ iOS ]  Hacking Apple devices with just a Message exploiting the CVE-2016-4631 http://securityaffairs.co/wordpress/49542/hacking/hacking-apple-cve-2016-4631.html

[ Linux ]  Porting Python to GRUB: “Networking without an operating system” http://j.mp/29Gx1P4

[ macOS ]  ZDI-16-434: Apple OS X AppleIntelBDWGraphics Memory Corruption Privilege Escalation Vulnerability http://www.zerodayinitiative.com/advisories/ZDI-16-434/

[ macOS ]  ZDI-16-435: Apple OS X WindowServer Heap-Buffer Overflow Privilege Escalation Vulnerability http://www.zerodayinitiative.com/advisories/ZDI-16-435/

[ macOS ]  ZDI-16-436: Apple OS X IOPMrootDomain Memory Corruption Privilege Escalation Vulnerability http://www.zerodayinitiative.com/advisories/ZDI-16-436/

[ macOS ]  ZDI-16-438: Apple OS X DspFuncLib Use-After-Free Privilege Escalation Vulnerability http://www.zerodayinitiative.com/advisories/ZDI-16-438/

[ macOS ]  Vulnerability Spotlight: Apple Remote Code Execution With Image Files http://blog.talosintel.com/2016/07/vulnerability-spotlight-apple-remote.html

[ Malware ]  #Unit42 Technical Walkthrough: Office Test persistence method used in recent #Sofacy attacks http://bit.ly/29LvmIy

[ Malware ]  Third time (un)lucky – improved Petya is out https://blog.malwarebytes.com/threat-analysis/2016/07/third-time-unlucky-improved-petya-is-out/

[ Malware ]  The evolution of the Retefe banking Trojan https://blog.avast.com/the-evolution-of-the-retefe-banking-trojan

[ Network ]  Fr. #TR14 @ WEareTROOPERS #IPv6 Security Summit: "Why IPv6 Security Is So Hard" https://www.troopers.de/media/filer_public/42/1a/421a0a30-0a35-486a-b25e-7eea27f18ef7/troopers14-why_ipv6_security_is_so_hard-structural_deficits_of_ipv6_and_their_implications-enno_rey.pdf [PDF] #IETF96 https://t.co/tgo4sjU12z

[ Network ]  Mitigating the HTTPoxy Vulnerability with NGINX https://www.nginx.com/blog/mitigating-the-httpoxy-vulnerability-with-nginx/

[ OpenSourceProject ]  if you're using matrixssl you want to update http://www.matrixssl.org/blog/releases/matrixssl_3_8_4 can be remotely crashed, maybe exploitable (probably double free)

[ Others ]  discovRE: Efficient Cross-Architecture Identification of Bugs in Binary Code https://www.internetsociety.org/sites/default/files/blogs-media/discovre-efficient-cross-architecture-identification-bugs-binary-code.pdf

[ Others ]  We've published the REST API guidelines we use for our services across Microsoft: http://dev.office.com/blogs/rest-api-design-guidelines

[ Popular Software ]  .@ Oracle patches 276 vulnerabilities - 50% remotely exploitable - w/ July Critical Patch Update #CPU - http://ow.ly/o0lz302qNVD

[ Popular Software ]  [papers] - Exploiting Apache James Server 2.3.2 https://www.exploit-db.com/docs/40123.pdf

[ Popular Software ]  Analysis of CVE-2016-4203 - Adobe Acrobat and Reader CoolType Handling Heap Overflow Vulnerability https://blog.fortinet.com/2016/07/20/analysis-of-cve-2016-4203-adobe-acrobat-and-reader-cooltype-handling-heap-overflow-vulnerability

[ Tools ]  PANDA - Platform for Architecture-Neutral Dynamic Analysis https://github.com/moyix/panda

[ Tools ]  w0w, MongoDB has a nice web-based interactive disassembler built on top of Capstone! https://github.com/mongodb-labs/disasm https://t.co/9i7FRAO3FC

[ Windows ]  Microsoft tweaks TCP stack in Windows Server and Windows 10 http://www.theregister.co.uk/2016/07/20/microsoft_tcp_changes/