[ Attack ]  NanHaiShu: RATing the South China Sea https://labsblog.f-secure.com/2016/08/04/nanhaishu-rating-the-south-china-sea/

[ Browser ]  CSS mix-blend-mode is bad for your browsing history (aka, patience is a virtue): https://lcamtuf.blogspot.com/2016/08/css-mix-blend-mode-is-bad-for-keeping.html

[ Crypto ]  Amazing new HTTPS exploit that uses browser javascript APIs (fetch + resource timing), no MITM needed: http://arstechnica.com/security/2016/08/new-attack-steals-ssns-e-mail-addresses-and-more-from-https-pages/

[ Detect ]  CAPTURING 0DAY EXPLOITS WITH PERFECTLY PLACED HARDWARE TRAPS: https://www.blackhat.com/docs/us-16/materials/us-16-Pierce-Capturing-0days-With-PERFectly-Placed-Hardware-Traps.pdf

[ Exploit ]  What browser 0day in 2016 looks like: Technical break-down of the Pwn2Own browser (w/ full-chain to admin) exploits http://documents.trendmicro.com/assets/pdf/shell-on-earth.pdf

[ Exploit ]  Absolutely awesome paper: "Dedup Est Machina: Memory Deduplication as an Advanced Exploitation Vector" http://www.ieee-security.org/TC/SP2016/papers/0824a987.pdf

[ Hardware ]  #BHUSA2016 – Researcher explained how to hack any PC with a found USB drive http://securityaffairs.co/wordpress/49999/hacking/found-usb-drive-hack.html

[ iOS ]  #iOS 9.3.4 (13G35) has been released for 43 devices - https://ipsw.me/9.3.4

[ Malware ]  NELocker - A Javascript Ransomware Boilerplate https://blogs.forcepoint.com/security-labs/nelocker-javascript-ransomware-boilerplate

[ Malware ]  A look into Neutrino EK’s jQueryGate https://blog.malwarebytes.com/threat-analysis/exploits-threat-analysis/2016/08/a-look-into-neutrinos-jquerygate/

[ Mitigation ]  USING EMET TO DISABLE EMET: https://www.blackhat.com/docs/us-16/materials/us-16-Alsaheel-Using-EMET-To-Disable-EMET.pdf

[ Network ]  NCC Group Tool: TCP tunneling over HTTP for web application servers - https://github.com/nccgroup/ABPTTS from #BlackHat2016 by @ 0x00C651E0

[ OpenSourceProject ]  [CVE-2016-6583] libtidy global buffer overflow - https://marcograss.github.io/bug/2016/08/03/libtidy-global-bof.html

[ Others ]  XML Schema, DTD, and Entity Attacks paper http://www.vsecurity.com/download/papers/XMLDTDEntityAttacks.pdf

[ Others ]  Here are the slides to our @ codewhitesec BH talk "Pwning Your Java Messaging With Deserialization Vulnerabilities": https://www.blackhat.com/docs/us-16/materials/us-16-Kaiser-Pwning-Your-Java-Messaging-With-Deserialization-Vulnerabilities.pdf

[ Others ]  A Verified CompCert Front-End for a Memory Model supporting Pointer Arithmetic and Uninitialised Data http://www.irisa.fr/celtique/wilke/jar-16.pdf

[ Others ]  Paper and slides for our #blackhat talk today introducing “LDAP Entry Poisoning” and “JNDI Injection”, enjoy! https://www.blackhat.com/us-16/briefings.html#a-journey-from-jndi-ldap-manipulation-to-remote-code-execution-dream-land

[ Others ]  Researchers bypass chip and PIN protections at #BH2016 https://threatpost.com/researchers-bypass-chip-and-pin-protections-at-black-hat/119637/

[ Others ]  Oracle EBusiness Suite ‘Massive’ Attack Surface Assessed https://threatpost.com/oracle-ebusiness-suite-massive-attack-surface-assessed/119638/

[ Popular Software ]  Vulnerability Spotlight: Multiple Arbitrary Code Execution Vulnerabilities Identified in Hancom Hangul Office http://blog.talosintel.com/2016/08/hancom-office-vulnerabilities.html

[ Protocol ]  Severe vulnerabilities discovered in HTTP/2 protocol http://www.zdnet.com/article/severe-vulnerabilities-discovered-in-http2-protocol/#ftag=RSSbaffb68

[ Protocol ]  New post: BlackHat2016: badWPAD – The Doubtful Legacy of the WPAD Protocol http://bit.ly/2aYnaTu @ TrendMicro

[ SecurityProduct ]  Posted slides from @ BSidesLV 2016 - Powershell-fu: Hunting on the Endpoint by @ gerritzc #bsides #cybersecurity http://www.slideshare.net/ChristopherGerritz/bsideslv-2016-powershell-hunting-on-the-endpoint-gerritz

[ SecurityProduct ]  Captain Hook: Pirating AVS to Bypass Exploit Mitigations [PDF] https://www.blackhat.com/docs/us-16/materials/us-16-Yavo-Captain-Hook-Pirating-AVs-To-Bypass-Exploit-Mitigations.pdf #BHUSA2016

[ Tools ]  NCC Group Tools: BLESuite - https://github.com/nccgroup/BLESuite / https://github.com/nccgroup/BLESuite-CLI / https://github.com/nccgroup/BLE-Replay by @ TTrabun & @ Greg_NCC_Group

[ Tools ]  @ badd1e Check out the IDE Kinoma Code http://kinoma.com/develop/code/, and the KinomaJS open source software tree at https://github.com/Kinoma/kinomajs.

[ Tools ]  Keypatch is a IDA Pro plugin for Keystone Assembler Engine. http://www.keystone-engine.org/keypatch/

[ Virtualization ]  [BLOG] Xen exploitation part 3: XSA-182, Qubes escape: http://blog.quarkslab.com/xen-exploitation-part-3-xsa-182-qubes-escape.html Final notes on finding Xen vm escape and exploitation

[ Virtualization ]  Xenpwn Breaking Paravirtualized Devices - https://www.blackhat.com/docs/us-16/materials/us-16-Wilhelm-Xenpwn-Breaking-Paravirtualized-Devices.pdf https://www.blackhat.com/docs/us-16/materials/us-16-Wilhelm-Xenpwn-Breaking-Paravirtualized-Devices-wp.pdf by @ _fel1x

[ Web Security ]  XML External Entity Injection Opens Door to Attacks, Theft https://blogs.mcafee.com/mcafee-labs/xml-external-entity-injection-opens-door-attacks-theft/

[ Windows ]  Into The Core In-Depth Exploration Of Windows 10 IoT Core - https://www.blackhat.com/docs/us-16/materials/us-16-Sabanal-Into-The-Core-In-Depth-Exploration-Of-Windows-10-IoT-Core-wp.pdf https://www.blackhat.com/docs/us-16/materials/us-16-Sabanal-Into-The-Core-In-Depth-Exploration-Of-Windows-10-IoT-Core.pdf by @ polsab