[ Android ]  Adaptive Kernel Live Patching: An OpenCollaborative Effort toAmeliorate AndroidN-day Root Exploits : https://www.blackhat.com/docs/us-16/materials/us-16-Zhang-Adaptive-Kernel-Live-Patching-An-Open-Collaborative-Effort-To-Ameliorate-Android-N-Day-Root-Exploits.pdf #BlackHat2016

[ Android ]  Courier scam prods victims to download malicious app. Here's the report: http://bit.ly/2aCMrlP

[ Android ]  BHUSA16 - OAuth Demystified for Mobile Application Developers [PDF] https://www.blackhat.com/docs/us-16/materials/us-16-Tian-1000-Ways-To-Die-In-Mobile-OAuth-wp.pdf [SLIDES] https://www.blackhat.com/docs/us-16/materials/us-16-Tian-1000-Ways-To-Die-In-Mobile-OAuth.pdf

[ Attack ]  Lack of #encryption leads to large scale cookie exposure - http://ow.ly/C3z0302WiI6 #BHUSA

[ Attack ]  Paper and slides from our #BHUSA presentation are available at https://iranthreats.github.io

[ Attack ]  Security considerations for compromised Slack user tokens http://sites.udel.edu/mdevans/2016/08/04/beware-an-attack-on-slack/

[ Attack ]  Israeli security firm hacks ISIS forum, discloses future targets https://www.grahamcluley.com/2016/08/israeli-security-firm-hacks-isis-forum-discloses-future-targets/

[ Attack ]  Operation #Manul / Unveiling a Campaign of Intimidation, Kidnapping, and #Malware in Kazakhstan [PDF] https://www.eff.org/files/2016/08/03/i-got-a-letter-from-the-government.pdf

[ Browser ]  Proof-of-concept JavaScript malware implemented as a Proxy Auto-Configuration (PAC) File https://github.com/SafeBreach-Labs/pacdoor

[ Browser ]  Microsoft extends bug bounty to cover Edge remote code exec http://www.theregister.co.uk/2016/08/05/microsoft_opens_15k_remote_code_exec_edge_preview_pwn_party/

[ Browser ]  Payment Request API is coming to Chrome Beta. Check out this introduction article: https://developers.google.com/web/updates/2016/07/payment-request https://t.co/AG8eBMavXU

[ Browser ]  Let's Encrypt Root to be Trusted by @ mozilla (Firefox v50) https://letsencrypt.org/2016/08/05/le-root-to-be-trusted-by-mozilla.html

[ Cloud ]  Post infection persistency & Lateral Movement in AWS : https://www.blackhat.com/docs/us-16/materials/us-16-Amiga-Account-Jumping-Post-Infection-Persistency-And-Lateral-Movement-In-AWS.pdf (Slides) #BlackHat2016

[ Defend ]  slides of our #BHUSA talk on SGX https://aumasson.jp/data/talks/sgx_bh16.pdf CLI tools + paper https://github.com/kudelskisecurity/sgxfun Reencryption PoC https://github.com/kudelskisecurity/sgx-reencrypt

[ Detect ]  Certificate Bypass : Hiding and Executing Malware from a Digitally Signed Executable : https://www.blackhat.com/docs/us-16/materials/us-16-Nipravsky-Certificate-Bypass-Hiding-And-Executing-Malware-From-A-Digitally-Signed-Executable-wp.pdf (wp) #BlackHat2016

[ Hardware ]  Brute-Forcing Lockdown Harddrive PIN Codes : https://www.blackhat.com/docs/us-16/materials/us-16-OFlynn-Brute-Forcing-Lockdown-Harddrive-PIN-Codes.pdf (Slides) #BlackHat2016 https://t.co/gI3UuFEjFe

[ Hardware ]  Drone attacks on Industrial Wireless: A new front in Cyber Security : https://www.blackhat.com/docs/us-16/materials/us-16-Melrose-Drone-Attacks-On-Industrial-Wireless-A-New-Front-In-Cyber-Security.pdf (Slides) #BlackHat2016

[ iOS ]  Pangu 9 Internals : http://blog.pangu.io/wp-content/uploads/2016/08/us-16-Pangu9-Internals.pdf (Slides)

[ iOS ]  Apple Security Bounty program initial categories - opens in September https://t.co/XH8rFmpHI9

[ iOS ]  Demystifying the Secure Enclave Processor : https://www.blackhat.com/docs/us-16/materials/us-16-Mandt-Demystifying-The-Secure-Enclave-Processor.pdf (Slides) #BlackHat2016

[ IoTDevice ]  A Lightbulb Worm ? - A teardown of the Philips Hue : https://www.blackhat.com/docs/us-16/materials/us-16-OFlynn-A-Lightbulb-Worm.pdf (Slides) #BlackHat2016

[ macOS ]  OS X 10.11.6 now available: http://opensource.apple.com/release/os-x-10116/

[ Malware ]  Cracking HawkEye Keylogger Reborn http://blog.deniable.org/blog/2016/08/04/cracking-hawkeye-keylogger-reborn/

[ Malware ]  Smoke Loader – downloader with a smokescreen still alive https://blog.malwarebytes.com/threat-analysis/2016/08/smoke-loader-downloader-with-a-smokescreen-still-alive/

[ MalwareAnalysis ]  AVLeak : Fingerprinting Antivirus Emulators For Advanced Malware Evasion : https://www.blackhat.com/docs/us-16/materials/us-16-Bulazel-AVLeak-Fingerprinting-Antivirus-Emulators-For-Advanced-Malware-Evasion.pdf (Slides)

[ Mitigation ]  DrK : Breaking Kernel Address Space Layout Randomization with IntelTSX : https://www.blackhat.com/docs/us-16/materials/us-16-Jang-Breaking-Kernel-Address-Space-Layout-Randomization-KASLR-With-Intel-TSX.pdf (Slides) #BlackHat2016

[ Network ]  Open Source Command line Network Diagnostic Tool : http://mylg.io/

[ Network ]  Attacking SDN Infrastructure: Are We Ready for the Next-Gen Networking? : https://www.blackhat.com/docs/us-16/materials/us-16-Yoon-Attacking-SDN-Infrastructure-Are-We-Ready-For-The-Next-Gen-Networking.pdf (Slides) #BlackHat2016

[ NetworkDevice ]  Several 0 day RCE in Nuuo and Netgear NVR, including ARM ROP exploit http://seclists.org/bugtraq/2016/Aug/45

[ NetworkDevice ]  Netis Router Backdoor UDP 53413 http://neonprimetime.blogspot.com/2016/08/netis-router-backdoor-udp-53413.html

[ OpenSourceProject ]  https://github.com/d0lph1n98/Defeating-PHP-GD-imagecreatefromgif Exploiting PHP-GD imagecreatefromgif()

[ Others ]  The different ways of hooking - http://www.rohitab.com/discuss/topic/41855-tutorial-the-different-ways-of-hooking/

[ Others ]  Notes on concurrency bugs http://danluu.com/concurrency-bugs/

[ Others ]  The future of vuln discovery, perspective from Google. #BountyCraft https://t.co/wa30sIbazn

[ Others ]  Slides are now online from @ granick's and my #BHUSA2016 talk on law enforcement technical assistance demands. https://www.blackhat.com/docs/us-16/materials/us-16-Granick-When-The-Cops-Come-A-Knocking-Handling-Technical-Assistance-Demands-From-Law-Enforcement.pdf

[ Others ]  New blogpost: Ruby on Rails 脆弱性解説 - CVE-2016-0752（前編） - DARK MATTER http://io.cyberdefense.jp/entry/2016/08/05/Ruby_on_Rails_%E8%84%86%E5%BC%B1%E6%80%A7%E8%A7%A3%E8%AA%AC_-_CVE-2016-0752%EF%BC%88%E5%89%8D%E7%B7%A8%EF%BC%89

[ Others ]  Breaking Hardware-Enforced Security with Hypervisors : https://www.blackhat.com/docs/us-16/materials/us-16-Sharkey-Breaking-Hardware-Enforced-Security-With-Hypervisors.pdf (Slides) #BlackHat2016

[ Others ]  Slides, code and paper for our #BH2016 posted https://goo.gl/BBPb5F @ rohitwas @ BlackHatEvents

[ Others ]  Remote Butler Attack resources are available on @ BlackHatEvents site Preso: https://www.blackhat.com/docs/us-16/materials/us-16-Beery-The-Remote-Malicious-Butler-Did-It.pdf WP: https://www.blackhat.com/docs/us-16/materials/us-16-Beery-The-Remote-Malicious-Butler-Did-It-wp.pdf #BHUSA

[ Others ]  BHUSA16 - Attacking BYOD enterprise mobile security solutions - https://www.blackhat.com/us-16/briefings.html#bad-for-enterprise-attacking-byod-enterprise-mobile-security-solutions

[ Others ]  BHUSA16 - Samsung Pay: tokenized numbers flaws and issues [SLIDES] https://www.blackhat.com/docs/us-16/materials/us-16-Mendoza-Samsung-Pay-Tokenized-Numbers-Flaws-And-Issues.pdf [PDF] https://www.blackhat.com/docs/us-16/materials/us-16-Mendoza-Samsung-Pay-Tokenized-Numbers-Flaws-And-Issues-wp.pdf

[ Pentest ]  Socat cheat sheet for #Pentesting https://stuff.mit.edu/afs/sipb/machine/penguin-lust/src/socat-1.7.1.2/EXAMPLES

[ Popular Software ]  THE YEAR IN FLASH (flash vulnerability research results): https://www.blackhat.com/docs/us-16/materials/us-16-Silvanovich-The-Year-In-Flash.pdf

[ ReverseEngineering ]  Latest PPT for the art of reverse engineering Flash exploits - https://www.dropbox.com/s/7aomaul20nfckgn/us-16-Oh-The-Art-of-Reverse-Engineering-Flash-Exploits.pdf?dl=0 Full Paper: https://www.dropbox.com/s/zydd5q474e9usbf/us-16-Oh-The-Art-of-Reverse-Engineering-Flash-Exploits-wp.pdf?dl=0

[ SCADA ]  PLC-Blaster Worm Targets Industrial Control Systems https://threatpost.com/plc-blaster-worm-targets-industrial-control-systems/119696/

[ Tools ]  Salesforce's open-source pentesting management and automation platform : http://vulnreport.io/

[ Tools ]  AVulnerabilityChecker - check vulnerable to exploitable constant RWX addresses (AVs vulnerability).Based on wiappdbg https://github.com/BreakingMalware/AVulnerabilityChecker

[ Windows ]  Some fun with vintage bugs and driver signing enforcement : http://kat.lua.cz/posts/Some_fun_with_vintage_bugs_and_driver_signing_enforcement/

[ Windows ]  Uninitialized Stack Variable - Windows Kernel Exploitation http://www.payatu.com/uninitialized-stack-variable/

[ Windows ]  AMSI : How Windows 10 Plans to Stop Script-Based Attacks and How Well It Does It : https://www.blackhat.com/docs/us-16/materials/us-16-Mittal-AMSI-How-Windows-10-Plans-To-Stop-Script-Based-Attacks-And-How-Well-It-Does-It.pdf (Slides) #BlackHat2016

[ Windows ]  Analysis of the Attack Surface of Windows 10 Virtualization-Based Security : https://www.blackhat.com/docs/us-16/materials/us-16-Wojtczuk-Analysis-Of-The-Attack-Surface-Of-Windows-10-Virtualization-Based-Security.pdf (Slides) #BlackHat2016

[ Windows ]  I posted the slides, setup script and walkthrough for our DefCon Windows Breakout & Privesc workshop on GitHub - https://github.com/FuzzySecurity/DefCon24

[ Windows ]  Presentation slides for my Black Hat talk on WSL/LXSS: "The Linux Kernel Hidden Inside Windows 10" are up at https://github.com/ionescu007/lxss

[ Windows ]  WINDOWS 10 SEGMENT HEAP INTERNALS: https://www.blackhat.com/docs/us-16/materials/us-16-Yason-Windows-10-Segment-Heap-Internals.pdf https://www.blackhat.com/docs/us-16/materials/us-16-Yason-Windows-10-Segment-Heap-Internals-wp.pdf

[ Windows ]  WINDOWS 10 MITIGATION IMPROVEMENTS: https://www.blackhat.com/docs/us-16/materials/us-16-Weston-Windows-10-Mitigation-Improvements.pdf