[ Android ]  Targeting Android for OTA Exploitation http://contextis.com/resources/blog/targeting-android-ota-exploitation/

[ Browser ]  Microsoft Edge: Heap Overflow in Array.map https://bugs.chromium.org/p/project-zero/issues/detail?id=923

[ Browser ]  Microsoft Edge: Info Leak in Function.apply https://bugs.chromium.org/p/project-zero/issues/detail?id=920

[ Browser ]  Microsoft Edge: Info Leak in Array.join https://bugs.chromium.org/p/project-zero/issues/detail?id=919

[ Browser ]  Microsoft Edge: Stack Overflow in Spread Operator https://bugs.chromium.org/p/project-zero/issues/detail?id=910

[ Browser ]  Windows: Edge/IE Isolated Private Namespace Insecure Boundary Descriptor EoP https://bugs.chromium.org/p/project-zero/issues/detail?id=878

[ Defend ]  Slides from my #hacklu talk on moving from reactive to proactive defense. https://www.slideshare.net/mobile/saumilshah/hacklu-the-infosec-crossroads @ hack_lu

[ Firmware ]  Adventures in Reverse Engineering Smart Bulb Firmware https://medium.com/@ urish/inside-the-bulb-adventures-in-reverse-engineering-smart-bulb-firmware-1b81ce2694a6#.m0bfihhqe

[ Linux ]  published the slides from my workshop on ROP exploitation at @ hack_lu Thanks to all the attendees! https://speakerdeck.com/milkmix/advanced-exploitation-on-linux-rop-and-infoleaks

[ Malware ]  NEW from #ASERT - The Great #DGA of Sphinx. Examine the backup DGA algorithm used in Zeus variant. https://t.co/CGDaFuwXrH #BotNet #Malware

[ Malware ]  The new .LNK between spam and Locky infection https://blogs.technet.microsoft.com/mmpc/2016/10/19/the-new-lnk-between-spam-and-locky-infection/

[ Malware ]  We observed a new variant of macro malware delivering ransomware via password-protected attachment.… https://twitter.com/i/web/status/788596072587399168

[ Malware ]  XTBL ransomware family uses the CreateFileW API in nonshare mode as an antidebugging technique. We explore:… https://twitter.com/i/web/status/788610154606563328

[ OpenSourceProject ]  OpenSSL 1.1.0 remote client memory corruption https://goo.gl/fb/eFgszQ #FullDisclosure

[ Others ]  simple and useful tool IAT hook function that supported both windows kernel mode and usermode https://github.com/tinysec/iathook

[ Popular Software ]  Another giant @ Oracle patch release: 253 CVEs. https://threatpost.com/oracle-fixes-253-vulnerabilities-in-last-cpu-of-2016/121375/ via @ threatpost

[ Popular Software ]  Evernote for Windows DLL Loading Remote Code Execution https://goo.gl/fb/xmGi19 #FullDisclosure

[ Popular Software ]  Re: CVE-2016-6662 - MySQL Remote Root Code Execution / Privilege Escalation ( 0day ): Posted by Dawid Golunsk... https://t.co/QEkzG1pKDr

[ Protocol ]  Assessing and Exploiting XML Schema's Vulnerabilities http://www.ioactive.com/Arnaboldi-XML-Schema-Vulnerabilities.pdf

[ Tools ]  A new Capstone user: Firminsight is a tool collection to crawl, gather, extract & analyze firmwares from internet https://t.co/MpfsoDZj5C

[ Tools ]  WdbDBG - Python WDB RPC monitor for VxWorks 5.x and 6.x Based on Capstone. https://bitbucket.org/yformaggio/wdbdbg/src

[ Windows ]  How to run userland code from the kernel on Windows https://thisissecurity.net/2016/10/19/how-to-run-userland-code-from-the-kernel-on-windows-version-2-0/

[ Windows ]  Windows: NtLoadKeyEx Read Only Hive Arbitrary File Write EoP https://bugs.chromium.org/p/project-zero/issues/detail?id=871

[ WirelessSecurity ]  Hands-on GSM Analysis with GNU Radio and AirProbe [PDF] http://static1.1.sqspcdn.com/static/f/679473/25461571/1411158642820/Sep15_09_Otterbach_GSM.pdf #SDR #GnuRadio https://t.co/Vck3dV3eOU