[ Android ]  Forensic Analysis of the ChatSecure Instant Messaging Application on Android Smartphones : https://arxiv.org/pdf/1610.06721v1.pdf (pdf)

[ Attack ]  Moonlight – Targeted attacks in the Middle East http://blog.vectranetworks.com/blog/moonlight-middle-east-targeted-attacks

[ Backdoor ]  Pork Explosion: A Foxconn Bootloader Root/SELinux Backdoor http://bbqand0days.com/Pork-Explosion-Unleashed/ Many thanks to @ nextbitsys for promptly fixing this!

[ Browser ]  A BrowserStack vulnerability disclosure http://bloggerbust.ca/2016/10/26/browsersmack-a-browser-stack-proxy-vulnerability/

[ Challenges ]  Final entry: @ keen_lab used a UAF in the renderer & mem corruption in sandbox to steal pics from an iPhone. They wi… https://twitter.com/i/web/status/791191679134932992

[ Firmware ]  Pixhawk Firmware Hooking - https://www.invincealabs.com/blog/2016/10/pixhawk-firmware-hooking/

[ Hardware ]  Towards a hardware-assisted information ow tracking ecosystem for ARM processors https://hal.archives-ouvertes.fr/hal-01337579/document

[ Hardware ]  Researchers @ Percent_X & @ tatanus discovered #vulns in multiple bluetooth device trackers. Read this: http://r-7.co/2eE8v0T

[ Linux ]  Using scumjr's vDSO Dirty COW POC to escape Docker containers. Video, docker config, and instructions to play along: https://t.co/vOEQ9KNTPG

[ Network ]  We analyzed the Mirai IoT botnet, arguably one of the largest distributed denial of service attacks (DDoS) to date https://t.co/QgRmE6hUc3

[ Network ]  .@ Dyn posts update on Friday's massive DDoS attack --> http://dyn.com/blog/dyn-analysis-summary-of-friday-october-21-attack/ https://t.co/YDj2j1SfZO

[ Others ]  Techniques for surveillance evasion. Worth reading https://protectioncircle.org/2016/06/14/surveillance-evasion/

[ Others ]  Trading Off a Vulnerability: Does Software Obfuscation Increase the Risk of ROP Attacks http://riverpublishers.com/journal/journal_articles/RP_Journal_2245-1439_444.pdf

[ Popular Software ]  Apache Tomcat DebPkg - Root PrivEsc Video PoC Exploit (CVE-2016-1240) http://legalhackers.com/videos/Apache-Tomcat-DebPkg-Root-PrivEsc-Exploit.html

[ Popular Software ]  #Security updates available for #Adobe #Flash Player: http://adobe.ly/2dHqG3t

[ Vulnerability ]  CODE BLUE 2016 - Method of Detecting Vulnerability in Web Apps http://www.slideshare.net/babaroa/code-blue-2016-method-of-detecting-vulnerability-in-web-apps

[ Web Security ]  Joomla Vuls analysis by p0wd3r of Knownsec 404 Security Team CVE-2016-8869 http://paper.seebug.org/88/ CVE-2016-8870 https://t.co/aUKS3nX1NH

[ Web Security ]  Google Spreadsheet Vuln - CSRF and JSON Hijacking allows data theft : https://www.rodneybeede.com/Google_Spreadsheet_Vuln_-_CSRF_and_JSON_Hijacking_allows_data_theft.html

[ Windows ]  Our ETW library exposes C++ and C# APIs. Here’s a C# example: https://github.com/Microsoft/krabsetw/blob/master/examples/user_trace_002.cs

[ Windows ]  Microsoft Windows (x86) - 'NDISTAPI' Privilege Escalation (MS11-062) : https://www.exploit-db.com/exploits/40627/

[ WirelessSecurity ]  GNU Radio Tutorials [pdf] http://files.ettus.com/tutorials/labs/Lab_1-5.pdf video https://www.youtube.com/playlist?list=PL618122BD66C8B3C4&feature=view_all