[ Android ]  Belkin’s WeMo Gear Can Hack Android Phones: https://threatpost.com/belkins-wemo-gear-can-hack-android-phones/121730/ via @ threatpost

[ macOS ]  A new MacOS kernel extension using Capstone inside: AppleALC to add native HD audio support for unofficially codecshttp://bit.ly/2f03v6h —…

[ Malware ]  New IoT Linux IRCTelnet Botnet Wreaks Havoc http://bestsecuritysearch.com/new-iot-linux-irctelnet-botnet-wreaks-havoc/

[ MalwareAnalysis ]  @ GoSecure_Inc and @ ESET collaboration on #Linux #Moose #IoT http://gosecure.net/2016/11/02/exposing-the-ego-market-the-cybercrime-performed-by-the-linux-moose-botnet/ http://www.welivesecurity.com/2016/11/02/linuxmoose-still-breathing/

[ Mitigation ]  Microsoft introduced a new exploit mitigation "RFG" in Windows 10 Redstone 2 14942 to protect return address: http://xlab.tencent.com/en/2016/11/02/return-flow-guard/

[ Others ]  Bypassing Two-Factor Authentication on OWA and Office365 Portals http://www.blackhillsinfosec.com/?p=5396

[ Others ]  SMS Scam Investigation in 30 Minutes Or Less – Medium http://bit.ly/2fenhMq

[ Others ]  [local] - MySQL / MariaDB / PerconaDB - 'root' Privilege Escalation https://www.exploit-db.com/exploits/40679/

[ Others ]  3) SDK with plugin and kernel module support! Davee will release in the morning. Updated specifications: https://t.co/jtNuOJIRxl

[ Others ]  Vita kernel explosion! We are releasing a CFW framework and three other things: https://yifan.lu/2016/11/01/taihen-cfw-framework-for-ps-vita/

[ Others ]  Targeted Bruteforcing – Mining patterns in passwords to make bruteforcing easy http://fsecurify.com/targeted-bruteforcing-mining-patterns-to-make-brute-forcing-easy/

[ Others ]  #SHARCS paper has been published on CCS 2016: Drammer: Deterministic Rowhammer Attacks on Mobile Platforms https://t.co/LJehqAYQhQ

[ Others ]  #DailyBug #MSIE11 MSHTML CView::CalculateImageImmunity UAF Details and repro in my blog post at http://blog.skylined.nl/20161102001.html

[ Popular Software ]  CVE-2016-8583 - Alienvault OSSIM/USM Reflected XSS https://goo.gl/fb/lyC7T1 #FullDisclosure

[ Tools ]  DOMPurify 0.8.4 is out, with updated MentalJS demo & more powerful hooks, ready for custom HTML element handling https://t.co/AZBBkw8giF

[ Tools ]  Static code analyzer for Ubuntu. http://insights.ubuntu.com/2016/11/02/static-code-analyzer-for-ubuntu/ (#ubuntu, #devops, #programming, #cpp, #codeanalysis,… https://t.co/lP9K8pRG0M