[ Android ]  Nathan Android Emulator for mobile security testing has been released: https://github.com/mseclab/nathan Ready for hooking and mobile app testing

[ Android ]  MicroG Project: A re-implementation of Google's Android apps and libraries : https://microg.org/?=

[ Attack ]  Bypassing antivirus with a sharp syringe : https://code.google.com/archive/p/syringe-antivirus-bypass/ , Paper : https://www.exploit-db.com/docs/20420.pdf (pdf)

[ Attack ]  Abusing systemd user services : https://hosakacorp.net/p/systemd-user.html

[ iOS ]  Lookout released a 42 page technical document explaining Pegasus (3 iOS vulns) https://info.lookout.com/rs/051-ESQ-475/images/pegasus-exploits-technical-details.pdf

[ Mobile ]  MARA_Framework : A Mobile Application Reverse engineering and Analysis Framework : https://github.com/xtiankisutsa/MARA_Framework

[ Others ]  Oh look, our x86 to AMD64 DBT scheme http://nebelwelt.net/publications/files/13ATC.pdf reinvented for fuzzing CGC binaries https://blog.trailofbits.com/2016/11/02/shin-grr-make-fuzzing-fast-again/ by @ trailofbits

[ Others ]  Wrote a new personal blog post - http://ropgadget.com/posts/pebwalk.html "A walk along the PEB: Stepping through PE structures to find function addresses"

[ Others ]  RIG Exploit Kit Campaign - Happy puzzling... http://blog.talosintel.com/2016/11/rig-exploit-kit-campaign-happy-puzzling.html

[ Popular Software ]  GitLab disclosed a bug submitted by jobert: https://hackerone.com/reports/178152 #hackerone #bugbounty https://t.co/NxvzGpdcRq

[ Protocol ]  BearSSL is an implementation of the SSL/TLS protocol (RFC 5246) written in C by Thomas Pornin https://bearssl.org

[ Rootkit ]  SEKOIA release a #sednit #APT28 rootkit analysis / a hands on usecase on HideDRV - http://www.sekoia.fr/blog/rootkit-analysis-use-case-on-hidedrv/ cc @ eset @ r00tbsd

[ Tools ]  visualize_logs Interactive log visualisation in Python by @ keithjjones https://github.com/keithjjones/visualize_logs Docs and Examples… https://t.co/6Y7EPng7BD

[ Web Security ]  Sparkjava Framework - Arbitrary File Read Vulnerability https://goo.gl/fb/rjCn3y #FullDisclosure

[ Windows ]  Moving Beyond EMET https://blogs.technet.microsoft.com/srd/2016/11/03/beyond-emet/ EOL extended to July 31, 2018 but Win10 includes all mitigation features that EMET admins rely on

[ WirelessSecurity ]  Interesting stuff: Wi-Fi-Based IMSI Catcher https://www.blackhat.com/docs/eu-16/materials/eu-16-OHanlon-WiFi-IMSI-Catcher.pdf [PDF], by @ raviborgaonkar & Piers O'Hanlon #BHEU https://t.co/lTGTADnS5N