[ Android ]  Android 7.1 feature spotlight: A closer look at seamless updates, partition changes, and new fastboot commands… https://t.co/fK1t8v6aAD

[ Android ]  Disassembling a Mobile Trojan Attack https://securelist.com/blog/research/76286/disassembling-a-mobile-trojan-attack/

[ Android ]  Crashing Android devices with large Proxy Auto Config (PAC) Files [CVE-2016… https://goo.gl/fb/CMfoo6 #FullDisclosure

[ Browser ]  WebKit is removing Battery API: https://trac.webkit.org/changeset/208303 Previously, Firefox: https://bugzilla.mozilla.org/show_bug.cgi?id=1313580 Chrome issue:… https://t.co/bTtR9FwF1y

[ Firmware ]  [CVE-2016-6563 / VU#677427]: Dlink DIR routers HNAP Login stack buffer… https://goo.gl/fb/GdzhKE #FullDisclosure

[ Industry News ]  MS16-135 fixes Win32k LPE vuln CVE-2016-7255 that has been exploited ITW by Sednit/STRONTIUM for sandbox bypass https://t.co/gTOGOcx3Hq

[ iOS ]  iOS WebView phone auto dial bug: https://www.mulliner.org/blog/blosxom.cgi/security/ios_webview_auto_dialer.html Twitter and LinkedIn iOS apps vulnerable #nomorefreebugs

[ iOS ]  Analysis of iOS.GuiInject Adware Library by @ noarfromspace : https://sentinelone.com/blogs/analysis-ios-guiinject-adware-library/

[ iOS ]  iOS Application Security Review Methodology : http://research.aurainfosec.io/ios-application-security-review-methodology/

[ Malware ]  Cerber ransomware is now targeting databases. Read more about our research: http://bit.ly/2fXDSqp https://t.co/55lBWs5iNz

[ Malware ]  Svpeng Android Banking Trojan Delivered via a Google Chrome Bug http://bestsecuritysearch.com/svpeng-android-banking-trojan-delivered-via-google-chrome-bug/

[ Malware ]  .#TrickBot banking Trojan adds customized redirection attacks to its capabilities. https://threatpost.com/trickbot-banking-trojan-adds-new-browser-manipulation-tools/121859/

[ MalwareAnalysis ]  A note about Sednit rootkit http://artemonsecurity.blogspot.com/2016/11/a-note-about-sednit-rootkit.html

[ MalwareAnalysis ]  Mirai botnet unlikely to have an impact on election results. New Heisenberg Cloud research: http://r-7.co/2fBXUTi

[ MalwareAnalysis ]  Technical analysis of the Locker virus on mobile phones http://securityaffairs.co/wordpress/53194/malware/analysis-mobile-locker-virus.html

[ OpenSourceProject ]  Analysis of ISC BIND DNAME Answer Handling DoS (CVE-2016-8864) http://blog.fortinet.com/2016/11/08/analysis-of-isc-bind-dname-answer-handling-dos-cve-2016-8864

[ Others ]  Android Extensions sound interesting http://arstechnica.com/gadgets/2016/11/android-extensions-could-be-googles-plan-to-make-android-updates-suck-less/

[ Others ]  Slides (and soon, code) for my recent talk on automated shellcode generation with encoding restrictions: http://www.msreverseengineering.com/blog/2016/11/8/synesthesia-modern-shellcode-synthesis-ekoparty-2016-talk

[ Others ]  A Formal Security Analysis of the Signal Messaging Protocol : https://eprint.iacr.org/2016/1013.pdf (pdf)

[ Pentest ]  WAFNinja - Penetration testers favorite for WAF Bypassing https://goo.gl/fyfjSD #CLI #Cookies #Fuzzing https://t.co/CKncKgpPV4

[ Popular Software ]  Stored Cross-Site Scripting vulnerability in 404 to 301 WordPress Plugin https://goo.gl/fb/J7bd6U #FullDisclosure

[ Popular Software ]  Adobe fixes 9 Flash Player code execution vulnerabilities reported by researchers through Zero-Day Initiative (ZDI) https://t.co/2ZJ8p5NzAD

[ Popular Software ]  Piwik 2.16.0 PHP Object Injection https://packetstormsecurity.com/files/139603/KIS-2016-13.txt

[ ThreatIntelligence ]  APT Group Mapping > malware mapping sheet > download as xlsx/ods > still looking for contributors… https://t.co/QkIKWOQvbQ

[ Tools ]  idasec - IDA plugin for reverse-engineering and dynamic interactions with the Binsec platform https://github.com/RobinDavid/idasec

[ Web Security ]  HeadlessBrowsers : A list of (almost) all headless web browsers in existence : https://github.com/dhamaniasad/HeadlessBrowsers

[ Windows ]  On Windows Syscall Mechanism and Syscall Numbers Extraction Methods : https://www.evilsocket.net/2014/02/11/on-windows-syscall-mechanism-and-syscall-numbers-extraction-methods/ cc @ evilsocket

[ Windows ]  Demystifying the Windows Firewall from #MSIgniteNZ - including intro to 'identity based firewall rules' : https://t.co/XtMh5toRmM

[ Windows ]  MS16-137 PoC: https://github.com/lgandx/PoC/tree/master/LSASS Search for "Bug" in Lsass-remote.py file for technical details ;)