[ Browser ]  .@ Microsoft Cutting Off #SHA1 Support in February for Edge, IE 11: https://threatpost.com/microsoft-cutting-off-sha-1-support-in-february-for-edge-ie-11/122119/ via @ threatpost

[ Browser ]  MSIE8 MSHTML Ptls5::Ls­Find­Span­Visual­Boundaries memory corruption https://goo.gl/fb/652D94 #FullDisclosure

[ Linux ]  [0day] [exploit] Advancing exploitation: a scriptless 0day exploit against Linux desktops http://scarybeastsecurity.blogspot.com/2016/11/0day-exploit-advancing-exploitation.html

[ macOS ]  An overview of malvertising on the Mac https://blog.malwarebytes.com/threat-analysis/social-engineering-threat-analysis/2016/11/an-overview-of-malvertising-on-the-mac/

[ Malware ]  ESET Crysis decryptor to rescue files encrypted by the Crysis ransomware http://securityaffairs.co/wordpress/53677/malware/crysis-ransomware-decryptor.html

[ Malware ]  New post: Businesses as Ransomware’s Goldmine: How Cerber Encrypts Database Files http://bit.ly/2fmRPgi @ TrendMicro

[ MalwareAnalysis ]  Compromised Microsoft OneDrive for Business Accounts Used to Spread #Malware http://fc-pt.com/2ggzxwq https://t.co/bIzbn0Jn65

[ Mobile ]  MobSF v0.9.3 is released. Now supports Windows App Static Analysis. See what’s new:... http://fb.me/Z0OADo6L

[ Others ]  Exploit code released for NTP vulnerability - http://bit.ly/2f3p9KN

[ Others ]  Cash-spitting ATM malware blamed on Cobalt hacking gang https://www.grahamcluley.com/atm-malware-cobalt-hacking-gang/

[ Others ]  TR-064 Misimplementations leading to remote device takeover in ZyXEL Routers https://github.com/XiphosResearch/exploits/tree/master/tr-06fail

[ Others ]  TropicTrooper campaign targets Taiwanese government & fossil fuel provider with Poison Ivy. Read the #Unit42 report http://oak.ctx.ly/r/59ggu

[ Others ]  A collection of sources of indicators of compromise https://github.com/sroberts/awesome-iocs

[ Others ]  Towards practical information flow control and audit https://www.cl.cam.ac.uk/techreports/UCAM-CL-TR-893.pdf

[ Others ]  DoD Publishes Vulnerability Disclosure Policy: https://threatpost.com/dod-publishes-vulnerability-disclosure-policy/122097/ via @ threatpost

[ Others ]  Some pretty Xen Security Advisories (including an embargoed one) are out! https://xenbits.xen.org/xsa/

[ Popular Software ]  Hacking 27% of the Web via WordPress Auto-Update: RCE Vulnerability in http://api.wordpress.org via weak hashing algo https://www.wordfence.com/blog/2016/11/hacking-27-web-via-wordpress-auto-update/

[ Protocol ]  [CORE-2016-0007] - TP-LINK TDDP Multiple Vulnerabilities https://goo.gl/fb/b0jY2N #FullDisclosure

[ Protocol ]  A Story About TP-link Device Debug Protocol (TDDP) Research http://hubs.ly/H05hNDc0 https://t.co/MbNeYlpFb3

[ Tools ]  .NET Patcher Library which can bypass obfuscation. Nice for autopatchers! https://github.com/ioncodes/dnpatch

[ Tools ]  Updated Py #PowerShell decoder script. Base64, compressed, char[], and shellcode. @ https://github.com/JohnLaTwC/PyPowerShellXray #DFIR https://t.co/OEYPn0efOW

[ Tools ]  A nice tool using Capstone disassembler: Lazy Office Analyser (office) to detect APT malware inside MS Office docs. https://t.co/cuwCDTMUG3

[ Windows ]  #Elevating #privileges by environment variables expansion on #Microsoft operating systems - https://breakingmalware.com/vulnerabilities/elastic-boundaries-elevating-privileges-by-environment-variables-expansion/

[ Windows ]  Microsoft's x86 on ARM64 emulation, A Windows 10 'Redstone 3' Fall 2017 deliverable, sources say: http://www.zdnet.com/article/microsofts-x86-on-arm64-emulation-a-windows-10-redstone-3-fall-2017-deliverable/

[ WirelessSecurity ]  nrf24-arsenal Hacking tools and scripts for nRF24LU1+ Author: @090h #hardware #Transceiver #hacking #scripts https://t.co/aPjJxxQin3

[ WirelessSecurity ]  Exfiltration of User Credentials using WLAN SSID http://www.labofapenetrationtester.com/2016/11/exfiltration-of-user-credentials-using-wlan-ssid.html

[ WirelessSecurity ]  Practicing a Record-and-Replay System on USRP [PDF] http://conferences.sigcomm.org/sigcomm/2013/papers/srif/p61.pdf #SDR #USRP https://t.co/OW3sBroOoj