[ Android ]  1 million Google accounts compromised by Android malware called Gooligan http://arstechnica.com/security/2016/11/1-million-android-accounts-compromised-by-android-malware-called-gooligan/

[ Android ]  Chapter excerpt on Boot and Init from #Andevcon lecture earlier today - http://newandroidbook.com/temp/AI-boot.pdf (from #Android… https://t.co/1RXCqKiPGq

[ Fuzzing ]  blog post: Fuzzing #Qt with libFuzzer -> http://www.peter.hartmann.tk/single-post/2016/11/29/Fuzzing-Qt-with-libFuzzer

[ macOS ]  Reverse Engineering Resources (iOS & Mac OS X) : https://pewpewthespells.com/re.html

[ Malware ]  New post: HDDCryptor: Subtle Updates, Still a Credible Threat http://bit.ly/2gwYyTr @ TrendMicro

[ Others ]  Compromised Database Credentials Lead to UK Mobile Network Provider Breach https://duo.com/blog/compromised-database-credentials-lead-to-uk-mobile-network-provider-breach

[ Others ]  Bypassing SAML 2.0 SSO with XML Signature Attacks http://research.aurainfosec.io/bypassing-saml20-SSO/

[ Others ]  #Botconf16 https://www.youtube.com/user/BotConfTV @ Botconf live stream is available

[ ReverseEngineering ]  Reversing for Newbies ( Series 1-40) : https://tuts4you.com/download.php?list.17

[ Sandbox ]  Tickling it one last time before removal: Angular1.5.9 sandbox bypass by @ tehjh https://output.jsbin.com/hilejusana (Check https://twitter.com/tehjh/status/789309231585456129)

[ Tools ]  lscan : a library identification tool on statically linked/stripped binaries : https://github.com/maroueneboubakri/lscan

[ Tools ]  Hunting users using Windows API calls https://github.com/fdiskyou/hunter

[ Tools ]  XSSER - From XSS to RCE http://www.kitploit.com/2016/11/xsser-from-xss-to-rce.html

[ Windows ]  .@ Microsoft Silently Fixes Kernel Bug That Led to Chrome Sandbox Bypass - https://threatpost.com/microsoft-silently-fixes-kernel-bug-that-led-to-chrome-sandbox-bypass/122179/