[ Browser ]  Firefox - SVG cross domain cookie vulnerability https://insert-script.blogspot.gr/2016/12/firefox-svg-cross-domain-cookie.html

[ IoTDevice ]  Analyzing yet another Smart Home device / eibPort by BAB TECHNOLOGIE GmbH - https://insinuator.net/2016/12/analyzing-yet-another-smart-home-device/

[ IoTDevice ]  Reverse Engineering Traffic Lights with an RTL-SDR Part 2 http://www.rtl-sdr.com/reverse-engineering-traffic-lights-with-an-rtl-sdr-part-2/

[ IoTDevice ]  Backdoor in Sony IPELA Engine IP Cameras : http://blog.sec-consult.com/2016/12/backdoor-in-sony-ipela-engine-ip-cameras.html , PoC : https://www.sec-consult.com/fxdata/seccons/prod/temedia/advisories_txt/20161206-0_Sony_IPELA_Engine_IP_Cameras_Backdoors_v10.txt

[ Linux ]  CVE-2016-8655 Linux "triggered from within containers to compromise the host kernel" http://www.openwall.com/lists/oss-security/2016/12/06/1

[ Linux ]  CVE-2016-7076 sudo: noexec bypass via wordexp() https://bugzilla.redhat.com/show_bug.cgi?id=1384982

[ Linux ]  Linux Fundamentals : http://linux-training.be/linuxfun.pdf (pdf) // 7.0 Mb

[ Malware ]  Readers of popular websites targeted by stealthy Stegano exploit kit hiding in pixels of malicious ads - http://www.welivesecurity.com/2016/12/06/readers-popular-websites-targeted-stealthy-stegano-exploit-kit-hiding-pixels-malicious-ads/

[ MalwareAnalysis ]  A short blog post on Process Hollowing and how to follow it in OllyDbg. http://blog.airbuscybersecurity.com/post/2016/06/Following-Process-Hollowing-in-OllyDbg

[ MalwareAnalysis ]  Deep Analysis of the Online Banking Botnet TrickBot http://blog.fortinet.com/2016/12/06/deep-analysis-of-the-online-banking-botnet-trickbot

[ Mobile ]  Post mortem on #Samsung Galaxy Note 7 https://www.instrumental.ai/blog/2016/12/1/aggressive-design-caused-samsung-galaxy-note-7-battery-explosions https://t.co/thmaXZjESX

[ Mobile ]  Samsung Mobile December 2016 Security Updates: http://security.samsungmobile.com/smrupdate.html#SMR-DEC-2016

[ Others ]  DailyMotion Hack Leaks Emails, Passwords of 87M Users: https://threatpost.com/dailymotion-hack-leaks-emails-passwords-of-87m-users/122276/ via @ threatpost

[ Others ]  Top 10 vulnerabilities used by exploit kits in 2016: http://bit.ly/2h1Y2gF #ThreatIntel #InfoSec https://t.co/0ooJy5SRWJ

[ Others ]  FreeBSD bhyve virtual machine escape: https://lists.freebsd.org/pipermail/freebsd-security/2016-December/009190.html by @ _fel1x, n1! :) #FreeBSD #bhyve

[ Others ]  North Korea Hacks South Korea Military Cyber Command http://www.bbc.com/news/world-asia-38219009

[ Others ]  5-Level Paging and 5-Level EPT - https://software.intel.com/sites/default/files/managed/2b/80/5-level_paging_white_paper.pdf

[ Others ]  Is using /arch:AVX for faster code: a) Great! b) Trickier than I thought! c) Both! https://randomascii.wordpress.com/2016/12/05/vc-archavx-option-unsafe-at-any-speed/

[ Others ]  Building a Homemade FM Repeater with a Raspberry Pi, Rpitx and RTL-SDR Dongle http://www.rtl-sdr.com/building-a-homemade-fm-repeater-with-a-raspberry-pi-rpitx-and-rtl-sdr-dongle/

[ Others ]  Write a Shell in C : https://brennan.io/2015/01/16/write-a-shell-in-c/

[ Others ]  Toy decompiler for x86-64 written in Python : https://yurichev.com/writings/toy_decompiler.pdf (pdf) cc @ yurichev

[ Others ]  The Orphaned Internet – Taking Over 120K Domains via a DNS Vulnerability: https://thehackerblog.com/the-orphaned-internet-taking-over-120k-domains-via-a-dns-vulnerability-in-aws-google-cloud-rackspace-and-digital-ocean/ Rackspace customers still vulnerable.

[ Others ]  #DailyBug #MSIE 9 jscript9 JavaScriptStackWalker memory corruption Interesting bc "stack use-after-free" & time-line http://blog.skylined.nl/20161206001.html

[ Others ]  Nintendo expands bug bounty program http://www.zdnet.com/article/nintendo-expands-bug-bounty-program/#ftag=RSSbaffb68

[ Pentest ]  Mastering Kali Linux for Advanced Penetration Testing : http://www.arthur-training.com/Downloads/ITT/Mastering%20Kali%20Linux%20for%20Advanced%20Penetration%20Testing%20-%20Beggs,%20Robert.pdf (pdf* | 9.5 Mb)

[ SecurityReport ]  A 60 page report on attacks from Iot botnets, by Institute for Critical Infrastructure Technology (@ICITorg):… https://t.co/opYuf9rW5Q

[ Tools ]  Threat Hunting https://github.com/ThreatHuntingProject/ThreatHunting/tree/master/hunts More Info http://www.threathunting.net/ by @ ThreatHuntProj @ DavidJBianco https://t.co/Awq2dEZsow

[ Tools ]  Bandit - static analysis for Python https://security.openstack.org/#bandit-static-analysis-for-python

[ Tools ]  Piña Colada - Open Source Wifi Pineapple(capable of performing wide range of remote offensive attacks on a network): https://github.com/ecthros/pina-colada

[ Tools ]  A tool to make Windows builds reproducible : https://github.com/jasonwhite/ducible

[ Tools ]  Al-Khaser v0.65 - Public Malware Techniques Used In The Wild http://www.kitploit.com/2016/12/al-khaser-v065-public-malware.html

[ Vulnerability ]  New Post! Vacuuming Image Metadata from The Wayback Machine | Automating OSINT Blog http://bit.ly/2hcxHvq #osint #python

[ Vulnerability ]  [1days] [0days] [PoCs] More gstreamer FLIC / vmnc issues http://scarybeastsecurity.blogspot.com/2016/12/1days-0days-pocs-more-gstreamer-flic.html

[ Vulnerability ]  Vulnerability Spotlight: ImageMagick Convert Tiff Out of Bounds Write http://blog.talosintel.com/2016/12/ImageMagick-Tiff-out-of-Bounds.html

[ Vulnerability ]  There you go Netcat! GNU Netcat DoS - Out of bounds write - https://www.exploit-db.com/exploits/40866/ #DailyBug #infosec #netcat

[ Vulnerability ]  Roundcube Command Execution via Email https://blog.ripstech.com/2016/roundcube-command-execution-via-email/

[ Windows ]  [remote] - Microsoft Internet Explorer jscript9 - Java­Script­Stack­Walker Memory Corruption (MS15-056) https://www.exploit-db.com/exploits/40881/

[ Windows ]  [local] - Microsoft PowerShell - XML External Entity Injection https://www.exploit-db.com/exploits/40873/

[ WirelessSecurity ]  Reversing Bus Telemetry https://www.bastibl.net/reversing-bus-telemetry/ cc @ bastibl #SDR #GnuRadio https://t.co/NJnoSMCotl

[ WirelessSecurity ]  How To Building a SDR Server With OpenWrt And RTL http://www.spriteking.com/archives/1622 #RTL #SDR #GnuRadio https://t.co/ZpizOQ5w1h