[ Browser ]  Alpha version of sandboxed Tor Browser released - http://bit.ly/2hm9uq4 https://t.co/dFhrmgwTEc

[ Browser ]  Bluetooth support for the Web. Web Bluetooth: https://webbluetoothcg.github.io/web-bluetooth/ https://www.w3.org/community/web-bluetooth/ https://t.co/24r6FSn03I

[ Hardware ]  Netgear R7000 - XSS : https://www.exploit-db.com/exploits/40898/

[ iOS ]  Apple iOS/tvOS/watchOS Remote memory corruption through certificate file https://goo.gl/fb/Vp8J0s #FullDisclosure

[ iOS ]  Apple fixes 12 vulnerabilities - two that could lead to code execution - with iOS 10.2 update - http://bit.ly/2hmri4r

[ Mobile ]  Stack buffer overflow and information disclosure in OTP TrustZone trustlet via OTP_GET_CRYPTO_DERIVED_KEY https://bugs.chromium.org/p/project-zero/issues/detail?id=939

[ Others ]  discovRE: Efficient Cross-Architecture Identification of Bugs in Binary Code https://www.internetsociety.org/sites/default/files/blogs-media/discovre-efficient-cross-architecture-identification-bugs-binary-code.pdf https://t.co/422455dPci

[ Others ]  Escaping a restricted shell : https://humblesec.wordpress.com/2016/12/08/escaping-a-restricted-shell/

[ Others ]  127 Billion Cracks - Password Cracking On A “Budget” (How To Build A Password Cracking Rig) : http://www.netmux.com/blog/how-to-build-a-password-cracking-rig

[ Others ]  PowerShell Attacks - Brief Report : https://www.symantec.com/content/dam/symantec/docs/security-center/white-papers/increased-use-of-powershell-in-attacks-16-en.pdf (wp/pdf)

[ SecurityProduct ]  [POC] CVE-2016-8020: McAfee Virus Scan for Linux allows for remote code execution as root https://nation.state.actor/mcafee.html

[ SecurityProduct ]  Art of Anti Detection – 1 : Introduction to AV & Detection Techniques : https://www.exploit-db.com/docs/40900.pdf (pdf)

[ SecurityReport ]  our @ virusbtn paper"Modern attacks on Russian financial institutions" is now available! links here http://www.welivesecurity.com/2016/12/12/modern-attacks-russian-financial-institutions/ /cc @ cherepanov74

[ Tools ]  Show HN: xOS a 32-bit OS for the PC https://github.com/omarrx024/xos (http://bit.ly/2gNcJ6l)

[ Tools ]  Our paper on #Ransomware-Resilient Filesystem is now public! http://shieldfs.necst.it/ @ Giulio_DP @ q3_c0d3 @ raistolo @ phretor

[ Tools ]  FileBuster - An Extremely Fast And Flexible Web Fuzzer http://www.kitploit.com/2016/12/filebuster-extremely-fast-and-flexible.html

[ Vulnerability ]  Unauthenticated SQL Injection in 'Teampass' collaborative password manager https://blog.ripstech.com/2016/teampass-unauthenticated-sql-injection/

[ WirelessSecurity ]  New Linux RTL-SDR Driver with Fully Exposed Controls http://www.rtl-sdr.com/new-linux-rtl-sdr-driver-with-fully-exposed-controls/

[ WirelessSecurity ]  Nice idea from @ NCCGroupplc ：GSM/GPRS Traffic Interception for Penetration Testing Engagements… https://twitter.com/i/web/status/808236195553550336