[ Android ]  Samsung Mobile January 2017 Security Updates: http://security.samsungmobile.com/smrupdate.html#SMR-JAN-2017

[ Attack ]  [Blog Post] Attacking Drivers With MSBuild.exe http://subt0x10.blogspot.com/2017/01/attacking-drivers-with-msbuildexe.html Exploit driver vulns with C# and a trusted MS binary Feedback Welcome

[ Industry News ]  Carbanak Group uses Google for #Malware Command-and-Control http://fc-pt.com/2jtAQLU https://t.co/QKv9pB9lvp

[ iOS ]  The "Demystifying the Secure Enclave Processor" white paper (software edition) on SEPOS and friends: http://mista.nu/research/sep-paper.pdf

[ Linux ]  Debian 9 Installer RC 1 release includes support for the USB armory: https://www.debian.org/devel/debian-installer/News/2017/20170115

[ Mobile ]  .@ Qualcomm Secure Boot & Image Authentication - in detail. Blog: https://www.qualcomm.com/news/onq/2017/01/17/secure-boot-and-image-authentication-mobile-tech, FULL WHITEPAPER: https://t.co/afbnevJtsP

[ Mobile ]  PoC and details of CVE-2016-3873: Arbitrary Kernel Write in Nexus 9: https://sagi.io/2016/09/cve-2016-3873-arbitrary-kernel-write-in-nexus-9/

[ Others ]  Graftor Variant Leveraging Signed Microsoft Executable https://blog.cylance.com/graftor-variant-leveraging-signed-microsoft-executable

[ Others ]  [Blog] Roasting AS-REPs http://www.harmj0y.net/blog/activedirectory/roasting-as-reps/ how to abuse accounts w/o Kerberos preauth enabled, basic toolset at https://t.co/GByuqww8lu

[ Others ]  Upcoming Java critical patch update contains 17 new security fixes for Oracle #Java SE http://www.oracle.com/technetwork/security-advisory/cpujan2017-2881727.html will be released 17. JAN 2017

[ Others ]  Facebook's Imagetragick remote code execution http://4lemon.ru/2017-01-17_facebook_imagetragick_remote_code_execution.html

[ Pentest ]  Hardware hacking + Red Team = Meraki RCE: When Red Team and Vulnerability Research fell in love. Part 1 https://research.trust.salesforce.com/Meraki-RCE-When-Red-Team-and-Vulnerability-Research-fell-in-love.-Part-1/

[ Tools ]  I just released three @ Burp_Suite plugins: https://github.com/floyd-fuh/burp-Collect500 https://github.com/floyd-fuh/burp-ResponseClusterer https://github.com/floyd-fuh/burp-HttpFuzzer

[ Tools ]  We are happy to release Keypatch v2.1 with a new function to search for ROP gadgets in assembly! Please RT… https://t.co/9A2gXSkfZj

[ Tools ]  Presentation on Sysmon Deployment with detection examples including Sysmon v5 features http://securitylogs.org/

[ Vulnerability ]  PHP LibGD Heap Buffer Overflow https://cxsecurity.com/issue/WLB-2017010111