[ Browser ]  Microsoft Edge: Use-after-free in TypedArray.sort https://bugs.chromium.org/p/project-zero/issues/detail?id=983

[ Linux ]  ntfs-3g local privilege escalation to root CVE-2017-0359 http://marc.info/?l=oss-security&m=148619467901185&w=2 #infosec #ntfs #linux #Privesc

[ macOS ]  Running Executables on macOS From Memory : https://blog.cylance.com/running-executables-on-macos-from-memory

[ MalwareAnalysis ]  #Unit42’s @ Malware_traffic explores CryptoShield Ransomware from Rig EK http://oak.ctx.ly/r/5eztz @ sans_isc

[ Mobile ]  New Blogpost: ? Unpatched (0day) jQuery Mobile XSS http://sirdarckcat.blogspot.com/2017/02/unpatched-0day-jquery-mobile-xss.html

[ Mobile ]  OnePlus3/3T Bootloader Vuln (<OxygenOS4.0.1): https://securityresear.ch/2017/02/08/oneplus3-bootloader-vulns/#exploiting-cve-2017-5626-for-kernel-code-execution more details: https://www.xda-developers.com/two-critical-oneplus-33t-bootloader-security-flaws-discovered-one-patched-and-other-being-addressed/ "fastboot oem disable dm-verity"

[ NetworkDevice ]  Vuln in F5 TLS stack allowing an attacker to extract up to 31 bytes of uninitialized memory at a time https://blog.filippo.io/finding-ticketbleed/ #Ticketbleed

[ Operating System ]  Secure operating system? Is this possible? An insight into #KasperskyOS https://kas.pr/v7jy

[ Popular Software ]  Remote directory traversal in Metasploit's downloading of files from victims. Patch 'em if you got 'em! https://t.co/GzhUGOrotO

[ SecurityReport ]  Part 4 of the Exploring the Cybercrime Underground series dives into darknet markets http://oak.ctx.ly/r/5f0dy #Unit42

[ Tools ]  Invoke-Vnc : Powershell VNC injector : https://github.com/artkond/Invoke-Vnc cc @ artkond

[ Tools ]  Writing Burp Extensions (Shodan Scanner) https://lnkd.in/eqZHxk3

[ Vulnerability ]  Exploiting node-serialize deserialization for Remote Code Execution-@ ajinabraham https://opsecx.com/index.php/2017/02/08/exploiting-node-js-deserialization-bug-for-remote-code-execution/ Advisory https://t.co/UQhHHzgCum

[ Web Security ]  Nice ! Turning self-XSS into good-XSS part 2 by @ emgeekboy http://bit.ly/2k65bRK

[ WirelessSecurity ]  TP-Link C2 and C20i multiple vulnerabilities https://pierrekim.github.io/blog/2017-02-09-tplink-c2-and-c20i-vulnerable.html #IoT #routers #RCE #DoS #PoC