[ Attack ]  Twitter leaked database: 32 million accounts http://slexy.org/view/s22uHdUCdG (Not verified)

[ Browser ]  New blog post: Decoding Chrome's HTTPS UX: https://noncombatant.org/2017/02/15/decoding-chromes-https-ux/

[ Browser ]  Web Inspector JavaScript Debugger has better stepping, breakpoints, async call stacks, and new Web Worker support!… https://twitter.com/i/web/status/831941571608248321

[ Detect ]  Here are the slides from the Sysmon presentation I just delivered at @ RSAConference https://1drv.ms/p/s!AubxkJFptCbQlhvLwkUygf1dSeaM

[ Hardware ]  Inferring Your Mobile PhonePassword via WiFi Signals : http://fermatslibrary.com/s/when-csi-meets-public-wifi-inferring-your-mobile-phone-password-via-wifi-signals (pdf) https://t.co/3JMWUhJpc0

[ IoTDevice ]  Phwning the boardroom: hacking an Android conference phone http://www.contextis.co.uk/resources/blog/phwning-boardroom-hacking-android-conference-phone/ #cybersecurity #hacking #infosec… https://t.co/WD06G3SJNj

[ Linux ]  Exploit Dev 0x01 | 64-bit Linux Stack Buffer Overflow http://badbytes.io/2017/02/15/exploit-dev-0x01-64-bit-linux-stack-buffer-overflow/

[ MachineLearning ]  Slides from my "Advances in Cloud-Scale Machine Learning for Cyber-Defense" session at @RSAConference yesterday: https://t.co/56nCPVtALs

[ Malware ]  Let’s Unpack: Dridex Loader https://www.malwaretech.com/2017/02/lets-unpack-dridex-loader.html

[ Malware ]  ChChes – Malware that Communicates with C&C Servers Using Cookie Headers http://blog.jpcert.or.jp/2017/02/chches-malware--93d6.html

[ MalwareAnalysis ]  #Unit42's @ r0bf4lc analyzes Sofacy’s XAgent macOS Tool: http://bit.ly/2lIjs7I

[ MalwareAnalysis ]  Malware Analysis with OllyDbg http://resources.infosecinstitute.com/malware-behavior-code-analysis-part-3/

[ MalwareAnalysis ]  Here is the full 40+ page Google report into likely Russian state malware https://www.documentcloud.org/documents/3461560-Google-Aquarium-Clean.html https://t.co/XDv0SfcX1m

[ Mitigation ]  Four Ways to bypass Control Flow Guard (CFG) in Microsoft Edge + Source code: https://medium.com/@ mxatone/mitigation-bounty-4-techniques-to-bypass-mitigations-2d0970147f83

[ OpenSourceProject ]  Advisory X41-2017-002: Multiple Vulnerabilities in ytnef - https://www.x41-dsec.de/lab/advisories/x41-2017-002-ytnef/

[ Others ]  [Technical Advisory] Privilege Escalation in CA Common Services casrvc due to Arbitrary Write https://www.nccgroup.trust/us/our-research/advisory-craigsblackie-cve-2016-9795/?research=Technical+advisories

[ Pentest ]  Compromising Domain Admin in Internal Pentest https://goo.gl/7NnxBX #Bloodhound #Powersploit #Pentest #LazyKatz #Powershell

[ Popular Software ]  Arbitrary command/code execution bugs in RVM. Hooking cd can be hazardous to your health. https://github.com/justinsteven/advisories/blob/master/2017_rvm_cd_command_execution.md

[ Rootkit ]  Chapters 2-14 of Rootkits and Bootkits are available now in Early Access! https://www.nostarch.com/rootkits https://t.co/CjioDa2lDi

[ SecurityProduct ]  Cisco ASA: Buffer overflows in WebVPN cifs handling https://bugs.chromium.org/p/project-zero/issues/detail?id=998

[ Tools ]  Writing a basic C# decompiler. Good Read http://www.codeandux.com/writing-a-simple-decompiler-for-net-part-1/

[ Tools ]  How to #backdooring with #TheFatRat: post-exploitation attack for Windows, Android, Mac. Integrated with… https://t.co/m01My1aWkC

[ Tools ]  IoTSeeker Perl script to #scan a network for specific types of #IoT by @Rapid7 Author: @jinq102030 https://t.co/CGaw0zJYpz

[ Vulnerability ]  Coppermine Gallery (all versions) <= 1.5.44 arbitrary file download 0day exploit https://github.com/HackerFantastic/Public/blob/master/exploits/cpg15x-dirtraversal.txt

[ Web Security ]  5 ways to Exploit LFi Vulnerability http://www.hackingarticles.in/5-ways-exploit-lfi-vulnerability/

[ Web Security ]  How SSL affects search rankings https://blog.detectify.com/2017/02/15/ssl-search-rankings/

[ Windows ]  Here are my slides from the .Net Hijacking to Defend PowerShell Talk #bsidessf2017 http://www.slideshare.net/AmandaRousseau1/net-hijacking-to-defend-powershell-bsidessf2017

[ Windows ]  Windows GDI32.dll Heap Based out of bounds Memory disclosure, Google Project Zero. https://bugs.chromium.org/p/project-zero/issues/detail?id=992&q=

[ Windows ]  Windows Kernel Fuzzing for Beginners is pretty high level, still has some relevant stuff. https://m.youtube.com/watch?v=FY-33TUKlqY https://t.co/pwkljbLOJ4

[ Windows ]  Windows Kernel Exploitation : http://www.hacking-training.com/download/WKE.pdf (pdf) cc @ GranetMan

[ Windows ]  LLMNR / NBT-NS Spoofing Attack https://www.aptive.co.uk/blog/llmnr-nbt-ns-spoofing/

[ Windows ]  Attack Windows Kernel Graphics 1: https://www.blackhat.com/docs/us-14/materials/us-14-vanSprundel-Windows-Kernel-Graphics-Driver-Attack-Surface.pdf 2: http://2015.zeronights.org/assets/files/11-Tarakanov.pdf 3: https://googleprojectzero.blogspot.nl/2017/02/attacking-windows-nvidia-driver.html