[ Browser ]  Chrome: bypass for download filetype blacklist, extension->native privesc https://bugs.chromium.org/p/project-zero/issues/detail?id=1000

[ Defend ]  Microsoft Incident Response Guide just out https://info.microsoft.com/INCIDENT-RESPONSE-REFERENCE-GUIDE.html

[ Fuzzing ]  The Smart Fuzzer Revolution https://blog.trailofbits.com/2017/02/16/the-smart-fuzzer-revolution/

[ Malware ]  REMCOS: A New RAT In The Wild http://blog.fortinet.com/2017/02/14/remcos-a-new-rat-in-the-wild-2

[ MalwareAnalysis ]  Introducing Malboxes: a Tool to Build Malware Analysis Virtual Machines - http://gosecure.net/2017/02/16/introducing-malboxes-a-tool-to-build-malware-analysis-virtual-machines/

[ OpenSourceProject ]  QEMU: virtfs permits guest to access entire host filesystem https://bugs.chromium.org/p/project-zero/issues/detail?id=1035

[ Others ]  The Art of Bootkit Development : http://www.stoned-vienna.com/pdf/The-Art-of-Bootkit-Development.pdf (pdf)

[ Popular Software ]  The Angular JS Security videos by @ LiveOverflow are really awesome. Perfect sandbox bypass explanations: https://www.youtube.com/playlist?list=PLhixgUqwRTjwJTIkNopKuGLk3Pm9Ri1sF

[ Popular Software ]  Adobe Flash: Overflow in MP4 AMF Parsing https://bugs.chromium.org/p/project-zero/issues/detail?id=1018

[ Popular Software ]  Adobe Flash: Use-after-free in Copying Bitmap Pixels https://bugs.chromium.org/p/project-zero/issues/detail?id=1014

[ Popular Software ]  Adobe Flash: Fuzzed SWF causes stack corruption https://bugs.chromium.org/p/project-zero/issues/detail?id=1013

[ Popular Software ]  Adobe Flash: Heap Overflow in YUVPlane decoding https://bugs.chromium.org/p/project-zero/issues/detail?id=1008

[ Popular Software ]  Adobe Flash: Use-after-free in applying bitmapfilter https://bugs.chromium.org/p/project-zero/issues/detail?id=1007

[ Popular Software ]  slides from our talk today: https://www.slideshare.net/chrisgates/devoops-attacks-and-defenses-for-devops-toolchains cc @ cktricky also gist with all the links https://gist.github.com/carnal0wnage/ed9e4c10e065bd00e21e2af67301e9d9 #RSAC2017 #RSAC

[ SecurityProduct ]  KL-001-2017-002 : Trendmicro InterScan Privilege Escalation Vulnerability https://goo.gl/fb/tVcbtI #FullDisclosure

[ SecurityProduct ]  Advisory | Trend Micro InterScan Messaging Security (Virtual Appliance) Remote Code Execution https://pentest.blog/advisory-trend-micro-interscan-messaging-security-virtual-appliance-remote-code-execution/

[ SecurityReport ]  OpenSSL Security Advisory [16 Feb 2017] https://www.openssl.org/news/secadv/20170216.txt

[ Tools ]  Open Source Tools for monitoring pastebin: https://github.com/jordan-wright/dumpmon https://github.com/xme/pastemon https://github.com/cvandeplas/pystemon

[ Tools ]  KeyBox - a web-based SSH console that centrally manages administrative access to systems : https://github.com/skavanagh/KeyBox https://t.co/oMoPcJWJmh

[ Tools ]  nucleus - detects functions at the CFG-level. Including the option to transfer results to IDAPython script https://bitbucket.org/vusec/nucleus

[ Windows ]  Here's the code/dll x86 for now/ should work as normal user https://github.com/subTee/RegistrationFreeCOM DLL inject via ActCTX COM Object https://msdn.microsoft.com/en-us/library/windows/desktop/aa375644(v=vs.85).aspx

[ Windows ]  Windows gdi32.dll heap-based out-of-bounds reads / memory disclosure in EMR_SETDIBITSTODEVICE - https://bugs.chromium.org/p/project-zero/issues/detail?id=992&q=

[ Windows ]  GDI: Insufficient bounds check on GDI32!ConvertDxArray https://bugs.chromium.org/p/project-zero/issues/detail?id=951

[ Windows ]  Office Powerpoint 2010 MSO/OART heap out of bounds access https://bugs.chromium.org/p/project-zero/issues/detail?id=950

[ Windows ]  MSO!Ordinal5429 heap corruption due to missing length check https://bugs.chromium.org/p/project-zero/issues/detail?id=949