[ Android ]  ESET paper on the evolution of Android ransomware is a good read. http://www.welivesecurity.com/wp-content/uploads/2017/02/ESET_Trends_2017_in_Android_Ransomware.pdf

[ Android ]  Hacking an Android phone. How deep the rabbit hole goes: https://medium.com/@ kayrus/hacking-android-phone-how-deep-the-rabbit-hole-goes-18b62ad65727

[ Attack ]  Financial cyberthreats in 2016 https://securelist.com/analysis/publications/77623/financial-cyberthreats-in-2016/

[ Browser ]  Google Chrome: out-of-bound read in layout https://bugs.chromium.org/p/project-zero/issues/detail?id=1024

[ Browser ]  Apple WebKit: UXSS via Frame::setDocument https://bugs.chromium.org/p/project-zero/issues/detail?id=1057

[ Browser ]  Apple WebKit: Bypass pop-up blocker via cross-origin or sandboxed iframe. https://bugs.chromium.org/p/project-zero/issues/detail?id=1050

[ Browser ]  Apple WebKit: UXSS via FrameLoader::clear https://bugs.chromium.org/p/project-zero/issues/detail?id=1049

[ Challenges ]  The sourcecode and deployment files for all of our @ BSidesSF #CTF challenges: https://github.com/BSidesSF/ctf-2017-release

[ Crypto ]  SSLyze - An SSL/TLS scanner ( detects various issues bad certificates, dangerous cipher suites ) : https://nabla-c0d3.github.io/blog/2017/02/08/sslyze-1-0-0-released/ cc @ nabla_c0d3

[ Exploit ]  Teaching Old Shellcode New Tricks https://recon.cx/2017/brussels/resources/slides/RECON-BRX-2017-Teaching_Old_Shellcode_New_Tricks.pdf #ExploitDev #InfoSec https://t.co/UUGPuUHDYt

[ Firmware ]  Slides from our "New vulnerabilities in Coreboot and UEFI based firmware" talk at @ reconbrx : http://www.intelsecurity.com/advanced-threat-research/content/data/REConBrussels2017_BARing_the_system.pdf [pdf]

[ Hardware ]  Leaking (a lot of) Data from Air-Gapped Computers via (small) Hard Drive LED : http://cyber.bgu.ac.il/advanced-cyber/system/files/LED-it-GO_0.pdf (pdf) Demo : https://www.youtube.com/watch?v=4vIu8ld68fc

[ Linux ]  Linux kernel: CVE-2017-6074: DCCP double-free vulnerability (local root) http://seclists.org/oss-sec/2017/q1/471

[ Malware ]  These attacks combine TeamViewer’s VPN tool with a keylogger. https://threatpost.com/data-stealing-malware-teamspy-resurfaces-in-spam-campaign/123820/ via @ threatpost

[ Network ]  HOW TO USE WIRESHARK A PACKET SNIFFER TO ANALYZE NETWORK TRAFFIC https://www.custompcreview.com/articles/tutorial-wireshark-packet-sniffer-guide-analyze-network-traffic/38446/

[ Others ]  LuaJIT Hacking: Getting next() out of the NYI list https://blog.cloudflare.com/luajit-hacking-getting-next-out-of-the-nyi-list/

[ Pentest ]  Transferring Backdoor Payloads by DNS AAAA records and IPv6 Address : https://www.peerlyst.com/posts/transferring-backdoor-payloads-by-dns-aaaa-records-and-ipv6-address-damon-mohammadbagher cc @ _Damon_M_ https://t.co/mBQTx0Q4Cm

[ Popular Software ]  EasyCom PHP API Stack Buffer Overflow https://goo.gl/fb/jsiGlJ #FullDisclosure

[ Popular Software ]  Vulnerability Spoltlight: Multiple Vulnerabilities in the Aerospike NoSQL Database Server http://blogs.cisco.com/security/talos/aerospike-vulnerabilities-2

[ ReverseEngineering ]  Finding The Lost Vikings – Reversing a Virtual Machine https://ryiron.wordpress.com/2017/02/01/finding-the-lost-vikings-reversing-a-virtual-machine/

[ Tools ]  Unicorn v2.4.3 released. Adds improved macro injection. obfuscation, and evasion. http://github.com/trustedsec/unicorn #TrustedSec

[ Tools ]  Lilu is a new MacOS kernel extension & framework to support patching kext, library & process. #CapstoneInside https://t.co/FtKPGeqsUO

[ Tools ]  mongoaudit - A Powerful MongoDB Auditing and Pentesting Tool http://www.kitploit.com/2017/02/mongoaudit-powerful-mongodb-auditing.html

[ Tools ]  Updated the Shodan 3D interface with URL hashing and fixed some bugs: https://simple.shodan.io/#query=category%3Amalware #threejs

[ Web Security ]  How I could Steal Your Google Bug Hunter Account with Two Clicks in IE : http://ngailong.com/how-i-could-steal-your-google-bug-hunter-account-with-two-clicks-in-ie/ cc @ ngalongc

[ Windows ]  New blog post: Windows Kernel Local Denial-of-Service #1: win32k!NtUserThunkedMenuItemInfo (Windows 7-10), http://j00ru.vexillium.org/?p=3101