[ Browser ]  MS Edge Referrer Spoof - How to spoof the referrer even after MS patch. ?(also, inject an iframe everywhere) ?… https://t.co/k8iamKdlfp

[ Industry News ]  #Symantec API Flaws reportedly let attackers quietly steal Private #SSL Keys and Certificates… https://t.co/nTTGVId22d

[ iOS ]  iOS Packet Sniffing with Pown.js and HTTPView http://blog.websecurify.com/2017/03/ios-packet-sniffing.html

[ IoTDevice ]  Wouahhhh Great !!! *\0/* *\0/* *\0/* #infosec #PenTest # Industrial RFID Printers Local root privilege escalation… https://twitter.com/i/web/status/846657291051061248

[ IoTDevice ]  Firmware Analysis for IoT Devices http://resources.infosecinstitute.com/firmware-analysis-for-iot-devices/ #infosec #IoT cc @ InfosecEdu

[ macOS ]  [CVE-2017-2436] #macOS #Sierra <= 10.12.3 IOFireWireAVC #Kernel Extension Out of Bounds #Vulnerability https://t.co/dqnKLuyWFt

[ Malware ]  Cerber Starts Evading Machine Learning http://blog.trendmicro.com/trendlabs-security-intelligence/cerber-starts-evading-machine-learning/

[ MalwareAnalysis ]  Recent Dimnie activity uses phishing emails to target open source developers on GitHub. Get the new #Unit42 report http://oak.ctx.ly/r/5j0pu

[ Mobile ]  Hacking Xiaomi MI Smartphone into Zigbee Sniffer : http://faire-ca-soi-meme.fr/hack/2017/03/13/hack-xiaomi-mi-smarthome-zigbee-sniffer/ https://t.co/omPstT7D6G

[ Others ]  RDS hijacking again - this time start a process inside another RDP session, without SYSTEM rights https://github.com/Skons/ms17-0100/blob/master/Start-ProcessInSession.ps1

[ Others ]  Complete series of Apache / ModSecurity tutorials with Core Rule Set tuning, log visualisation / traffic decryption https://www.netnea.com/cms/apache-tutorials/

[ Popular Software ]  #Pwn2Own follow-up: new #VMware Security Advisory VMSA-2017-0006 for ESXi, Workstation and Fusion https://blogs.vmware.com/security/2017/03/vmware-workstation-target-pwn2own-2017.html

[ ReverseEngineering ]  Finally my Reverse Engineering Malware 101 workshop content for the @ WiCySconference. https://securedorg.github.io/RE101/ https://t.co/JypQdlGCx4

[ Sandbox ]  Escaping a Python sandbox with a memory corruption bug https://medium.com/@ gabecpike/python-sandbox-escape-via-a-memory-corruption-bug-19dde4d5fea5

[ Tools ]  Added some updates to the "WordPress Plugin Security Testing Cheat Sheet" - https://github.com/ethicalhack3r/wordpress_plugin_security_testing_cheat_sheet

[ Tools ]  wuzz - Interactive CLI Tool for HTTP Inspection http://www.kitploit.com/2017/03/wuzz-interactive-cli-tool-for-http.html

[ Windows ]  Fileless UAC Bypass Uses Windows Backup and Restore Utility https://threatpost.com/fileless-uac-bypass-uses-windows-backup-and-restore-utility/124579/

[ Windows ]  Slightly modified version of @tiraniddo #MS17-012 COM Session Moniker Exploit running within MSBuild.exe @subTee… https://t.co/xxNFmXRow4

[ Windows ]  Back to Basics or Bypassing Control Flow Guard with Structured Exception Handler https://improsec.com/blog//back-to-basics-or-bypassing-control-flow-guard-with-structured-exception-handler

[ WirelessSecurity ]  WiFi Phishing for Credentials with a Captive Portal on OpenWrt: http://www.smeegesec.com/2017/03/captive-portal-wifi-phishing-with.html