[ Attack ]  [blog] Black box discovery of memory corruption RCE on http://box.com: https://goo.gl/BPkDNl

[ Attack ]  Github Repository Owners Targeted by Data-Stealing Malware: https://threatpost.com/github-repository-owners-targeted-by-data-stealing-malware/124656/ via @ threatpost

[ Browser ]  interesting presentation: https://www.blackhat.com/docs/asia-17/materials/asia-17-Li-Cross-The-Wall-Bypass-All-Modern-Mitigations-Of-Microsoft-Edge.pdf

[ Browser ]  Test Edge for free via BrowserStack, including WebDriver support for automated testing https://blogs.windows.com/msedgedev/2017/03/30/free-edge-testing-browserstack/ Great for Mac-based devs

[ Browser ]  ZDI-17-241: Apple Safari RenderBox Use-After-Free Remote Code Execution Vulnerability http://www.zerodayinitiative.com/advisories/ZDI-17-241/

[ Cloud ]  Slides for "SSH over CPU cache covert channels" (cf last RT) https://twitter.com/bloodytangerine/status/847369269977403393

[ Conference ]  Antivirus Evasion Reconstructed - Veil 3.0 by Christopher Truncer @ christruncer. Presentation available here: http://nullcon.net/website/archives/goa-2017.php

[ Conference ]  All available slides and materials from today’s #BHASIA Briefings presentations are now posted online here: http://ow.ly/KQhN30aotH6

[ Detect ]  New post: Smart Whitelisting Using Locality Sensitive Hashing http://bit.ly/2obyyUe @ TrendMicro

[ Detect ]  ossec-hids : Open Source Host-based Intrusion Detection Sys(log analysis, file integrity, rootkit detection & more): https://github.com/ossec/ossec-hids

[ iOS ]  Updated slides from our BlackHat talk available here - https://speakerdeck.com/mbazaliy/fried-apples-jailbreak-diy

[ Linux ]  Kernel upstream patch for pwn2own ubuntu Kernel local privilege escalation (CVE-2017-7184): https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=677e806da4d916052585301785d847c3b3e6186a https://t.co/gUaIJZGPWd

[ Linux ]  I've published the write-up about exploiting CVE-2017-2636 in the Linux kernel: https://a13xp0p0v.github.io/2017/03/24/CVE-2017-2636.html

[ Linux ]  Tracing Runtime Events in .NET Core on Linux http://blogs.microsoft.co.il/sasha/2017/03/30/tracing-runtime-events-in-net-core-on-linux/

[ macOS ]  macOS/IOS: mach_msg doesn't copy memory in a certain case https://bugs.chromium.org/p/project-zero/issues/detail?id=1083

[ Malware ]  Implementation of the anti-VM (etc.) environment checks used by #NeutrinoBot Loader (https://blog.malwarebytes.com/threat-analysis/2017/02/new-neutrino-bot-comes-in-a-protective-loader/):… https://t.co/lqj9bglvPF

[ MalwareAnalysis ]  EquationDrug rootkit analysis (mstcp32.sys) http://artemonsecurity.blogspot.com/2017/03/equationdrug-rootkit-analysis-mstcp32sys.html #rootkit #injector #equationgroup #fiveeyes #cyberespionage

[ Tools ]  NCC Group Tool: Auto Chrome - https://github.com/nccgroup/autochrome - downloads, installs, and configures a shiny new copy of Chromium on Mac and Linux

[ Windows ]  New blog post: 0patching the "Immortal" CVE-2017-7269 https://0patch.blogspot.com/2017/03/0patching-immortal-cve-2017-7269.html

[ Windows ]  Windows 10 Redstone 1/2 UAC changes, http://www.kernelmode.info/forum/viewtopic.php?f=11&t=3643&start=130#p30191 https://t.co/4jruiEEhvm

[ Windows ]  Low IL to System by Leaking Process _THREADINFO structure using GDI/Bitmaps. https://github.com/Cn33liz/HSEVD-ArbitraryOverwriteLowIL/blob/master/HS-ArbitraryOverwriteGDI/HS-ArbitraryOverwriteGDI.c @ NicoEconomou… https://t.co/sGj0Hjxf2k