[ Android ]  Trojan analysis of the virus: advertising SDK behind the magic hand - http://bobao.360.cn/learning/detail/3676.html (Chinese)

[ Android ]  Samsung Galaxy S8 facial recognition system to unlock the device can be bypassed with a photo http://securityaffairs.co/wordpress/57573/hacking/samsung-galaxy-s8-hack.html (was it unexpected ?)

[ Android ]  Anti-Plugin : Don't let your App Play as an Android Plugin : https://www.blackhat.com/docs/asia-17/materials/asia-17-Luo-Anti-Plugin-Don't-Let-Your-App-Play-As-An-Android-Plugin.pdf (Slides) #BHASIA2017

[ APT ]  Part II. APT29 Russian APT including Fancy Bear http://contagiodump.blogspot.com/2017/03/part-ii-apt29-russian-apt-including.html

[ Browser ]  MS Edge - Defeating the popUp blocker, the XSS filter and SuperNavigate with our fake ticket to the Intranet Zone ?… https://twitter.com/i/web/status/847891250288222209

[ Browser ]  Want to Make ActiveX Great Again on Edge? https://www.blackhat.com/docs/asia-17/materials/asia-17-Sun-The-Power-Of-Data-Oriented-Attacks-Bypassing-Memory-Mitigation-Using-Data-Only-Exploitation-Technique.pdf.

[ Firmware ]  Researchers Disclose Vulnerabilities in GIGABYTE BRIX Systems http://buff.ly/2ohK8Nm #infosec #security #BHASIA https://t.co/nQLkTE0ziD

[ Hardware ]  Breaking Korea Transit Card with Side-Channel Attack - Unauthorized Recharging : https://www.blackhat.com/docs/asia-17/materials/asia-17-Kim-Breaking-Korea-Transit-Card-With-Side-Channel-Attack-Unauthorized-Recharging.pdf (Slides) #BHASIA2017

[ Hardware ]  Exploiting smart TVs via terrestrial signal. This is the coolest thing I've seen in a while: https://arstechnica.com/security/2017/03/smart-tv-hack-embeds-attack-code-into-broadcast-signal-no-access-required/?amp=1

[ iOS ]  iPhone7 Fingerprint circuit https://www.youtube.com/watch?v=72ApkGkKHQQ

[ Linux ]  Exploiting USB/IP in Linux : https://www.blackhat.com/docs/asia-17/materials/asia-17-Korchagin-Exploiting-USBIP-In-Linux.pdf (Slides) #BHASIA cc @ secumod

[ Linux ]  DROP THE ROP : Fine Grained Control-Flow Integrity for The Linux Kernel : https://www.blackhat.com/docs/asia-17/materials/asia-17-Moreira-Drop-The-Rop-Fine-Grained-Control-Flow-Integrity-For-The-Linux-Kernel.pdf (Slides) #BHASIA

[ Linux ]  Linux Malware Analysis using Limon Sandbox : https://cysinfo.com/10th-meetup-linux-malware-analysis/ (Slides & Demo) cc @ monnappa22

[ macOS ]  Apple macOS/IOS 10.12.2(16C67) mach_msg Heap Overflow https://cxsecurity.com/issue/WLB-2017030254

[ macOS ]  Introducing http://Monitor.app for macOS https://www.fireeye.com/blog/threat-research/2017/03/introducing_monitor.html #Freeware #infosec https://t.co/Z4LI3Wq30K

[ Malware ]  Threat Spotlight: Sundown Matures http://blog.talosintelligence.com/2017/03/sundown-matures.html

[ Malware ]  What Malware Authors Don't Want You to Know - Evasive Hollow Process Injection : https://www.blackhat.com/docs/asia-17/materials/asia-17-KA-What-Malware-Authors-Don't-Want-You-To-Know-Evasive-Hollow-Process-Injection-wp.pdf , Slides: https://www.blackhat.com/docs/asia-17/materials/asia-17-KA-What-Malware-Authors-Don't-Want-You-To-Know-Evasive-Hollow-Process-Injection.pdf

[ Mobile ]  [Slides] Mobile Telephony Threats in Asia https://goo.gl/WN06sY - #BlackHatAsia 2017

[ OpenSourceProject ]  The source code of Telegram for iOS and Android is open and free. Enjoy! https://github.com/DrKLO/Telegram https://github.com/peter-iakovlev/Telegram

[ Others ]  Your next JVM : Panama, Valhalla, Metropolis : http://cr.openjdk.java.net/~jrose/pres/201703-YourNextVM.pdf (Slides) cc @ JohnRose00

[ Popular Software ]  LastPass have fixed the remote code execution bug I reported last week. ?? https://bugs.chromium.org/p/project-zero/issues/detail?id=1225

[ SecurityProduct ]  Splunk Enterprise Information Theft - CVE-2017-5607 https://goo.gl/fb/4qfPHR #FullDisclosure

[ Web Security ]  A large XSS payloads set. #infosec #Pentesting ⬇⬇⬇ https://sql--injection.blogspot.com.tr/p/blog-page_80.html?m=1

[ Windows ]  Abusing Kerberos for arbitrary impersonations and RCE : https://www.blackhat.com/docs/asia-17/materials/asia-17-Hart-Delegate-To-The-Top-Abusing-Kerberos-For-Arbitrary-Impersonations-And-RCE-wp.pdf (wp), https://www.blackhat.com/docs/asia-17/materials/asia-17-Hart-Delegate-To-The-Top-Abusing-Kerberos-For-Arbitrary-Impersonations-And-RCE.pdf (Slides) cc @ machosec #BHASIA