[ APT ]  New report on a China-based APT that targets MSPs with custom malware and dyndns comms for IP theft. https://www.pwc.co.uk/cyber-security/pdf/cloud-hopper-report-final-updated.pdf

[ Browser ]  Here are the release notes for today’s Safari Technology Preview release 27 update. https://webkit.org/blog/7497/release-notes-for-safari-technology-preview-27/ https://t.co/vyZziFTE9v

[ Hardware ]  First In-Depth Look at Google’s TPU Architecture https://www.nextplatform.com/2017/04/05/first-depth-look-googles-tpu-architecture/

[ Malware ]  And check out our PayBreak paper on how to defeat some of the most common ransomware families… https://t.co/W47jqmggCX

[ MalwareAnalysis ]  #Dorkbot botnet, famous for backdoor, password stealing, and other malicious behavior has a new variant. We analyze… https://twitter.com/i/web/status/849459342415974400

[ MalwareAnalysis ]  Phishing Examples Archive - https://security.berkeley.edu/resources/phishing/phishing-examples-archive #Phishing #Pentesting #Hacking #Infosec

[ Operating System ]  Samsung's Android replacement Tizen OS has almost 40 unknown 0-day vulnerabilities : https://motherboard.vice.com/en_us/article/samsung-tizen-operating-system-bugs-vulnerabilities

[ Others ]  Java AMF Deserialization - unauthenticated remote code execution https://codewhitesec.blogspot.it/2017/04/amf.html

[ Others ]  wicked_cool_shellscripts_2e: PART DEUX!!! Full shell scripts for the 2nd edition of Wicked Cool Shell Scripts - https://t.co/bLZWxoSqx1

[ Others ]  [Blog] Bypassing Java Security Manager policies https://community.hpe.com/t5/Security-Research/Auditing-and-Bypassing-Security-Manager-policies/ba-p/6954256#.WOVGQ3SGPpQ #java #security

[ Pentest ]  [New Post] Privilege Escalation via DLL Injection https://pentestlab.blog/2017/04/04/dll-injection/ #pentestlab #Pentesting #PrivilegeEscalation

[ Popular Software ]  CVE-2017-2387 Apple Music (Android) An attacker in a priv network position may be able to leak sensitive user info https://support.apple.com/en-us/HT207605

[ ReverseEngineering ]  linux-re-101 : A collection of resources for linux reverse engineering : https://github.com/michalmalik/linux-re-101

[ Tools ]  Inveigh 1.3 released: new relay module, merged priv/unpriv modules, proxy auth capture/relay, mDNS, wiki… https://t.co/1T12XMH3fD

[ Web Security ]  WordPress Security – Unwanted Redirects via Infected JavaScript Files https://blog.sucuri.net/2017/04/wordpress-security-unwanted-redirects-via-infected-javascript-files.html

[ Windows ]  Windows Kernel Exploitation: Stack Overflow https://osandamalith.com/2017/04/05/windows-kernel-exploitation-stack-overflow/ via @ OsandaMalith

[ WirelessSecurity ]  Slides of my ASIA CCS paper on discovering logical vulnerabilites in the Wi-Fi handshake are now online!… https://t.co/f6BXM8MJgU