Technical

[Asyn]

Adobe is Spying on Users, Collecting Data on Their eBook Libraries
http://the-digital-reader.com/2014/10/06/adobe-spying-users-collecting-data-ebook-libraries/
http://arstechnica.com/security/2014/10/adobes-e-book-reader-sends-your-reading-logs-back-to-adobe-in-plain-text/

Adobe Updates Digital Edition, Stops Sharing User Info With the Internet
http://the-digital-reader.com/2014/10/23/adobe-updates-digital-edition-stops-sharing-user-info-internet/

[Asyn]

Pony stealer spread vicious malware using email campaign
http://blog.avast.com/2014/10/27/pony-stealer-spread-vicious-malware-using-email-campaign/

[Asyn]

iCloud Uploads Local Data Outside of iCloud Drive
https://datavibe.net/~sneak/20141023/wtf-icloud/

[Asyn]

How Verizon’s Advertising Header Works
http://webpolicy.org/2014/10/24/how-verizons-advertising-header-works/

[Asyn]

Why Samsung Knox isn't really a Fort Knox
http://mobilesecurityares.blogspot.co.uk/2014/10/why-samsung-knox-isnt-really-fort-knox.html

[Asyn]

Mac OS X local privilege escalation (IOBluetoothFamily)
http://randomthoughts.greyhats.it/2014/10/osx-local-privilege-escalation.html

[Asyn]

Microsoft EMET - Armor against zero-days bypassed again
http://blog.sec-consult.com/2014/10/microsoft-emet-armor-against-zero-days.html

[Asyn]

A Lesson In Security
http://blog.ircmaxell.com/2014/10/a-lesson-in-security.html

[Asyn]

Announcing the 2014 Volatility Plugin Contest Results!
http://volatility-labs.blogspot.com/2014/10/announcing-2014-volatility-plugin.html

[Asyn]

Secure Messaging Scorecard
https://www.eff.org/secure-messaging-scorecard

[Asyn]

WireLurker: A New Era in OS X and iOS Malware
http://researchcenter.paloaltonetworks.com/2014/11/wirelurker-new-era-os-x-ios-malware/
http://www.zdziarski.com/blog/?p=4140

[mchain]

When tech support scams meet Ransomlock
A technical-support phone scam uses Trojan.Ransomlock.AM to lock the user’s computer and trick them into calling a technical help phone number to resolve the issue.
http://www.symantec.com/connect/blogs/when-tech-support-scams-meet-ransomlock
Scroll to the bottom of the page for steps to fix this infection.  Note the infectious agent comes with adware and other grayware programs one may install inadvertently via freeware.

[Asyn]

How I Reverse Engineered Google Docs To Play Back Any Document’s Keystrokes
http://features.jsomers.net/how-i-reverse-engineered-google-docs/

[Asyn]

WireLurker: A New Era in OS X and iOS Malware
http://researchcenter.paloaltonetworks.com/2014/11/wirelurker-new-era-os-x-ios-malware/
http://www.zdziarski.com/blog/?p=4140

WireLurker for Windows
http://researchcenter.paloaltonetworks.com/2014/11/wirelurker-windows/

[Asyn]

The Darkhotel APT - A Story of Unusual Hospitality
http://securelist.com/blog/research/66779/the-darkhotel-apt/