Technical

[Asyn]

CryptoPHP: Analysis of a hidden threat inside popular content management systems
http://blog.fox-it.com/2014/11/18/cryptophp-analysis-of-a-hidden-threat-inside-popular-content-management-systems/
http://blog.fox-it.com/2014/11/26/cryptophp-a-week-later-more-than-23-000-sites-affected/
https://foxitsecurity.files.wordpress.com/2014/11/cryptophp-whitepaper-foxsrt-v4.pdf

[Asyn]

Regin: Top-tier espionage tool enables stealthy surveillance
http://www.symantec.com/connect/blogs/regin-top-tier-espionage-tool-enables-stealthy-surveillance
http://www.symantec.com/content/en/us/enterprise/media/security_response/whitepapers/regin-analysis.pdf

Regin: Nation-state ownage of GSM networks
https://securelist.com/blog/research/67741/regin-nation-state-ownage-of-gsm-networks/
https://securelist.com/files/2014/11/Kaspersky_Lab_whitepaper_Regin_platform_eng.pdf

Secret Malware in European Union Attack Linked to U.S. and British Intelligence
https://firstlook.org/theintercept/2014/11/24/secret-regin-malware-belgacom-nsa-gchq/

Regin, an old but sophisticated cyber espionage toolkit platform
https://blog.gdatasoftware.com/blog/article/regin-an-old-but-sophisticated-cyber-espionage-toolkit-platform.html

[Asyn]

Best Web Application Vulnerability Scanners
http://n0where.net/best-web-application-vulnerability-scanners/

[Asyn]

Regin: Top-tier espionage tool enables stealthy surveillance
http://www.symantec.com/connect/blogs/regin-top-tier-espionage-tool-enables-stealthy-surveillance
http://www.symantec.com/content/en/us/enterprise/media/security_response/whitepapers/regin-analysis.pdf

Regin: Nation-state ownage of GSM networks
https://securelist.com/blog/research/67741/regin-nation-state-ownage-of-gsm-networks/
https://securelist.com/files/2014/11/Kaspersky_Lab_whitepaper_Regin_platform_eng.pdf

Secret Malware in European Union Attack Linked to U.S. and British Intelligence
https://firstlook.org/theintercept/2014/11/24/secret-regin-malware-belgacom-nsa-gchq/

Regin, an old but sophisticated cyber espionage toolkit platform
https://blog.gdatasoftware.com/blog/article/regin-an-old-but-sophisticated-cyber-espionage-toolkit-platform.html

ReginScanner
https://github.com/Neo23x0/ReginScanner

[Asyn]

FIN4: Stealing Insider Information for an Advantage in Stock Trading?
https://www.fireeye.com/blog/threat-research/2014/11/fin4_stealing_insid.html
https://www.fireeye.com/content/dam/fireeye-www/global/en/current-threats/pdfs/rpt-fin4.pdf

[Asyn]

Operation Cleaver
http://www.cylance.com/operation-cleaver/
http://www.cylance.com/assets/Cleaver/Cylance_Operation_Cleaver_Report.pdf

[Asyn]

Operation Auroragold - How the NSA Hacks Cellphone Networks Worldwide
https://firstlook.org/theintercept/2014/12/04/nsa-auroragold-hack-cellphones/

[Asyn]

Clubbing Seals: Exploring the Ecosystem of Third-party Security Seals
http://securitee.org/files/seals_ccs2014.pdf

[Asyn]

The dark side of Apple’s two-factor authentication
http://thenextweb.com/apple/2014/12/08/lost-apple-id-learnt-hard-way-careful-two-factor-authentication/

[Asyn]

Not out of the woods yet: There are more POODLEs
https://vivaldi.net/blogs/entry/not-out-of-the-woods-yet-there-are-more-poodles

[Asyn]

The 'Penquin' Turla
https://securelist.com/blog/research/67962/the-penquin-turla-2/

[Asyn]

Mobile advertising firms spread malware by posing as official Google Play apps
https://blog.avast.com/2014/12/12/mobile-advertising-firms-spread-malware-by-posing-as-official-google-play-apps/

[Asyn]

The 'Penquin' Turla
https://securelist.com/blog/research/67962/the-penquin-turla-2/

Mysterious Turla Linux Backdoor Also For Solaris?
https://www.f-secure.com/weblog/archives/00002775.html

[Asyn]

Operation Socialist - The Inside Story of How British Spies Hacked Belgium’s Largest Telco
https://firstlook.org/theintercept/2014/12/13/belgacom-hack-gchq-inside-story/

[Asyn]

The FBI Used the Web’s Favorite Hacking Tool to Unmask Tor Users
http://www.wired.com/2014/12/fbi-metasploit-tor/