Technical

[Asyn]

APT 30 and the Mechanics of a Long-Running Cyber Espionage Operation
https://www.fireeye.com/blog/threat-research/2015/04/apt_30_and_the_mecha.html

[Asyn]

SPEAR - Redirect to SMB
http://blog.cylance.com/redirect-to-smb

[Asyn]

Simda's Hide and Seek: Grown-up Games
http://securelist.com/blog/69580/simdas-hide-and-seek-grown-up-games/
http://blogs.technet.com/b/mmpc/archive/2015/04/12/microsoft-partners-with-interpol-industry-to-disrupt-global-malware-attack-affecting-more-than-770-000-pcs-in-past-six-months-39-simda-at-39-designed-to-divert-internet-traffic-to-disseminate-other-types-of-malware.aspx

[Asyn]

The Chronicles of the Hellsing APT: the Empire Strikes Back
http://securelist.com/analysis/publications/69567/the-chronicles-of-the-hellsing-apt-the-empire-strikes-back/

[Asyn]

IBM X-Force Exchange
https://exchange.xforce.ibmcloud.com/

[Asyn]

Operation RussianDoll: Adobe & Windows Zero-Day Exploits Likely Leveraged by Russia’s APT28 in Highly-Targeted Attack
https://www.fireeye.com/blog/threat-research/2015/04/probable_apt28_useo.html

[Asyn]

Clarification of Tor's involvement with DARPA's Memex
https://lists.torproject.org/pipermail/tor-talk/2015-April/037538.html

[Asyn]

Analyzing the Magento Vulnerability
http://blog.checkpoint.com/2015/04/20/analyzing-magento-vulnerability/

[Asyn]

Porn clicker app slipped into Google Play imitating popular Dubsmash app
https://blog.avast.com/2015/04/24/porn-clicker-app-slipped-into-google-play-imitating-popular-dubsmash-app/

[Asyn]

“No iOS Zone” – A New Vulnerability Allows DoS Attacks on iOS Devices
https://www.skycure.com/blog/ios-shield-allows-dos-attacks-on-ios-devices/

[mchain]

Don’t count on people to prevent data breaches
http://www.cio.com/article/2913889/data-breach/don-t-count-on-people-to-prevent-data-breaches.html

[Asyn]

Malware authors go a step further to access bank accounts
https://blog.avast.com/2015/04/27/malware-authors-go-a-step-further-to-access-bank-accounts/

[Pondus]

Bugs like this you have never seen   
http://www.theverge.com/2015/4/27/8502421/robots-pull-100-times-their-own-weight

[Asyn]

Analyzing the Magento Vulnerability
http://blog.checkpoint.com/2015/04/20/analyzing-magento-vulnerability/

Magento Shoplift (SUPEE-5344) Exploits in the Wild
https://blog.sucuri.net/2015/04/magento-shoplift-supee-5344-exploits-in-the-wild.html

[Cast]

Antivirus Company Qihoo Censured for Cheating in Lab Tests
http://www.pcmag.com/article2/0,2817,2483498,00.asp