Technical

[Asyn]

OpenSSH keyboard-interactive authentication brute force vulnerability (MaxAuthTries bypass)
https://kingcope.wordpress.com/2015/07/16/openssh-keyboard-interactive-authentication-brute-force-vulnerability-maxauthtries-bypass/

[Asyn]

Android malware Fobus now targeting users in the U.S., Germany and Spain
https://blog.avast.com/2015/07/21/android-malware-fobus-now-targeting-users-in-the-u-s-germany-and-spain/

[Asyn]

OS X 10.10 DYLD_PRINT_TO_FILE Local Privilege Escalation Vulnerability
https://www.sektioneins.de/blog/15-07-07-dyld_print_to_file_lpe.html

[Asyn]

Big Brother(s) Could be Watching You Thanks to Stagefright
https://blog.avast.com/2015/07/29/big-brothers-could-be-watching-you-thanks-to-stagefright/

[Asyn]

Trend Micro Discovers Vulnerability That Renders Android Devices Silent
http://blog.trendmicro.com/trendlabs-security-intelligence/trend-micro-discovers-vulnerability-that-renders-android-devices-silent/

[Asyn]

An Open Letter to Microsoft’s CEO: Don’t Roll Back the Clock on Choice and Control
https://blog.mozilla.org/blog/2015/07/30/an-open-letter-to-microsofts-ceo-dont-roll-back-the-clock-on-choice-and-control/

[Asyn]

Microsoft Advanced Threat Analytics
http://www.microsoft.com/en-us/server-cloud/products/advanced-threat-analytics/
http://blogs.technet.com/b/ad/archive/2015/07/22/microsoft-advanced-threat-analytics-coming-next-month.aspx
http://download.microsoft.com/download/C/F/6/CF62335F-C46B-4D84-B0C9-363A89B0C5E6/Microsoft_advanced_threat_analytics_datasheet.pdf

[Asyn]

"...no one can hack my mind": Comparing Expert and Non-Expert Security Practices
https://www.usenix.org/system/files/conference/soups2015/soups15-paper-ion.pdf

[Asyn]

Forensiq Projects In-App Ad Fraud Will Surpass $1 Billion In 2015
http://www.prnewswire.com/news-releases/forensiq-projects-in-app-ad-fraud-will-surpass-1-billion-in-2015-300117453.html
http://forensiq.com/mobile-app-fraud-study/

[Asyn]

One in every 600 websites has .git exposed
http://www.jamiembrown.com/blog/one-in-every-600-websites-has-git-exposed/

[Asyn]

Researchers Hack Air-Gapped Computer With Simple Cell Phone
http://www.wired.com/2015/07/researchers-hack-air-gapped-computer-simple-cell-phone/

[Asyn]

Dell Computer Corporation, Inc. Information for VU#577140
BIOS implementations fail to properly set UEFI write protections after waking from sleep mode
http://www.kb.cert.org/vuls/id/BLUU-9XXQ9L
https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2015-2890

[Asyn]

Certifi-gate: Hundreds of Millions of Android Devices Could Be Pwned
http://blog.checkpoint.com/2015/08/06/certifigate/
http://www.checkpoint.com/resources/certifigate

[Asyn]

Announcing Approval of Federal Information Processing Standard (FIPS) 202, SHA-3 Standard: Permutation-Based Hash and Extendable-Output Functions, and Revision of the Applicability Clause of FIPS 180-4, Secure Hash Standard
https://www.federalregister.gov/articles/2015/08/05/2015-19181/announcing-approval-of-federal-information-processing-standard-fips-202-sha-3-standard

[Asyn]

RIG Reloaded - Examining the Architecture of RIG Exploit Kit 3.0
https://www.trustwave.com/Resources/SpiderLabs-Blog/RIG-Reloaded---Examining-the-Architecture-of-RIG-Exploit-Kit-3-0/