Technical

[Asyn]

Ongoing abuse problems at Nic.at and DENIC
https://www.spamhaus.org/news/article/724/ongoing-abuse-problems-at-nic.at-and-denic

[Para-Noid]

How To Create a Website Backup Strategy

https://blog.sucuri.net/2015/04/how-to-create-a-website-backup-strategy.html?utm_campaign=How%20To%20Create%20a%20Website%20Backup%20Strategy%20Blogpost&utm_medium=social&utm_source=googleplus

Virtual Patching for Websites with Sucuri CloudProxy

https://blog.sucuri.net/2013/03/virtual-patching-for-websites-with-sucuri-cloudproxy.html?utm_campaign=What%20is%20virtual%20patching%2C%20and%20how%20we%20use%20it%20with%20our%20WAF%20Blogpost&utm_medium=social&utm_source=googleplus

FunWebProducts UserAgent Bloating Traffic  (Note: not sure where to post this.)

https://blog.sucuri.net/2015/08/funwebproducts-useragent-bloating-traffic.html?utm_campaign=FunWebProducts%20UserAgent%20Bloating%20Traffic%20Blogpost&utm_medium=social&utm_source=googleplus

[Asyn]

New data uncovers the surprising predictability of Android lock patterns
http://arstechnica.com/security/2015/08/new-data-uncovers-the-surprising-predictability-of-android-lock-patterns/

[Asyn]

Quicksand’ – A New Enterprise iOS Vulnerability
https://www.appthority.com/enterprise-mobile-threats/2015/08/19/quicksand-a-new-enterprise-ios-vulnerability/

[Asyn]

Remote Code Execution in Dolphin Browser for Android
http://rotlogix.com/2015/08/22/remote-code-execution-in-dolphin-browser-for-android/

Exploiting the Mercury Browser for Android
http://rotlogix.com/2015/08/23/exploiting-the-mercury-browser-for-android/

[Asyn]

Cryptography Today
https://www.nsa.gov/ia/programs/suiteb_cryptography/index.shtml

[Para-Noid]

Website Malware – Curious .htaccess Conditional Redirect Case

https://blog.sucuri.net/2014/09/website-malware-curious-htaccess-conditional-redirect-case.html?utm_campaign=Website%20Malware%20%E2%80%93%20Curious%20.htaccess%20Conditional%20Redirect%20Case%20Blogpost&utm_medium=social&utm_source=googleplus

Security and Hosting Environments

http://perezbox.com/2015/08/security-and-hosting-environments/?utm_campaign=Tony%20Perez%20on%3A%20Security%20and%20Hosting%20Environments&utm_medium=social&utm_source=googleplus

[Asyn]

Certifi-gate: Hundreds of Millions of Android Devices Could Be Pwned
http://blog.checkpoint.com/2015/08/06/certifigate/
http://www.checkpoint.com/resources/certifigate

Certifi-gate Found in the Wild on Google Play
New Insights on the Extent, Exploitation, and Mitigation of This New Threat
http://blog.checkpoint.com/2015/08/25/certifigate-statistics-exploitation-mitigation/

[Para-Noid]

From an avast news release

https://press.avast.com/avast-builds-threat-detection-based-on-machine-learning-to-protect-users-from-zero-day-attacks-malware-and-privacy-threats

[bob3160]

From an avast news release

https://press.avast.com/avast-builds-threat-detection-based-on-machine-learning-to-protect-users-from-zero-day-attacks-malware-and-privacy-threats

Interesting. Wonder if Intel and AMD are next on the list.

[Secondmineboy]

@bob3160: That would be amazing to see. Also automatically generated Dyna-Gen sigs would be great to see.

They said they are working on it a long time ago, i dont know if its still a thing tho.

[Asyn]

Ins0mnia: Unlimited Background Time and Covert Execution on Non-Jailbroken iOS Devices
https://www.fireeye.com/blog/threat-research/2015/08/ins0mnia_unlimited.html

[Asyn]

London Calling: Two-Factor Authentication Phishing From Iran
https://citizenlab.org/2015/08/iran_two_factor_phishing/

[Para-Noid]

Demystifying File and Folder Permissions

https://blog.sucuri.net/2015/09/demystifying-file-and-folder-permissions.html?utm_campaign=Demystifying%20Folder%20Permissions%20blogpost&utm_medium=social&utm_source=googleplus

[Asyn]

OWASP Automated Threat Handbook Web Applications
https://www.owasp.org/images/3/33/Automated-threat-handbook.pdf