Technical

[Asyn]

When Organized Crime Applies Academic Results
A Forensic Analysis of an In-Card Listening Device
http://eprint.iacr.org/2015/963.pdf

[Asyn]

Ransomware Decryptor
October 28 update: ALL Coinvault and Bitcryptor keys (14k+) added to the database
https://noransom.kaspersky.com/
https://noransom.kaspersky.com/static/CoinVaultDecryptor.zip
https://noransom.kaspersky.com/static/CoinVault-decrypt-howto.pdf

[Asyn]

Setting the Record Straight on Moplus SDK and the Wormhole Vulnerability
http://blog.trendmicro.com/trendlabs-security-intelligence/setting-the-record-straight-on-moplus-sdk-and-the-wormhole-vulnerability/

[Asyn]

Cryptographic Libraries
The same libraries that secure iOS and OS X are available to third‑party developers to help them build advanced security features.
https://developer.apple.com/cryptography/

[Asyn]

Hack The Galaxy: Hunting Bugs in the Samsung Galaxy S6 Edge
http://googleprojectzero.blogspot.com/2015/11/hack-galaxy-hunting-bugs-in-samsung.html

[Asyn]

DroidJack isn’t the only spying software out there: Avast discovers that OmniRat is currently being used and spread by criminals to gain full remote control of devices.
https://blog.avast.com/2015/11/05/droidjack-isnt-the-only-spying-software-out-there-avast-discovers-that-omnirat-is-currently-being-used-and-spread-by-criminals-to-gain-full-remote-control-of-devices/

[Asyn]

Lookout discovers new trojanized adware; 20K popular apps caught in the crossfire
https://blog.lookout.com/blog/2015/11/04/trojanized-adware/

[Asyn]

PuTTY vulnerability vuln-ech-overflow
http://www.chiark.greenend.org.uk/~sgtatham/putty/wishlist/vuln-ech-overflow.html
http://www.chiark.greenend.org.uk/~sgtatham/putty/download.html
http://www.chiark.greenend.org.uk/~sgtatham/putty/changes.html

[Asyn]

Shoddy Programming causes new Ransomware to destroy your Data
http://www.bleepingcomputer.com/news/security/shoddy-programming-causes-new-ransomware-to-destroy-your-data/

[Asyn]

What Do WebLogic, WebSphere, JBoss, Jenkins, OpenNMS, and Your Application Have in Common? This Vulnerability.
http://foxglovesecurity.com/2015/11/06/what-do-weblogic-websphere-jboss-jenkins-opennms-and-your-application-have-in-common-this-vulnerability/

[Asyn]

The Anatomy of an IoT Hack
https://blog.avast.com/2015/11/11/the-anatomy-of-an-iot-hack/

[Asyn]

Samsung S6 calls open to man-in-the-middle base station snooping
http://www.theregister.co.uk/2015/11/12/mobile_pwn2own1

[Asyn]

An End-to-End Measurement of Certificate Revocation in the Web’s PKI
https://www.stanford.edu/~aschulm/docs/imc15-revocation.pdf

[Asyn]

The BLAKE2 Cryptographic Hash and Message Authentication Code (MAC)
https://tools.ietf.org/html/rfc7693
https://blake2.net/
https://github.com/BLAKE2/

[Asyn]

Let’s Encrypt - Public Beta: December 3, 2015
https://letsencrypt.org/2015/11/12/public-beta-timing.html