Technical

[Asyn]

WebGL - A New Dimension for Browser Exploitation
http://www.contextis.com/resources/blog/webgl/
http://www.contextis.com/resources/blog/webgl/poc/index.html
http://www.contextis.com/resources/blog/webgl/webgl.avi

[Asyn]

Security distribution BackTrack 5 released
http://www.h-online.com/open/news/item/Security-distribution-BackTrack-5-released-1241332.html
http://www.backtrack-linux.org/backtrack/backtrack-5-release/

[Asyn]

WebGL - A New Dimension for Browser Exploitation
http://www.contextis.com/resources/blog/webgl/
http://www.contextis.com/resources/blog/webgl/poc/index.html
http://www.contextis.com/resources/blog/webgl/webgl.avi

Khronos respond to WebGL security report
http://www.h-online.com/security/news/item/Khronos-respond-to-WebGL-security-report-1241304.html
http://www.opengl.org/registry/specs/ARB/robustness.txt

[Asyn]

The RTLO unicode hole - sequence manipulation as an attack vector
http://norman.com/security_center/security_center_archive/2011/rtlo_unicode_hole/

Vulnerable versions of Windows

This issue is by default apparently only present in Windows Vista and Windows 7. In Windows XP you need to install support for right-to-left languages for this to work.

[Asyn]

Microsoft Security Intelligence Report (SIR) #10
http://www.microsoft.com/security/sir/default.aspx
http://download.microsoft.com/download/6/0/5/605BE103-9429-4493-898B-E3D50AB68236/Microsoft_Security_Intelligence_Report_volume_10_Key_Findings_Summary_English.pdf
http://download.microsoft.com/download/6/0/5/605BE103-9429-4493-898B-E3D50AB68236/Microsoft_Security_Intelligence_Report_volume_10_Global_Threat_Assessments_English.pdf

[Asyn]

New version of EMET (2.1) is now available
http://blogs.technet.com/b/srd/archive/2011/05/18/new-version-of-emet-is-now-available.aspx
Download: http://go.microsoft.com/fwlink/?LinkID=200220&clcid=0x409
Forum: http://go.microsoft.com/fwlink/?LinkID=213962&clcid=0x409

[Asyn]

Click Trajectories: End-to-End Analysis of the Spam Value Chain
http://cseweb.ucsd.edu/~savage/papers/Oakland11.pdf

[Asyn]

Successful timing attacks on elliptic curve cryptography
http://www.h-online.com/security/news/item/Successful-timing-attacks-on-elliptic-curve-cryptography-1247772.html
http://eprint.iacr.org/2011/232.pdf
http://www.kb.cert.org/vuls/id/536044

[Asyn]

The Failure of Noise-Based Non-Continuous Audio Captchas
http://cdn.ly.tl/publications/decaptcha-audio.pdf

[Asyn]

Comodogate v2
Continued from: http://forum.avast.com/index.php?topic=52252.msg649567#msg649567
Some details: http://pastebin.com/F5nUf5kr

[Asyn]

Cookiejacking
https://sites.google.com/site/tentacoloviola/cookiejacking
http://www.reuters.com/article/2011/05/25/us-microsoft-security-idUSTRE74O86F20110525

[Asyn]

When Angry Birds attack: Android edition
http://blog.duosecurity.com/2011/05/when-angry-birds-attack-android-edition/

[Asyn]

Web Application Attack and Audit Framework 1.0 arrives
http://www.h-online.com/security/news/item/Web-Application-Attack-and-Audit-Framework-1-0-arrives-1253108.html
http://sourceforge.net/projects/w3af/
http://sourceforge.net/news/?group_id=170274&id=300685
http://w3af.sourceforge.net/videos/video-demos.php

[Asyn]

The Electronic Frontier Foundation (EFF) Tor Challenge
https://www.eff.org/torchallenge

[Asyn]

Twitter new follow button clickjacking attack
http://serphacker.com/twitter/twitter-new-follow-button-clickjacking-attack.html

Google plus1 clickjacking attack
http://serphacker.com/clickjacking/google-plus1-clickjacking-attack.html