Interesting that everyone always assumes Russia like there are no other threat actors in this world. “The nation-state wasn’t identified.” washingtonpost.com/national/googl…

if the #darkhotel had a loyalty program, clem1 would be a Diamond Globalist Ambassador Elite member. portal.msrc.microsoft.com/en-US/security…

Jann Horn - [email protected] The in-the-wild exploit is attributed to NSO. See more here: bugs.chromium.org/p/project-zero…

Blog post about the work Google's Threat Analysis Group (TAG) does. Targeted phishing stats, Sandworm campaign details and disinfo campaign takedowns. We plan to do more of these. blog.google/technology/saf… Toni Gidwani billy leonard

Thoroughly my first #ruxcon. Great talks and an enlightened set of attendees. Well worth the trip, even from overseas.

Speaking at #baythreat next week on intricacies of persistence.

An interesting security evasion. No one follows the spec exactly, but should your code-signing implementation allow this? blog.google/threat-analysi…

Excited about closing out #baythreat tomorrow. Small surprise for those that stick it out to the end...

Almost forgot a (modest) bug this month: technet.microsoft.com/en-us/security…

Openssl 0day, may expose session data from servers / clients. Patch your stuff: openssl.org/news/secadv_20…

Heap allocation patterns make private key exposure unlikely for #heartbleed #dontpanic.

Can You Get Private SSL Keys Using Heartbleed? We tried & failed! Can you solve the CloudFlare challenge: blog.cloudflare.com/answering-the-…

Some nice finds here (state machines are hard): openssl.org/news/secadv_20…

Excited that my anti-phishing Chrome extension, Password Alert, just launched! googleonlinesecurity.blogspot.com/2015/04/protec… pic.x.com/sz6BNSV0UI

“What if we're still doing this when we're fifty?” googleprojectzero.blogspot.com/2015/06/owning…

Win32k #0day, more details on recent Flash 0day. Chrome Win32k lockdown mitigates on Win10: security.googleblog.com/2016/10/disclo…

Investigating Chrysaor, Android #malware used in targeted attacks: android-developers.googleblog.com/2017/04/an-inv…

Nice write up by deprecated profile. community.rapid7.com/community/meta…

9c7c7149387a1c79679a87dd1ba755bc @ 0x402560, 0x40F598 ac21c8ad899727137c4b94458d7aa8d8 @ 0x10004ba0, 0x10012AA4 #WannaCryptAttribution

See Mary Ruthven speak about how Google finds targeted Android malware @ #BHUSA17, 5:05pm Mandalay Bay AB. android-developers.googleblog.com/2017/07/from-c…