每日安全动态推送(08-29)

Joshua J. Drake @jduck

[ Android ]  Hardening Measures in Android N Cripple System Utility and Security Applications https://t.co/Hdf7lSqLpQ

?" Android N SELinux 策略将限制对 /、/proc、/sys 路径的访问： http://t.cn/RqxG9bO "

Jeff Vander Stoep @jeffvanderstoep

[ Android ]  My slides from the Linux security summit: https://t.co/OqXgIpOXw6

?" Linux 安全峰会的一篇演讲《Android: protecting the kernel》? http://t.cn/RtsHB7I"

Nicolas Krassas @Dinosn

[ Attack ]  Opera server breach incident - Opera Security https://t.co/1XxkqB2MdI

?"Opera 的同步服务器被黑，部分用户信息遭窃取： http://t.cn/RtsHB7H"

HITB GSEC @HITBGSEC

[ Browser ]  #HITBGSEC D2 - Moritz Jodeit -Look Mom I Don't Use Shellcode - https://t.co/5himMhDBzv

?" 妈妈你看，我都不需要用 Shellcode，来自 HITB Gsec 会议，介绍的是 IE11 的漏洞利用： http://t.cn/RtsHB7R"

Nick Sullivan @grittygrease

[ Crypto ]  Congratulations to the OpenSSL team on releasing 1.1.0, a huge milestone. https://t.co/Vj9Ab0UHkm

?" OpenSSL 发布 1.1.0 版本： http://t.cn/Rtel2Ti"

Nicolas Krassas @Dinosn

[ Crypto ]  Tips for Securing SSL Renegotiation https://t.co/Eh0TJv6Q13

?" SSL 重协商加固建议，来自 McAfee Blog： http://t.cn/RtsHBzy "

Iván @aszy

[ Detect ]  An Analysis on the Impact and Detection of Kernel Stack Infoleaks https://t.co/RWfLV1MQ7A

?" 内核栈信息泄漏漏洞的影响和检测： http://t.cn/RtsHBzb"

Giuseppe `N3mes1s` @gN3mes1s

[ Detect ]  COFI Break - breaking exploits with practical control flow integrity - https://t.co/xhK3aoZSi2 wphttps://t.co/Up7HCwqZTQ

?"  通过有效的 CFI 特性检测 Exploit，PPT： http://t.cn/RtsHBz5   Paper： http://t.cn/RtsHBzI"

PassiveTotal @PassiveTotal

[ Detect ]  Need more examples to get started with SSL certificate hunting? @markpars0ns has 5 of them!https://t.co/s9mfNXBRnT #malware #infosec #hunt

?" 从 SSL 证书的角度检测攻击者： http://t.cn/RtsHBzo "

Nicolas Krassas @Dinosn

[ Hardware ]  Demonstrations of Attacks Against Implanted Cardiac Devices https://t.co/RuuBST8Hs2

?" 心脏植入设备的攻击面分析： http://t.cn/RtexYnb  如果这个链接访问不了，还有一个：http://www.valuewalk.com/wp-content/uploads/2016/08/MW_STJ_08252016.pdf "

Stefan Esser @i0n1c

[ iOS ]  Slides from my @HITBGSEC talk are online: "iOS 10 Kernel Heap Revisted" https://t.co/AvtXbxvWGp

?" 重温 iOS 10 内核堆，来自 HITB GSec 会议： http://t.cn/RtsHBzk"

Claud Xiao @claud_xiao

[ iOS ]  SandBlaster: reverse/decompile Apple sandbox profiles to original human readable SandBox Profile Language format. https://t.co/uOvAynOEWt

?" SandBlaster - 逆向 iOS 的沙箱配置文件： http://t.cn/RtsHBZ7"

Nicolas Krassas @Dinosn

[ iOS ]  Pegasus - analysis of APT attack iOS devices https://t.co/8og1e05Zba

?" Pegasus ? 针对 iOS 设备的 APT 攻击分析，来自盘古 Blog： http://blog.pangu.io/pegasus-apt/  "

hyp @hyp_h5p

[ Linux ]  Linux kernel mbcache lock contention denial of service. https://t.co/wqtaHOUGzI #infosec #vulnerability #linux #kernel

?"Linux 内核 mbcache 锁争用导致的拒绝服务漏洞（CVE-2015-8952）： http://t.cn/RtsHBZV "

Nikos Danopoulos @NikosDanopoulos

[ Linux ]  Privilege Escalation on Linux with Live examples. https://t.co/pfw3CArc7h #infosec via @InfosecEdu

?" 以几个实际的例子介绍 Linux 内核提权，来自 InfoSec： http://t.cn/RtsHBZ9 "

Nicolas Krassas @Dinosn

[ Malware ]  RIPPER ATM Malware and the 12 Million Baht Jackpot https://t.co/T63hTV30B8

?" ATM 恶意软件 Ripper 和 12 万泰铢大奖，来自 FireEye Blog： http://t.cn/RtsHBZs"

Nicolas Krassas @Dinosn

[ Malware ]  Malware Hides in Installer to Avoid Detection https://t.co/K0jjgLNlGX

?" 恶意软件以隐藏在安装包中的方式躲避检测，来自 McAfee Blog： http://t.cn/RtsHBw2"

CyberPunk Inc @Hackers_toolbox

[ MalwareAnalysis ]  Aleph - OpenSource Malware Analysis System https://t.co/5H4nHfIPE6 #InfoSec #CyberSecurity

?" 开源恶意软件分析系统 Aleph： http://t.cn/RtsHBwt "

Nicolas Krassas @Dinosn

[ Network ]  Automated Analysis and Debugging of Network Connectivity Policies https://t.co/W2ofJyvL2L

?" 网络连接策略的自动化分析，Paper： http://t.cn/RtsHBwJ"

André Moulu @andremoulu

[ Others ]  Attacking NVIDIA's Tegra Platform https://t.co/UOkgwY4tgH

?"攻击 NVIDIA Tegra 平台： http://t.cn/RtsHBwQ"

Pete Warden @petewarden

[ Others ]  Samsung's new processor uses neural networks for branch prediction: https://t.co/Ztw0Kqsi35 - probably very lightweight models I'd guess?

?"三星 Gala