ISC StormCast for Friday, January 29th 2016

By Johannes B. Ullrich, Ph.D. Dridex Malspam Example From Jnauary 2016
https://isc.sans.edu/forums/diary/Dridex+malspam+example+from+January+2016/20663/
OpenSSL Patch
https://www.openssl.org/news/secadv/20160128.txt
Virustotal Adds Support For Firmware Malware
http://blog.virustotal.com/2016/01/putting-spotlight-on-firmware-malware_27.html
Facebook XSS Exploit
http://blog.virustotal.com/2016/01/putting-spotlight-on-firmware-malware_27.html
AngularJS XSS via Template Injection
http://blog.portswigger.net/2016/01/xss-without-html-client-side-template.html
More Here