Phrack 56, read carefully
The latest Phrack arrived in January. Two articles in particular deserve patient reading: one on kernel rootkits, one on a generalised technique for bypassing non-executable stack defences. Both shift my mental model of what defenders should be paying attention to.