π Security - Active Exploitation of Papercut
Active exploitation of Papercut has been observed at Huntress Labs. Details can be found in their blog.
Key Points:
β’ Active exploitation of Papercut has been detected.
β’ Huntress Labs has documented the issue in their blog.
β’ The blog provides further information on the exploitation.
π Resources:
β’ https://x.com/gleeda/status/2093364911363535029 - Original post URL
β’ https://x.com/ryanaraine - Ryan Araine's Twitter profile
β’ https://x.com/gleeda - Gleeda's Twitter profile
β’ https://x.com/HuntressLabs - Huntress Labs' Twitter profile
β’ https://t.co/U7QNMP2SUK - Huntress Labs' blog
π€ AI - Claude Code and GitHub Copilot Plugins
A set of Claude Code and GitHub Copilot plugins has been developed to provide the AI Literacy framework's complete development workflow.
Key Points:
β’ The AI Literacy framework's complete development workflow is now available.
β’ The workflow includes harness engineering, agent orchestration, literate programming, CUPID code review, and the three enforcement loops.
β’ The plugins are available on GitHub.
π Resources:
β’ https://x.com/blackorbird/status/2092994738114953235 - Original post URL
β’ https://github.com/Habitat-Thinki - GitHub repository
β’ 
π Infosec - Join the Discord Community
A Discord community has been created for infosec professionals to stay current with the latest developments.
Key Points:
β’ A Discord community has been created for infosec professionals.
β’ The community provides a space for infosec professionals to discuss the latest developments.
β’ The community is free from noise and marketing.
π Resources:
β’ https://x.com/ipurple/status/2092620244950851836 - Original post URL
β’ discord.gg/rR6FJBH - Discord community link
β’ https://x.com/ipurple - ipurple's Twitter profile
β’ 
π Security - Foreign Intelligence Services
Foreign intelligence services, particularly those from China and Russia, are increasingly behind cyberattacks on German companies.
Key Points:
β’ Foreign intelligence services are increasingly behind cyberattacks on German companies.
β’ The cyberattacks are particularly prevalent in China and Russia.
β’ The attacks are a concern for German companies.
π Resources:
β’ https://x.com/TheRecord_Media/status/2092991068060959084 - Original post URL
β’ https://x.com/ryanaraine - Ryan Araine's Twitter profile
β’ https://x.com/TheRecord_Media - The Record Media's Twitter profile
β’ https://t.co/WhmDt2y2vS - The Record Media's article
π Security - Global Secure Access Setup
The Global Secure Access setup has been criticized for its flaws.
Key Points:
β’ The Global Secure Access setup has been criticized for its flaws.
β’ The setup has the same class of issue as Remote Help.
β’ The setup leaves users to package the installer themselves.
π Resources:
β’ https://x.com/NathanMcNulty/status/2092843629765407090 - Original post URL
β’ 
β’ 
π Security - Firefox Remediations
Firefox remediations have been discussed in the context of the Global Secure Access setup.
Key Points:
β’ Firefox remediations have been discussed in the context of the Global Secure Access setup.
β’ The remediations involve expanding arrows and setting up MOAR remediations.
β’ The remediations are necessary to prevent security issues.
π Resources:
β’ https://x.com/NathanMcNulty/status/2092848993189654731 - Original post URL
β’ 
π Infosec - Join the Discord Community
A Discord community has been created for infosec professionals to stay current with the latest developments.
Key Points:
β’ A Discord community has been created for infosec professionals.
β’ The community provides a space for infosec professionals to discuss the latest developments.
β’ The community is free from noise and marketing.
π Resources:
β’ https://x.com/ipurple/status/2092620244950851836 - Original post URL
β’ discord.gg/rR6FJBH - Discord community link
β’ https://x.com/ipurple - ipurple's Twitter profile
β’
π Security - Papercut Issue
A Papercut issue has been discussed in the context of the Global Secure Access setup.
Key Points:
β’ A Papercut issue has been discussed in the context of the Global Secure Access setup.
β’ The issue was caused by greed and a lack of delivery.
β’ The issue affected thousands of schools.
π Resources:
β’ https://x.com/NathanMcNulty/status/2092331552927862994 - Original post URL
β’ 
π Security - ConfigMgr RC
ConfigMgr RC has been discussed in the context of the Global Secure Access setup.
Key Points:
β’ ConfigMgr RC has been discussed in the context of the Global Secure Access setup.
β’ The RC through CMG worked flawlessly in the TP.
β’ The RC should have shipped.
π Resources:
β’ https://x.com/NathanMcNulty/status/2092333160050864224 - Original post URL
β’ https://x.com/NathanMcNulty - NathanMcNulty's Twitter profile
β’ https://x.com/jcoehoorn - jcoehoorn's Twitter profile
π Security - e2e Shellcode Unit Tests
e2e shellcode unit tests have been implemented in Sliver.
Key Points:
β’ e2e shellcode unit tests have been implemented in Sliver.
β’ Sliver has the broadest shellcode/encoder/compression compatibility of any framework.
β’ The framework includes Linux shellcode + shikata_ga_nai and MacOS/arm64 + XOR encoders.
π Resources:
β’ https://x.com/LittleJoeTables/status/2092041869928878260 - Original post URL
β’ https://x.com/HackingLZ - HackingLZ's Twitter profile
β’ https://x.com/LittleJoeTables - LittleJoeTables' Twitter profile
β’ https://t.co/dcBpu49C5q - Sliver's GitHub repository
βοΈ Support
If you liked reading this report, please star βοΈ this repository and follow me on Github, π (previously known as Twitter) to help others discover these resources and regular updates.
Top comments (0)