Arszilla

CISSP, CRTO, CRTL, GWAPT, OSCP, OSEP, OSWP | Kali Contributor/Community Companion | Infosec and F1 | Opinions are of my own

[Kali Linux @kalilinux]

Building Windows C# Tools and Payloads from Kali Linux: One of our team members recently took (and passed!) OffSec’s advanced penetration testing course & exam, PEN-300/OSEP. Whilst it focuses a lot on Microsoft Windows, there were a… www.​kali.​org/blog/windows-csharp-payloads/

[Alex Neff @al3x_n3ff]

Bypassing SMB signing enforcement🔥

@aas_s3curity found a re-authentication bug in SMB. This allows you to simply relay an authentication to a host (e.g., a DC) even if signing is enforced! His NetExec module to test if a host is still vulnerable is now merged into main🚀

1/3🧵

[Kali Linux @kalilinux]

Kali Linux 2026.​3 Release (Build-Scripts Refresh): We are back with Kali Linux 2026.​3, the third release of the year! We have been busy making it easier to build Kali, updating the desktop experience, and bringing in more tools… www.​kali.​org/blog/kali-linux-2026-3-release/

[stypr @brokenpacifist]

mitmproxy: use `--emudhra` to sign TLS certificates 💀

[sui @birdabo]

they’re calling it the black October lmao.

> node.js: security vulnerability.
> PHP: critical RCE vulnerabilities.
> tensorlake: npm package infected.
> liteLLM: malicious PyPI + Docker releases
> Railway: customer secrets exposed
> zeabur - infrastructure breached.
> OpenCode: AI API keys exposed.
> OVHcloud CLI: official binaries backdoored.
> RankMath PRO: malware inside official plugin.
> TeamUpdraft: customer data compromised.
> ConnectWise: cloud backup identities compromised.
> SubQuery: backdoored npm package.
> GhostAction: GitHub repos with malicious workflows (related to the broader Shai-Hulud/ChainDrop activity).
> eMudhra: certificate authority keys compromised (with downstream impact on Tailscale).

this some complete madness bro. 1/3 of the internet is fucked.

[sui @birdabo]

they’re calling it the black October lmao.

> node.js: security vulnerability.
> PHP: critical RCE vulnerabilities.
> tensorlake: npm package infected.
> liteLLM: malicious PyPI + Docker releases
> Railway: customer secrets exposed
> zeabur - infrastructure breached.
> OpenCode: AI API keys exposed.
> OVHcloud CLI: official binaries backdoored.
> RankMath PRO: malware inside official plugin.
> TeamUpdraft: customer data compromised.
> ConnectWise: cloud backup identities compromised.
> SubQuery: backdoored npm package.
> GhostAction: GitHub repos with malicious workflows (related to the broader Shai-Hulud/ChainDrop activity).
> eMudhra: certificate authority keys compromised (with downstream impact on Tailscale).

this some complete madness bro. 1/3 of the internet is fucked.

[Arszilla @arszilla]

@eness_ergun @Ates_DANIS https://t.co/0iXEE3CNrg

Benim L50s Pro Ultra desteklenmiyor - internetini kesince local’den de kontrol edemiyorum…

Sadge…

[Arszilla @arszilla]

I have a very talented and capable friend that is looking for a new job (preferably remote in Europe. He is currently the CISO in a major institution in EU, but he’s looking for a new challenge.

If you would happen to know any good opportunities for him, please contact me!

[Arszilla @arszilla]

Quite bullshit to me that as an individual (with a track record) I cannot get Red Team access on @AnthropicAI’s CVP. The fuck am I supposed to use Defense access for?

Worst part is, I can’t change my attribution as an “individual security researcher” when I reapply…

[Arszilla @arszilla]

if @vxunderground was journalistic

[CTI Updates @CTI__Updates]

I asked dozens of ransomware groups one important question, do they like cats, here are the results 🧵👇

[Arszilla @arszilla]

@al3x_n3ff @bsdbandit Missed opportunity by not calling it “graverobber” smh

[NIK @ns123abc]

BREAKING: Anthropic threat intelligence team published a report on everyone misusing Claude

"We believe we have a responsibility to disclose misuse of our services"

It’s insane, everybody should read it:

[Karan @0xDISREL]

hey folks, after 6 years my tenure as a CTI analyst at big 4 has come to an end! i learned a lot and worked with the best, but time for new horizons!

currently looking for roles in NA/Canada. please retweet for reach and DM me if you have any leads 😇🙏

[CCob🏴󠁧󠁢󠁷󠁬󠁳󠁿 @_EthicalChaos_]

Want to run an entire Tailscale daemon from memory inside a C2 implant with zero disk artifacts, no kernel drivers, traffic indistinguishable from HTTPS to a CDN, and relay connections from the victim network back through the tailnet.

Now you can. Enjoy!

https://t.co/WmBlShAnLr

[Arszilla @arszilla]

@troyhunt data breach at Framework

[Arszilla @arszilla]

@wetw0rk7 @jxx7n_ Should’ve posed like this:

[Arszilla @arszilla]

@vxunderground that’s exactly what a cat would say to make us think that they are not a cat

[Gris 🇩🇰 @Graesplaene_]

Democracy is when a mass surveillance law gets rejected multiple times so you force it through with an emergency vote right before summer recess