Friday, September 5, 2025

Platform

MeetC2, a proof-of-concept project, showcases how adversaries can hide command-and-control traffic within legitimate cloud services using the Google Calendar API. This covert communication channel blends in with normal business traffic, allowing red and blue teams to exercise detection, telemetry, and response to cloud abuse scenarios in a controlled environment on macOS and Linux.

A new tool has been developed to intercept and analyze desktop application traffic using non-HTTP protocols like TCP and TLS. InterceptSuite is a single-click installable app that utilizes Socks5 proxy to capture and modify traffic with a modern GUI. It simplifies analysis by redirecting specific apps' traffic via Proxifier, making complex protocol interception accessible.

Mozilla is ending support for 32-bit Linux versions of Firefox due to decreasing widespread support and maintenance difficulties. Users currently on 32-bit Linux are advised to transition to 64-bit and install the corresponding version of Firefox. The Extended Support Release (ESR) version 140, including 32-bit builds, will be available until September 2026.

A fully-featured, user-friendly Kubernetes web UI that enables debugging, monitoring, and extensible customization of k8s environments.

André Arko's `rv` is a Ruby management tool designed to simplify dependency management and version switching. Inspired by Python's `uv`, `rv` promises to be faster, more reliable, and richer in features, offering instant pre-compiled ruby installations, isolated environments for CLI tools, and script support. Collaborating with the RubyGems team and other contributors, André has made notable progress on the project, aiming to create a "language manager" that integrates version management, dependency management, and more into one cohesive tool. This Ruby management tool seeks to streamline development workflows and reduce configuration complexities.

Emersion successfully ran a Docker Compose project with Podman using BuildKit, overcoming initial hurdles by setting up a new Docker context and enabling the Podman socket. However, they found that manually running the BuildKit daemon was still necessary. To address this limitation, Emersion created Bakah, a tool that translates Docker Compose JSON files into Bake format, eliminating the need for manual BuildKit daemon invocation. This innovation enables users to run their projects without relying on the BuildKit daemon, providing a more streamlined and efficient workflow with Podman and BuildKit collaboration. Bakah has simplified the process for many users.