Live Webinar

TRUINTELLIGENCE BRIEFING

Tuesday, September 15, 2026

11:00 AM - 11:45 AM ET | 8:00 - 8:45 AM PT

4:00 - 4:45 PM GMT

Thank you for registering! A confirmation email will be sent to you shortly.

First Name

Last Name

Business Email

Company

Job Title/Function

Your Job Title

Pre-submit a question

utm_campaign

utm_medium

utm_content

utm_source

Pre-Register for Future Monthly Threat Intel Briefings. TRUE

Privacy - Terms

Comments

Join us on September 15th for this month’s TRU Intelligence Briefing

eSentire’s Threat Response Unit (TRU) is a team of industry-renowned experts with real-world experience who are battle-tested to protect you against the most advanced cyber threats.

TRU is foundational to our Managed Detection and Response (MDR) service – no add-ons or additional cost required.Every month, TRU hosts a live webinar to share new research-driven observations of malware, notable vulnerabilities, threat actor groups, and cyber activity affecting the threat landscape.

Our Threat Response Unit (TRU) will review:

ThreatScape In this section, TRU will provide a brief update on recent geopolitical cyber activity, and TRU will cover recent vulnerabilities CVE-2026-82078 / CVE-2026-81578 (PaperCut), CVE-2026-18577 (N-Central) and CVE-2026-68820 (Windows EoP exploit leveraged by DPRK operatives in Operation Dream Job campaign). The Threat team will also cover recently observed threats DeviceManagerRAT, TWINLOOT and TuoniC2.

Cruciferra - Malware Loader & EDR Killer

TRU will cover Cruciferra MaaS. Cruciferra is a Malware-as-a-Service loader advertised on underground hacking forums since November 2025. Its promoted capabilities include AV/EDR termination via Bring Your Own Vulnerable Drivers (BYOVDs) and Windows SmartScreen bypass through DLL side-loading.

PaperCut MF/NG Zero-Day Exploit Chain (CVE-2026-81578 + CVE-2026-82078) TRU will cover the actively exploited PaperCut zero-days disclosed on August 27, 2026, affecting PaperCut NG and PaperCut MF print management products. By chaining an authentication bypass (CVE-2026-81578) with an unsafe class-loading flaw (CVE-2026-82078), an unauthenticated attacker can achieve full RCE. In addition to a discussion of the vulnerability, TRU will dive into remediation and mitigation recommendations that organizations can employ to help harden public-facing infrastructure.