Daily Writeups
@Daily_Writeups
3.53K subscribers
2 photos
130K links
Daily Bug Bounty / Cybersecurity Writeups
Source Code : https://github.com/Spix0r/writeup-miner
Download Telegram
About
Blog
Apps
Platform
Join
Daily Writeups
3.53K subscribers
Daily Writeups
⤷ Title: FastAPI + OpenID Connect with PKCE: Secure Mobile & CLI Auth Without SDK Hell
════════════════════════
𐀪 Author: Yamishift
════════════════════════
ⴵ Time: Mon, 08 Dec 2025 01:32:13 GMT
════════════════════════
⌗ Tags: #fastapi #oauth2 #openid #python #api_security
Medium
FastAPI + OpenID Connect with PKCE: Secure Mobile & CLI Auth Without SDK Hell
Use standards, not black-box SDKs, to give your apps and CLIs clean, secure single sign-on.
32 views
Daily Writeups
⤷ Title: Global Crackdown Dismantles Crypto-Scam Network, Laundering Over €700 Million
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Mon, 08 Dec 2025 04:00:04 +0000
════════════════════════
⌗ Tags: #Cybercriminals #Asset Seizure #Bitcoin #Call Centers #Crypto Scam #deepfakes #Europol #Financial Crime #International Fraud #Money Laundering
Penetration Testing Tools
Global Crackdown Dismantles Crypto-Scam Network, Laundering Over €700 Million
An international fraud operation has culminated in a sweeping blow against a vast crypto-scam network that laundered more
26 views
Daily Writeups
⤷ Title: Android 16 QPR2: New Minor SDK Brings 3-Hour OTP SMS Delay & Icon Customization
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Mon, 08 Dec 2025 03:58:38 +0000
════════════════════════
⌗ Tags: #Android #Google #Android 16 QPR2 #Android Security #Custom Icons #dark theme #Health Connect #Linux GUI #Minor SDK #OTP Delay
Penetration Testing Tools
Android 16 QPR2: New Minor SDK Brings 3-Hour OTP SMS Delay & Icon Customization
Google has released the Android 16 QPR2 update, introducing substantial refinements across the interface, developer tooling, and system
16 views
Daily Writeups
⤷ Title: Chinese APT Deploys Cross-Platform ‘Brickstorm’ Backdoor, Burrows for Years in Critical Networks
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Mon, 08 Dec 2025 03:56:55 +0000
════════════════════════
⌗ Tags: #Malware #ADFS #BRICKSTORM #Chinese APT #CISA #Cross_Platform Malware #Cyber Espionage #NSA #UNC5221 #VMware vCenter #Warp Panda
Penetration Testing Tools
Chinese APT Deploys Cross-Platform 'Brickstorm' Backdoor, Burrows for Years in Critical Networks
Chinese cyber-espionage actors have spent years burrowed, undetected, within the networks of critical organizations, infiltrating infrastructure with sophisticated
11 views
Daily Writeups
⤷ Title: Windows 11 Agenda View is Back, But Built on WebView 2 with Performance Overhead
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Mon, 08 Dec 2025 02:55:55 +0000
════════════════════════
⌗ Tags: #Windows #Agenda View #Microsoft 365 Copilot #Microsoft Teams #Performance Overhead #WebView 2 #Windows 11 #Windows Shell Experience Host
Daily CyberSecurity
Windows 11 Agenda View is Back, But Built on WebView 2 with Performance Overhead
Windows 11's missing Agenda View returns, but its WebView 2 implementation causes high CPU usage. Microsoft accepts the trade-off for easier Copilot/Teams integration.
9 views
Daily Writeups
⤷ Title: Pixel Phone Turns into Webcam for Nintendo Switch 2 via USB, No Accessory Needed
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Mon, 08 Dec 2025 02:48:11 +0000
════════════════════════
⌗ Tags: #Android #GameChat #Gaming Accessory #Google Pixel #Nintendo Switch 2 #Pixel Drop #USB Video Class #UVC #Webcam
Daily CyberSecurity
Pixel Phone Turns into Webcam for Nintendo Switch 2 via USB, No Accessory Needed
The latest Pixel Drop fix enables Google Pixel phones to function as external USB webcams for the Nintendo Switch 2, allowing high-quality video calls without extra accessories.
11 views
Daily Writeups
⤷ Title: Meta Reverses Course: Strikes Deals with CNN, Le Monde to Feed Licensed News to Meta AI
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Mon, 08 Dec 2025 02:44:23 +0000
════════════════════════
⌗ Tags: #Technology #Axios #CNN #Fox News #Generative AI #Le Monde #Mark Zuckerberg #Meta AI #News Licensing #Publishers #RAG
Daily CyberSecurity
Meta Reverses Course: Strikes Deals with CNN, Le Monde to Feed Licensed News to Meta AI
Meta struck paid, multi-year licensing deals with CNN, Le Monde, and others to feed licensed news to Meta AI, improving RAG and requiring the chatbot to link sources.
8 views
Daily Writeups
⤷ Title: EU Fines X €120 Million for DSA Violation Over ‘Deceptive’ Blue Check Verification
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Mon, 08 Dec 2025 02:33:40 +0000
════════════════════════
⌗ Tags: #Technology #ad transparency #Blue Check #Deceptive Design #Digital Services Act #DSA Fine #Elon Musk #EU Commission #X platform
Daily CyberSecurity
EU Fines X €120 Million for DSA Violation Over 'Deceptive' Blue Check Verification
The EU fined X €120M for violating the DSA, citing the "deceptive design" of its Blue Check system and restricting data access. X has 60 days to respond.
11 views
Daily Writeups
⤷ Title: Meta Fixes ‘Broken’ Support: Rolling Out AI Assistants and New Recovery Hubs
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Mon, 08 Dec 2025 02:29:50 +0000
════════════════════════
⌗ Tags: #Technology #Account Recovery #AI Assistant #AI Chat #Customer Support #facebook #Instagram #Meta #Selfie Verification #Support Hub
Daily CyberSecurity
Meta Fixes 'Broken' Support: Rolling Out AI Assistants and New Recovery Hubs
Meta acknowledged its broken support system and launched AI chat and an enhanced Support Hub. New AI recovery tools have boosted hacked-account success rates by 30%.
8 views
Daily Writeups
⤷ Title: HexStrike AI MCP v6.0: The New Era of Automated Cybersecurity
════════════════════════
𐀪 Author: Sonu Yadav
════════════════════════
ⴵ Time: Mon, 08 Dec 2025 02:52:10 GMT
════════════════════════
⌗ Tags: #cyber_security_solutions #ai #cybersecurity #hacking #mcp_server
Medium
HexStrike AI MCP v6.0: The New Era of Automated Cybersecurity
If you’ve ever done penetration testing the old-school way, you know how it goes:  Hours of scanning, digging through subdomains, guessing…
15 views
Daily Writeups
⤷ Title: The Reason Why Real Spies Were Obsessed With Angry Birds Game
════════════════════════
𐀪 Author: Alex Grande
════════════════════════
ⴵ Time: Mon, 08 Dec 2025 02:50:58 GMT
════════════════════════
⌗ Tags: #hacking #mobile_app_development #technology #games #security
Medium
The Reason Why Real Spies Were Obsessed With Angry Birds Game
The Story of the IMEI Leak — Why Intelligence Agencies Loved Your High Scores.
13 views
Daily Writeups
⤷ Title: Hack The Box|Editor Walkthrough
════════════════════════
𐀪 Author: NV
════════════════════════
ⴵ Time: Mon, 08 Dec 2025 02:19:27 GMT
════════════════════════
⌗ Tags: #kali_linux #hackthebox #hacking #hacker #hackthebox_walkthrough
Medium
Hack The Box|Editor Walkthrough
Hello everyone, today we are going to work on the “Editor” machine from Hack The Box. First, we are going to perform a reconnaissance using…
8 views
Daily Writeups
⤷ Title: Command Line Muscle Memory: 20 Commands You’ll Use on Every Lab
════════════════════════
𐀪 Author: Aj
════════════════════════
ⴵ Time: Mon, 08 Dec 2025 03:28:13 GMT
════════════════════════
⌗ Tags: #linux #bash #terminal #cybersecurity #command_line
Medium
Command Line Muscle Memory: 20 Commands You’ll Use on Every Lab
The difference between fumbling and flowing comes down to these keystrokes.
9 views
Daily Writeups
⤷ Title: Part 1: A Complete Guide to Microsoft Defender for Cloud Apps (MDCA)
════════════════════════
𐀪 Author: BoNeZ
════════════════════════
ⴵ Time: Mon, 08 Dec 2025 03:27:52 GMT
════════════════════════
⌗ Tags: #enterprise_security #cloud_security #microsoft_defender #cybersecurity #microsoftcloudsecurity
Medium
Part 1: A Complete Guide to Microsoft Defender for Cloud Apps (MDCA)
INTRODUCTION
14 views
Daily Writeups
⤷ Title: Who is Lena? and 7 Key Security Takeaways for CISOs
════════════════════════
𐀪 Author: Dr. Feliks Kravets
════════════════════════
ⴵ Time: Mon, 08 Dec 2025 03:20:54 GMT
════════════════════════
⌗ Tags: #ciso #dr_feliks_kravets #cybersecurityeasy #cybersecurity #lena
Medium
Who is Lena? and 7 Key Security Takeaways for CISOs
What did we learn from chatbot Lena’s recent attack? After looking at various sources, these are a few key points for CISOs and security…
11 views
Daily Writeups
⤷ Title: ประกาศเตือนด่วนที่สุด!
════════════════════════
𐀪 Author: ThaiCERT By NCSA
════════════════════════
ⴵ Time: Mon, 08 Dec 2025 03:12:50 GMT
════════════════════════
⌗ Tags: #cybersecurity
Medium
🚨ประกาศเตือนด่วนที่สุด!
🚨ประกาศเตือนด่วนที่สุด! ผู้ใช้ Android ต้องอ่าน 📱🌐
ตรวจพบช่องโหว่ร้ายแรงในระบบภายในของชิปโทรศัพท์มือถือ…
9 views
Daily Writeups
⤷ Title: IIS Misconfigurations, MySQL Exposure, and the Path to Domain Admin
════════════════════════
𐀪 Author: Johnny Meintel
════════════════════════
ⴵ Time: Mon, 08 Dec 2025 02:56:38 GMT
════════════════════════
⌗ Tags: #homelab #isis #mysql #cybersecurity
Medium
IIS Misconfigurations, MySQL Exposure, and the Path to Domain Admin
Finishing up Phase One of my homelab setup — building a deliberately vulnerable infrastructure to learn to detect and defend against…
14 views
Daily Writeups
⤷ Title: What Is WebRTC Used For? Does WebRTC Leak Your IP Address?
════════════════════════
𐀪 Author: AdsPower Browser
════════════════════════
ⴵ Time: Mon, 08 Dec 2025 02:03:22 GMT
════════════════════════
⌗ Tags: #adspowers_webrtc #adspower #ip_address #cybersecurity #webrtc
Medium
What Is WebRTC Used For? Does WebRTC Leak Your IP Address?
Discover what WebRTC is, how it works, whether it can expose your IP address, and how AdsPower’s WebRTC modes can help you stay protected.
14 views
Daily Writeups
⤷ Title: How Hackers Exploit Vulnerabilities to Gain Access.
════════════════════════
𐀪 Author: Jugal Patel
════════════════════════
ⴵ Time: Mon, 08 Dec 2025 02:02:13 GMT
════════════════════════
⌗ Tags: #gaining_access #cybersecurity #exploitation #penetration_testing #vulnerability
Medium
How Hackers Exploit Vulnerabilities to Gain Access.
Linkedin : Cybersense Mayur Khainar Jugal Patel
Instagram : Jugal Patel
32 views
Daily Writeups
⤷ Title: XSS, CSRF, and SSRF: Understanding Three Commonly Confused Web Vulnerabilities
════════════════════════
𐀪 Author: Moez Ben-Azzouz
════════════════════════
ⴵ Time: Mon, 08 Dec 2025 02:23:31 GMT
════════════════════════
⌗ Tags: #ssrf #xss_attack #csrf #penetration_testing #web_application_security
Medium
XSS, CSRF, and SSRF: Understanding Three Commonly Confused Web Vulnerabilities
If you are new to web application security, you have probably encountered the acronyms XSS, CSRF, and SSRF. These three vulnerability…
25 views
Daily Writeups
⤷ Title: Malware Analysis — Egg-xecutable
════════════════════════
𐀪 Author: THM{0x416469747961204D6163686972616A75}
════════════════════════
ⴵ Time: Mon, 08 Dec 2025 03:51:45 GMT
════════════════════════
⌗ Tags: #tryhackme_writeup #tryhackme_walkthrough #tryhackme #ctf #ctf_writeup
Medium
Malware Analysis — Egg-xecutable
Discover some common tooling for malware analysis within a sandbox environment.
27 views