Daily Writeups
@Daily_Writeups
3.51K subscribers
2 photos
129K links
Daily Bug Bounty / Cybersecurity Writeups
Source Code : https://github.com/Spix0r/writeup-miner
Download Telegram
About
Blog
Apps
Platform
Join
Daily Writeups
3.51K subscribers
Daily Writeups
⤷ Title: Stealthy Spies: MuddyWater Deploys UDPGangster to Evade Network Defenses
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Tue, 09 Dec 2025 03:54:01 +0000
════════════════════════
⌗ Tags: #Malware #APT #Azerbaijan #cyber attack #Cyber Espionage #Fortinet #Israel #malware #MuddyWater #phishing #Turkey #UDPGangster
Penetration Testing Tools
Stealthy Spies: MuddyWater Deploys UDPGangster to Evade Network Defenses
The Iranian threat group MuddyWater has intensified its cyber-espionage operations with the deployment of a new malicious program
28 views
Daily Writeups
⤷ Title: CISA’s Stark Mobile Security Warning: Stop Using Personal VPNs Now?
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Tue, 09 Dec 2025 03:53:01 +0000
════════════════════════
⌗ Tags: #Information Security #Android #CISA #Cyber Attack Surface #cybersecurity #Data Protection #iphone #mobile security #privacy #Surveillance #VPN
Penetration Testing Tools
CISA's Stark Mobile Security Warning: Stop Using Personal VPNs Now?
The U.S. Cybersecurity and Infrastructure Security Agency (CISA), in its newly issued mobile communications guidelines, has delivered a
21 views
Daily Writeups
⤷ Title: Portugal Grants Legal Protection to Ethical Hackers for Vulnerability Disclosure
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Tue, 09 Dec 2025 03:50:13 +0000
════════════════════════
⌗ Tags: #Information Security #bug bounty #CNCS #Cybersecurity Law #ethical hacking #Legal Protection #Portugal #Responsible Disclosure #Vulnerability Disclosure
Penetration Testing Tools
Portugal Grants Legal Protection to Ethical Hackers for Vulnerability Disclosure
Portugal has expanded its legal framework in the realm of digital security, formally establishing protections for good-faith specialists
14 views
Daily Writeups
⤷ Title: Tiny Core Linux 16.2: Fully Functional Graphical OS Fits in Just 23 MB
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Tue, 09 Dec 2025 03:49:21 +0000
════════════════════════
⌗ Tags: #Linux #BusyBox #embedded systems #FLTK/FLWM #Linux 16.2 #Minimalist OS #obsolete hardware #RAM_based #Tiny Core Linux
Penetration Testing Tools
Tiny Core Linux 16.2: Fully Functional Graphical OS Fits in Just 23 MB
The new release of Tiny Core Linux illustrates just how far the philosophy of minimalism can be taken
19 views
Daily Writeups
⤷ Title: Upbit Solana Hack: 100 Billion Tokens Stolen, Exchange Delay Avoids Penalties
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Tue, 09 Dec 2025 03:46:06 +0000
════════════════════════
⌗ Tags: #Cybercriminals #BONK #Crypto Exchange #Financial Supervisory Service #Regulatory Gap #Solana #Solana Exploit #Token Hack #Upbit
Penetration Testing Tools
Upbit Solana Hack: 100 Billion Tokens Stolen, Exchange Delay Avoids Penalties
Hackers siphoned more than 100 billion tokens from Upbit in just 54 minutes, exploiting a flaw in Solana
12 views
Daily Writeups
⤷ Title: Sauron: Fast Active Directory Tool Maps Credential Privileges and Nested Groups in Seconds
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Tue, 09 Dec 2025 03:42:55 +0000
════════════════════════
⌗ Tags: #Open Source Tool #Active Directory #AD Enumeration #Credential Context #cybersecurity #Group Policy #LDAP #post_exploitation #Red Team Tool #Sauron
Penetration Testing Tools
Sauron: Fast Active Directory Tool Maps Credential Privileges and Nested Groups in Seconds
Sauron is a fast AD tool for post-exploitation. It provides instant context on new credentials, resolving nested groups, OUs, GPO inheritance, and account metadata via LDAP.
9 views
Daily Writeups
⤷ Title: Google Titans & MIRAS: New Architecture for 2M+ Token Long-Term AI Memory
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Tue, 09 Dec 2025 03:34:26 +0000
════════════════════════
⌗ Tags: #Google #AI Architecture #Associative Memory #Google Research #Long_Context #MIRAS #RNN #Surprise Metric #Titans #Transformer
Penetration Testing Tools
Google Titans & MIRAS: New Architecture for 2M+ Token Long-Term AI Memory
Google has unveiled a new architecture for processing long sequences, Titans, along with a theoretical framework, MIRAS, which
14 views
Daily Writeups
⤷ Title: Zero-JS Clickjacking: SVG Filters Exploit iFrames to Steal Cross-Origin Data
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Tue, 09 Dec 2025 03:32:53 +0000
════════════════════════
⌗ Tags: #Vulnerability #Chromium #clickjacking #Cross_Origin #feBlend #Firefox #iFrame #Lira Rebane #SVG Filter #web security
14 views
Daily Writeups
⤷ Title: Apple & Google Issue New Spyware Alerts, Targeting Intellexa Zero-Day Victims
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Tue, 09 Dec 2025 03:28:46 +0000
════════════════════════
⌗ Tags: #Malware #Apple #google #Intellexa #Spyware Alerts #State_Linked Attacks #Surveillance Tech #Threat Analysis Group #Zero_Day Exploitation
Penetration Testing Tools
Apple & Google Issue New Spyware Alerts, Targeting Intellexa Zero-Day Victims
The world’s largest technology companies have begun issuing notifications to users who may have been targeted by state-linked
10 views
Daily Writeups
⤷ Title: Cloudflare Outage Caused by Frantic Patching of Critical React2Shell (CVE-2025-55182) Flaw
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Tue, 09 Dec 2025 03:27:51 +0000
════════════════════════
⌗ Tags: #Technology #Vulnerability #Chinese APT #Cloudflare #CVE_2025_55182 #Deserialization Flaw #Emergency Patch #Internet Fragility #Outage #React2Shell #WAF Configuration
Penetration Testing Tools
Cloudflare Outage Caused by Frantic Patching of Critical React2Shell (CVE-2025-55182) Flaw
Cloudflare’s global infrastructure has suffered a second major outage in less than a month — and it has
13 views
Daily Writeups
⤷ Title: FBI Warns: Deepfake Kidnapping Scams Use AI to Fabricate Image ‘Proof’ for Extortion
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Tue, 09 Dec 2025 03:19:46 +0000
════════════════════════
⌗ Tags: #Cybercriminals #AI Fraud #Deepfake Scam #FBI Warning #Image Manipulation #Kidnapping Extortion #Missing Persons #Social Engineering #WormGPT
Penetration Testing Tools
FBI Warns: Deepfake Kidnapping Scams Use AI to Fabricate Image 'Proof' for Extortion
Malefactors are increasingly exploiting photographs and video clips sourced from open platforms, presenting them as “evidence” of an
10 views
Daily Writeups
⤷ Title: Covert Backdoor: Array AG Gateway Exploit Allows Command Execution
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Tue, 09 Dec 2025 03:18:22 +0000
════════════════════════
⌗ Tags: #Vulnerability #Array AG Series #Backdoor #Command Execution #Corporate Gateway #Corporate VPN #DesktopDirect #JPCERT #Security Advisory
Penetration Testing Tools
Covert Backdoor: Array AG Gateway Exploit Allows Command Execution
Hacker groups have exploited a security gap in Array AG Series corporate gateways, implanting covert management micro-programs and
13 views
Daily Writeups
⤷ Title: CRITICAL ALERT: Apache Tika XXE Flaw (CVSS 10.0) Allows File Read via PDF Files
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Tue, 09 Dec 2025 03:15:32 +0000
════════════════════════
⌗ Tags: #Vulnerability #Apache Tika #CVE_2025_66516 #Patch Now #PDF Parser #Security Advisory #SSRF #Tika_core #XML External Entity #XXE
Penetration Testing Tools
CRITICAL ALERT: Apache Tika XXE Flaw (CVSS 10.0) Allows File Read via PDF Files
On 4 December 2025, the Apache Software Foundation disclosed a critical vulnerability — CVE-2025-66516, rated the maximum CVSS
17 views
Daily Writeups
⤷ Title: Google Launches Gemini 3 Pro: Next-Gen Multimodal AI That Reasons Spatially & Converts Documents to Code
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Tue, 09 Dec 2025 03:13:13 +0000
════════════════════════
⌗ Tags: #Google #AI Agent #CharXiv #Document Understanding #Google Gemini 3 Pro #LaTeX #Multimodal AI #Screen Comprehension #Video Reasoning #Visual Reasoning
Penetration Testing Tools
Google Launches Gemini 3 Pro: Next-Gen Multimodal AI That Reasons Spatially & Converts Documents to Code
Google has unveiled Gemini 3 Pro — a new generation of multimodal models that not only see images
15 views
Daily Writeups
⤷ Title: Linux 6.19: Kernel Gains Foundational PCIe Link Encryption for AMD SEV-TIO
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Tue, 09 Dec 2025 03:12:24 +0000
════════════════════════
⌗ Tags: #Linux #AMD SEV_TIO #confidential computing #IDE Protocol #Kernel Module #Linux 6.19 #PCIe Encryption #security #TDISP #TSM
Penetration Testing Tools
Linux 6.19: Kernel Gains Foundational PCIe Link Encryption for AMD SEV-TIO
Over the weekend, one of the most compelling updates in recent months landed in the Linux 6.19 branch:
21 views
Daily Writeups
⤷ Title: IDEsaster: 30+ Vulnerabilities Found in AI-IDEs Allow Silent RCE and Data Theft
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Tue, 09 Dec 2025 03:10:01 +0000
════════════════════════
⌗ Tags: #Vulnerability #AI_IDEs #Cursor #CVE #Data Exfiltration #GitHub Copilot #IDEsaster #Prompt Injection #RCE #Secure for AI #Supply Chain
Penetration Testing Tools
IDEsaster: 30+ Vulnerabilities Found in AI-IDEs Allow Silent RCE and Data Theft
More than thirty vulnerabilities have been uncovered in popular AI-enhanced development environments, all of which allow attackers —
13 views
Daily Writeups
⤷ Title: React2Shell: The Most Serious React Vulnerability Since Log4Shell?
════════════════════════
𐀪 Author: Hussein Ali
════════════════════════
ⴵ Time: Tue, 09 Dec 2025 03:54:54 GMT
════════════════════════
⌗ Tags: #nextjs #web_development #react #application_security #cybersecurity
Medium
React2Shell: The Most Serious React Vulnerability Since Log4Shell?
On December 3, 2025, the React team disclosed a critical remote code execution (RCE) vulnerability in React Server Components (RSC)…
20 views
Daily Writeups
⤷ Title: Tải Hack Supreme Duelist Stickman (Full Tiền, Max Level) v4.0.4
════════════════════════
𐀪 Author: Game4u
════════════════════════
ⴵ Time: Tue, 09 Dec 2025 03:47:29 GMT
════════════════════════
⌗ Tags: #hacking #game4u #games
Medium
Tải Hack Supreme Duelist Stickman (Full Tiền, Max Level) v4.0.4
Supreme Duelist Stickman là một game đối kháng hành động hấp dẫn, nơi người chơi điều khiển các nhân vật stickman trong các trận đấu gay…
18 views
Daily Writeups
⤷ Title: How I Study DFIR Every Day — My Routine, Tools, and Mindset
════════════════════════
𐀪 Author: Xeipher
════════════════════════
ⴵ Time: Tue, 09 Dec 2025 02:11:28 GMT
════════════════════════
⌗ Tags: #cybersecurity #technology #hacking #information_technology #information_security
Medium
How I Study DFIR Every Day — My Routine, Tools, and Mindset
New month, new blog.
19 views
Daily Writeups
⤷ Title: Best Chrome extensions for OSINT
════════════════════════
𐀪 Author: loyalonlytoday
════════════════════════
ⴵ Time: Tue, 09 Dec 2025 01:51:04 GMT
════════════════════════
⌗ Tags: #cybersecurity #osint_investigation #chrome_extension #osint #hacking
Medium
Best Chrome extensions for OSINT
30+ very useful extensions for your OSINT investigations
23 views
Daily Writeups
⤷ Title: Hack the Box “Precious” CTF Write-up
════════════════════════
𐀪 Author: Will Giles | Cybersecurity
════════════════════════
ⴵ Time: Tue, 09 Dec 2025 02:17:45 GMT
════════════════════════
⌗ Tags: #hackthebox_writeup #cybersecurity #web_penetration_testing #penetration_testing #hackthebox
Medium
Hack the Box “Precious” CTF Write-up
A walkthrough of the Linux Machine “Precious” on Hack the Box
27 views