Daily Writeups
@Daily_Writeups
3.49K subscribers
2 photos
128K links
Daily Bug Bounty / Cybersecurity Writeups
Source Code : https://github.com/Spix0r/writeup-miner
Download Telegram
About
Blog
Apps
Platform
Join
Daily Writeups
3.49K subscribers
Daily Writeups
⤷ Title: Ecosystem Moat: NVIDIA Acquires SchedMD (Slurm) and Unveils Nemotron 3 Hybrid AI Model
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Wed, 17 Dec 2025 00:03:22 +0000
════════════════════════
⌗ Tags: #Technology #AI Strategy #Generative AI #GPU Scheduling #HPC #Mamba_Transformer #NeMo Gym #Nemotron 3 #nvidia #SchedMD #Slurm
Daily CyberSecurity
Ecosystem Moat: NVIDIA Acquires SchedMD (Slurm) and Unveils Nemotron 3 Hybrid AI Model
NVIDIA acquires Slurm maintainer SchedMD to control GPU scheduling, and launches Nemotron 3 (Mamba-Transformer hybrid) to build a comprehensive AI ecosystem moat.
14 views
Daily Writeups
⤷ Title: Profit Over Safety: Meta Earns $3B from Chinese Scam Ads, Executives Tolerated Fraud for Revenue Growth
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Wed, 17 Dec 2025 00:00:03 +0000
════════════════════════
⌗ Tags: #Cybercriminals #Advertising Fraud #china #Mark Zuckerberg #Meta #Policy Conflict #revenue #Scam Ads #Social Responsibility #Whitelisting
Daily CyberSecurity
Profit Over Safety: Meta Earns $3B from Chinese Scam Ads, Executives Tolerated Fraud for Revenue Growth
Reuters: Meta executives tolerated $3B+ in scam/illegal ads from China due to revenue pressure, using "whitelisting" to protect top agencies and prioritizing profit over user safety.
23 views
Daily Writeups
⤷ Title: API10–2023: Unsafe Consumption of APIs — Exploitation and Mitigation
════════════════════════
𐀪 Author: JPablo13
════════════════════════
ⴵ Time: Wed, 17 Dec 2025 00:02:16 GMT
════════════════════════
⌗ Tags: #bug_bounty #cybersecurity #technology #api #hacking
Medium
API10–2023: Unsafe Consumption of APIs — Exploitation and Mitigation
API10/UCA Guide: Insecure consumption of data from external services or microservices. Learn how to exploit and mitigate the risk.
26 views
Daily Writeups
⤷ Title: 1 million d’attaques en 7 jours : Ce que j’ai appris en exposant un serveur sur Internet
════════════════════════
𐀪 Author: Desire Goore
════════════════════════
ⴵ Time: Wed, 17 Dec 2025 01:15:39 GMT
════════════════════════
⌗ Tags: #hacking #cyberattack #internet #cybersecurity #honeypot
Medium
1 million d’attaques en 7 jours : Ce que j’ai appris en exposant un serveur sur Internet
INTRODUCTION : Le Silence avant la Tempête
32 views
Daily Writeups
⤷ Title: TryHackMe: Advent of Cyber 2025 (Day 7)
════════════════════════
𐀪 Author: Dystopianllama
════════════════════════
ⴵ Time: Wed, 17 Dec 2025 00:49:24 GMT
════════════════════════
⌗ Tags: #advent_of_cyber_2025 #tryhackme #tryhackme_walkthrough
Medium
TryHackMe: Advent of Cyber 2025 (Day 7)
Scan-ta Clause — Day 7
37 views
Daily Writeups
⤷ Title: NVIDIA Critical AI Patch: Isaac Lab and NeMo Framework Flaws Risk Full Code Execution
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Wed, 17 Dec 2025 03:13:45 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #AI security #CVE_2025_32210 #Deserialization #Isaac Lab #Isaac Sim #NeMo #NeMo Framework #nvidia #privilege escalation #rce
Daily CyberSecurity
NVIDIA Critical AI Patch: Isaac Lab and NeMo Framework Flaws Risk Full Code Execution
NVIDIA issued a Critical (CVSS 9.0) patch for Isaac Lab and the NeMo Framework, fixing flaws that allow code execution and data tampering in AI models.
32 views
Daily Writeups
⤷ Title: Dropbear SSH Flaw Risks Root Access on Embedded Linux via Unix Stream Forwarding
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Wed, 17 Dec 2025 02:56:59 +0000
════════════════════════
⌗ Tags: #Vulnerability #Dropbear #embedded systems #Forwarding #LPE #privilege escalation #root shell #ssh #Unix Socket
Daily CyberSecurity
Dropbear SSH Flaw Risks Root Access on Embedded Linux via Unix Stream Forwarding
A critical LPE (CVE-2025-14282) in Dropbear SSH allows users to gain root access via Unix socket forwarding. Impacting embedded Linux, it's fixed in v2025.89.
27 views
Daily Writeups
⤷ Title: Tải Snake 8 Ball Pool Apk V2.0.6 Miễn Phí Cho Android
════════════════════════
𐀪 Author: Apkpuredev
════════════════════════
ⴵ Time: Wed, 17 Dec 2025 03:47:20 GMT
════════════════════════
⌗ Tags: #apkpure #games #hacking
Medium
Tải Snake 8 Ball Pool Apk V2.0.6 Miễn Phí Cho Android
Snake 8 Ball Pool là một tựa game kết hợp giữa hai thể loại quen thuộc: Snake (rắn săn mồi) và 8 Ball Pool (bi-a 8 bóng). Trong game này…
25 views
Daily Writeups
⤷ Title: TryHackMe: Brute It (Portuguese)
════════════════════════
𐀪 Author: blindXSS
════════════════════════
ⴵ Time: Wed, 17 Dec 2025 02:28:08 GMT
════════════════════════
⌗ Tags: #tryhackme_writeup #privilege_escalation #john_the_ripper #tryhackme #linux
Medium
TryHackMe: Brute It (Portuguese)
Introdução Como primeira story aqui no Medium, gostaria de compartilhar a minha experiência e minha triagem durante a realização da room…
29 views
Daily Writeups
⤷ Title: HackTheBox “Outbound” Writeup
════════════════════════
𐀪 Author: Alifia Rahmah
════════════════════════
ⴵ Time: Wed, 17 Dec 2025 03:53:49 GMT
════════════════════════
⌗ Tags: #hackthebox #hackthebox_writeup
Medium
HackTheBox “Outbound” Writeup
Name: Outbound
Difficulty: Easy 
OS: Linux
Link: Hack The Box :: Hack The Box
45 views
Daily Writeups
⤷ Title: Agentic AI Red Teaming Jobs in 2025–2026: How to Build a Career in the Hottest New Cyber Role
════════════════════════
𐀪 Author: Sajidur Rahman
════════════════════════
ⴵ Time: Wed, 17 Dec 2025 03:06:44 GMT
════════════════════════
⌗ Tags: #jobs #cybersecurity #ai #red_team #ethical_hacking
Medium
Agentic AI Red Teaming Jobs in 2025–2026: How to Build a Career in the Hottest New Cyber Role
Agentic AI red teaming is rapidly becoming one of the most in-demand specialties in cybersecurity, blending offensive security with AI/ML…
47 views
Daily Writeups
⤷ Title: Silent Pivot: Exploiting SpeechRuntimeMove for Stealthy Lateral Movement via DCOM
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Wed, 17 Dec 2025 04:57:03 +0000
════════════════════════
⌗ Tags: #Open Source Tool #COM Hijacking #DCOM #DLL Sideloading #Lateral Movement #post_exploitation #red teaming #Remote Registry #SpeechRuntime #Windows Security
Penetration Testing Tools
Silent Pivot: Exploiting SpeechRuntimeMove for Stealthy Lateral Movement via DCOM
SpeechRuntimeMove abuses DCOM and COM hijacking to execute code in an active user's session, bypassing the need for a full system takeover.
46 views
Daily Writeups
⤷ Title: Cheap Bots for Sale: Cambridge Study Reveals SMS Verification Bypassed for Just 8 Cents
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Wed, 17 Dec 2025 04:48:05 +0000
════════════════════════
⌗ Tags: #Vulnerability #Bot Armies #Cambridge University #COTSI #cybersecurity #Disinformation #fake accounts #Gray Market #Identity Crisis #SIM Farms #SMS Verification
Penetration Testing Tools
Cheap Bots for Sale: Cambridge Study Reveals SMS Verification Bypassed for Just 8 Cents
One of the key defensive barriers against the creation of fake online accounts has proven alarmingly fragile—capable of
31 views
Daily Writeups
⤷ Title: Perimeter Under Siege: 60 Million Attacks Target Industrial Edge Routers in 90-Day Surge
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Wed, 17 Dec 2025 04:40:42 +0000
════════════════════════
⌗ Tags: #Cybercriminals #Botnets #Chaya_005 #Critical Infrastructure #Forescout #Industrial Routers #OT Security #reconnaissance #RondoDox #ShadowV2 #Sierra Wireless
Penetration Testing Tools
Perimeter Under Siege: 60 Million Attacks Target Industrial Edge Routers in 90-Day Surge
Over a three-month observation period, Forescout researchers recorded more than 60 million malicious requests targeting devices positioned at
21 views
Daily Writeups
⤷ Title: The Ghost in the Machine: Operation MoneyMount-ISO Uses Fake Payment Lures to Unleash Phantom Stealer
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Wed, 17 Dec 2025 04:38:51 +0000
════════════════════════
⌗ Tags: #Cybercriminals #Data Exfiltration #Discord Webhooks #Financial Cybercrime #Info_stealer #ISO Malware #Operation MoneyMount_ISO #Phantom Stealer #phishing campaign #Seqrite Labs #Telegram Bot
Penetration Testing Tools
The Ghost in the Machine: Operation MoneyMount-ISO Uses Fake Payment Lures to Unleash Phantom Stealer
While monitoring digital threat activity, researchers at Seqrite Labs uncovered a new targeted campaign dubbed Operation MoneyMount-ISO. The
11 views
Daily Writeups
⤷ Title: Ransomware Groups Pivot: The Rise of Weyhro C2, a New Advanced Command-and-Control Platform
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Wed, 17 Dec 2025 04:37:38 +0000
════════════════════════
⌗ Tags: #Cybercriminals #AMSI Bypass #Command and Control #cybercrime #cybersecurity #evasion techniques #HVNC #Memory_Only Malware #ransomware #threat intelligence #Weyhro C2
Penetration Testing Tools
Ransomware Groups Pivot: The Rise of Weyhro C2, a New Advanced Command-and-Control Platform
Within cybercriminal circles, the emergence of a new command-and-control framework known as Weyhro C2 has been observed. Its
10 views
Daily Writeups
⤷ Title: MFA Under Siege: The Rise of BlackForce, the Sophisticated “Live” Phishing Kit Targeting 11+ Global Brands
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Wed, 17 Dec 2025 04:36:36 +0000
════════════════════════
⌗ Tags: #Cybercriminals #BlackForce #Credential Theft #cybersecurity #Man_in_the_Browser #MFA Bypass #phishing kit #React #Telegram #Zero Trust #Zscaler
Penetration Testing Tools
MFA Under Siege: The Rise of BlackForce, the Sophisticated "Live" Phishing Kit Targeting 11+ Global Brands
Since early August 2025, Zscaler researchers have been tracking the spread of a new phishing kit known as
14 views
Daily Writeups
⤷ Title: Digital Diaries: Is Your Smart Sex Toy Collecting More Data Than You Realize?
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Wed, 17 Dec 2025 04:33:58 +0000
════════════════════════
⌗ Tags: #Data Leak #App Permissions #cybersecurity #data brokers #Digital Privacy #IoT Security #Lelo #Satisfyer #Sex Toy Privacy #Smart Tech #We_Vibe
Penetration Testing Tools
Digital Diaries: Is Your Smart Sex Toy Collecting More Data Than You Realize?
Many of us have installed an app “just once”—simply to breeze through registration, dismiss pop-ups, and finally reach
22 views
Daily Writeups
⤷ Title: Privacy Paradox: Freedom Chat Exposed User Phone Numbers and Secret PINs in Major Security Breach
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Wed, 17 Dec 2025 04:31:51 +0000
════════════════════════
⌗ Tags: #Vulnerability #Converso #data privacy #Eric Daigle #Freedom Chat #Messaging App #Phone Number Leak #PIN Exposure #security vulnerability #Tanner Haas
Penetration Testing Tools
Privacy Paradox: Freedom Chat Exposed User Phone Numbers and Secret PINs in Major Security Breach
Freedom Chat, an application marketed as a secure messaging platform, has been exposed to serious risk following the
17 views
Daily Writeups
⤷ Title: Intimacy for Ransom: ShinyHunters Extorts PornHub Over 200M Stolen Premium Search & Watch Records
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Wed, 17 Dec 2025 04:29:44 +0000
════════════════════════
⌗ Tags: #Cybercriminals #cybersecurity #data breach #Extortion #Mixpanel #PII #PornHub #Premium Users #Search History #ShinyHunters #ShinySpid3r
Penetration Testing Tools
Intimacy for Ransom: ShinyHunters Extorts PornHub Over 200M Stolen Premium Search & Watch Records
PornHub has stated that it has become the target of extortion by the ShinyHunters group, which claims to
19 views
Daily Writeups
⤷ Title: Oil Exports Paralyzed: PDVSA Administrative Collapse Traps 11M Barrels After Ransomware Attack
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Wed, 17 Dec 2025 04:27:51 +0000
════════════════════════
⌗ Tags: #Cyber Security #Critical Infrastructure #Crude Oil #cyberattack #Energy Security #Jose Terminal #Oil Exports #PDVSA #ransomware #US_Venezuela Tensions #Venezuela
Penetration Testing Tools
Oil Exports Paralyzed: PDVSA Administrative Collapse Traps 11M Barrels After Ransomware Attack
Venezuela’s state-owned oil company PDVSA has reported a cyberattack on its systems, stressing that oil production and refining
16 views