Daily Writeups
@Daily_Writeups
3.53K subscribers
2 photos
130K links
Daily Bug Bounty / Cybersecurity Writeups
Source Code : https://github.com/Spix0r/writeup-miner
Download Telegram
About
Blog
Apps
Platform
Join
Daily Writeups
3.53K subscribers
Daily Writeups
⤷ Title: The Five-Year Sleeper: Malicious NuGet Package Poses as Tracer.Fody to Drain Crypto Wallets
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Thu, 18 Dec 2025 03:35:24 +0000
════════════════════════
⌗ Tags: #Malware #.NET #cybersecurity #Homoglyph Attack #Info_stealer #NuGet #Socket Threat Research #Stratis Wallet #supply chain attack #Tracer.Fody #Typosquatting
Penetration Testing Tools
The Five-Year Sleeper: Malicious NuGet Package Poses as Tracer.Fody to Drain Crypto Wallets
A covert threat has been uncovered within the .NET ecosystem, stemming from the substitution of a widely used
13 views
Daily Writeups
⤷ Title: Kill the Cipher: Microsoft to Disable RC4 Authentication by Mid-2026—Are You Ready?
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Thu, 18 Dec 2025 03:32:48 +0000
════════════════════════
⌗ Tags: #Microsoft #Active Directory #AES_SHA1 #Audit 4768 #cybersecurity #Domain Controller #Encryption #Kerberos #PowerShell #RC4 #Windows Server
Penetration Testing Tools
Kill the Cipher: Microsoft to Disable RC4 Authentication by Mid-2026—Are You Ready?
Microsoft has announced plans to retire the legacy RC4 algorithm from Windows authentication. The company is preparing changes
10 views
Daily Writeups
⤷ Title: Internet Rewired: Cloudflare 2025 Report Reveals a 19% Traffic Surge and the Rise of AI Bot Wars
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Thu, 18 Dec 2025 03:31:43 +0000
════════════════════════
⌗ Tags: #Information Security #2025 Year in Review #AI Crawlers #bot traffic #Cloudflare Radar #DDoS attacks #Googlebot #internet security #Post_Quantum Cryptography #Starlink #Tech trends
Penetration Testing Tools
Internet Rewired: Cloudflare 2025 Report Reveals a 19% Traffic Surge and the Rise of AI Bot Wars
By the end of 2025, the internet had become even more tightly bound to cloud infrastructure, mobile traffic,
19 views
Daily Writeups
⤷ Title: Digital Crosshairs: Iran-Linked “Handala” Group Offers $30K Bounties for Israeli Engineers
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Thu, 18 Dec 2025 03:29:53 +0000
════════════════════════
⌗ Tags: #Cyber Security #Cyber Intimidation #cyber warfare #David’s Sling #Doxxing #Handala #Iran #Israel #Patriot Missile #RedWanted #threat intelligence #Unit 8200
Penetration Testing Tools
Digital Crosshairs: Iran-Linked "Handala" Group Offers $30K Bounties for Israeli Engineers
A new wave of pressure targeting Israeli professionals linked to the defense sector has moved beyond conventional cyberattacks
13 views
Daily Writeups
⤷ Title: Naughty List: SantaStealer Malware Unwrapped—The “New” Holiday Threat is Just Rebranded Code
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Thu, 18 Dec 2025 03:29:11 +0000
════════════════════════
⌗ Tags: #Malware #App_Bound Encryption #BluelineStealer #Chrome Security #Cybersecurity 2025 #Data Theft #Infostealer #Malware_as_a_Service #phishing #Rapid7 #SantaStealer
Penetration Testing Tools
Naughty List: SantaStealer Malware Unwrapped—The "New" Holiday Threat is Just Rebranded Code
In the run-up to the New Year holidays, underground marketplaces often see a surge of freshly minted data-stealing
14 views
Daily Writeups
⤷ Title: The VPN Stand-off: Denmark Backtracks on Controversial VPN Ban Amid Authoritarian Concerns
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Thu, 18 Dec 2025 03:27:42 +0000
════════════════════════
⌗ Tags: #Technology #Chat Control #copyright law #Denmark #Digital Privacy #EU Regulation #Geoblocking #Jakob Engel_Schmidt #Net Neutrality #Online Piracy #VPN
Penetration Testing Tools
The VPN Stand-off: Denmark Backtracks on Controversial VPN Ban Amid Authoritarian Concerns
The Danish government has opened a public consultation on amendments to copyright and broadcasting laws that would make
11 views
Daily Writeups
⤷ Title: The Developer Win: GitHub Postpones Self-Hosted Runner Fee After Massive Community Outcry
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Thu, 18 Dec 2025 03:19:25 +0000
════════════════════════
⌗ Tags: #Technology #CI/CD #Developer Backlash #DevOps #GitHub Actions #GitHub Changelog #GitHub Pricing #Microsoft #Platform Fee #Self_Hosted Runners #Tech News 2025
Daily CyberSecurity
The Developer Win: GitHub Postpones Self-Hosted Runner Fee After Massive Community Outcry
GitHub walks back its plan to charge $0.002/min for self-hosted runners, postponing the fee indefinitely following intense backlash from the community.
8 views
Daily Writeups
⤷ Title: CVE-2025-37164 (CVSS 10.0): Unauthenticated HPE OneView RCE Grants Total Control Over Data Centers
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Thu, 18 Dec 2025 02:59:59 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #CVE_2025_37164 #CVSS 10.0 #Data Center #HPE #HPE Synergy #hybrid cloud #Infrastructure Management #OneView #rce #Remote Code Execution
Daily CyberSecurity
CVE-2025-37164 (CVSS 10.0): Unauthenticated HPE OneView RCE Grants Total Control Over Data Centers
HPE issued an urgent alert for a CVSS 10.0 RCE in OneView. Attackers can seize unauthenticated control of data centers. Upgrade to v11.00+ now.
12 views
Daily Writeups
⤷ Title: CISA Alert: Chinese Hackers Weaponize CVSS 10 Cisco Zero-Day & SonicWall Exploit Chains
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Thu, 18 Dec 2025 02:41:23 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #ASUS Live Update #Chinese APT #CISA KEV #Cisco Secure Email Gateway #CVE_2025_20393 #Cyber Security #Root RCE #SonicWall SMA1000 #UAT_9686 #zero_day
Daily CyberSecurity
CISA Alert: Chinese Hackers Weaponize CVSS 10 Cisco Zero-Day & SonicWall Exploit Chains
CISA adds a CVSS 10 Cisco zero-day and SonicWall exploit chains to its KEV catalog, warning of active exploitation by Chinese APTs and supply chain attacks.
12 views
Daily Writeups
⤷ Title: Cisco Zero-Day Siege: Chinese Group UAT-9686 Deploys ‘Aqua’ Malware via CVSS 10 Root Exploit
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Thu, 18 Dec 2025 01:52:34 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #AquaShell #Chinese APT #cisco #Cisco Talos #CVE_2025_20393 #root access #Secure Email Gateway #Spam Quarantine #UAT_9686 #zero_day
Daily CyberSecurity
Cisco Zero-Day Siege: Chinese Group UAT-9686 Deploys 'Aqua' Malware via CVSS 10 Root Exploit
Cisco warns of a CVSS 10 zero-day (CVE-2025-20393) exploited by Chinese APT UAT-9686 to backdoor Secure Email Gateways with the Aqua malware suite.
14 views
Daily Writeups
⤷ Title: Zero-Day Warning: Hackers Chain SonicWall SMA1000 Flaws for Unauthenticated Root RCE
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Thu, 18 Dec 2025 01:43:11 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #CVE_2025_23006 #CVE_2025_40602 #Patch Update #privilege escalation #rce #Remote Code Execution #root access #Secure Access Gateway #SMA1000 #SonicWall
Daily CyberSecurity
Zero-Day Warning: Hackers Chain SonicWall SMA1000 Flaws for Unauthenticated Root RCE
SonicWall warns of zero-day attacks chaining CVE-2025-40602 and CVE-2025-23006 to gain unauthenticated root access on SMA1000 appliances. Patch now!
14 views
Daily Writeups
⤷ Title: Academic Ambush: How the Forum Troll APT Hijacks Scholars’ Systems via Fake Plagiarism Reports
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Thu, 18 Dec 2025 00:44:58 +0000
════════════════════════
⌗ Tags: #Cyber Security #Malware #Academic Espionage #APT #COM hijacking #Forum Troll #kaspersky #malware #phishing #Russian Research #social engineering #Tuoni Framework
Daily CyberSecurity
Academic Ambush: How the Forum Troll APT Hijacks Scholars' Systems via Fake Plagiarism Reports
The Forum Troll APT is targeting Russian scholars with highly personalized phishing lures and the Tuoni framework disguised as plagiarism reports.
12 views
Daily Writeups
⤷ Title: Locked Out of the Cloud: Hackers Use AWS Termination Protection to Hijack ECS for Unstoppable Crypto Mining
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Thu, 18 Dec 2025 00:42:31 +0000
════════════════════════
⌗ Tags: #Cybercriminals #Amazon ECS #Amazon GuardDuty #AWS #AWS Lambda #Cloud Security #Cryptojacking #EC2 #IAM Security #persistence #Termination Protection
Daily CyberSecurity
Locked Out of the Cloud: Hackers Use AWS Termination Protection to Hijack ECS for Unstoppable Crypto Mining
Hackers are weaponizing AWS termination protection to lock defenders out while they mine crypto on hijacked ECS/EC2 resources using a malicious Docker image.
15 views
Daily Writeups
⤷ Title: Blurred Deception: Russian APT Targets Transnistria and NATO with High-Pressure Phishing Lures
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Thu, 18 Dec 2025 00:37:04 +0000
════════════════════════
⌗ Tags: #Cyber Security #Credential Harvesting #CSS Blur #HTML Malware #NATO #phishing #Russian APT #social engineering #StrikeReady Labs #Transnistria
Daily CyberSecurity
Blurred Deception: Russian APT Targets Transnistria and NATO with High-Pressure Phishing Lures
A Russian APT is targeting Transnistria and NATO entities using blurred HTML attachments to harvest credentials. The 2025 campaign mimics official presidential decrees.
15 views
Daily Writeups
⤷ Title: “Better Auth” Framework Alert: The Double-Slash Trick That Bypasses Security Controls
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Thu, 18 Dec 2025 00:33:26 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #access control bypass #Better Auth #CVSS 8.6 #javascript #Path Normalization #Proxy Security #Rate Limit Evasion #rou3 #TypeScript #Web Security
Daily CyberSecurity
"Better Auth" Framework Alert: The Double-Slash Trick That Bypasses Security Controls
A normalization flaw in Better Auth's router allows attackers to bypass access controls and rate limits using simple double-slash URLs.
26 views
Daily Writeups
⤷ Title: Ink Dragon’s Global Mesh: How Chinese Spies Turn Compromised Government Servers into C2 Relay Nodes
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Thu, 18 Dec 2025 00:27:49 +0000
════════════════════════
⌗ Tags: #Cyber Security #Malware #APT41 #ASP.NET #Check Point Research #cyber_espionage #Earth Alux #IIS Listener #Ink Dragon #Microsoft Graph API #Relay Network #ShadowPad
Daily CyberSecurity
Ink Dragon’s Global Mesh: How Chinese Spies Turn Compromised Government Servers into C2 Relay Nodes
Ink Dragon is weaponizing government servers in Europe using a relay-centric mesh. By hijacking IIS servers, they mask C2 traffic across global networks.
19 views
Daily Writeups
⤷ Title: CVE-2025-46295 (CVSS 9.8): Critical Apache Commons Text Flaw Risks Total Server Takeover
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Thu, 18 Dec 2025 00:22:55 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #Apache Commons Text #CVE_2025_46295 #FileMaker Server #Java security #Patch Update #rce #Remote Code Execution #String Interpolation
Daily CyberSecurity
CVE-2025-46295 (CVSS 9.8): Critical Apache Commons Text Flaw Risks Total Server Takeover
A critical RCE flaw (CVSS 9.8) in Apache Commons Text mirrors Log4Shell, allowing server takeover. FileMaker Server users must update to v22.0.4 now.
13 views
Daily Writeups
⤷ Title: RTO Challan Scam: How a Fake Traffic Ticket and a Malicious VPN Can Drain Your Bank Account
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Thu, 18 Dec 2025 00:17:28 +0000
════════════════════════
⌗ Tags: #Cybercriminals #Aadhaar Theft #Android Malware #Banking Trojan #identity theft #India #Mobile Fraud #RTO Challan #UPI Fraud #VPN Tunneling #WhatsApp Scam
Daily CyberSecurity
RTO Challan Scam: How a Fake Traffic Ticket and a Malicious VPN Can Drain Your Bank Account
RTO Challan malware hijacks Android devices in India using a fake traffic ticket lure, a malicious VPN, and SMS interception to steal UPI PINs and Aadhaar data.
15 views
Daily Writeups
⤷ Title: Node.js Alert: systeminformation Flaw Risks Windows RCE for 16M+ Monthly Users
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Thu, 18 Dec 2025 00:12:11 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #Command Injection #CVE_2025_68154 #cybersecurity #Node.js #npm #powershell #rce #systeminformation #windows
Daily CyberSecurity
Node.js Alert: systeminformation Flaw Risks Windows RCE for 16M+ Monthly Users
A critical OS Command Injection (CVE-2025-68154) in the systeminformation Node.js library risks RCE on Windows. Affects 16M+ users. Upgrade to v5.27.14.
12 views
Daily Writeups
⤷ Title: The $10B Pivot: OpenAI in Talks for Massive Amazon Funding—But There’s a Silicon Catch
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Thu, 18 Dec 2025 00:10:52 +0000
════════════════════════
⌗ Tags: #Technology #AI Infrastructure #Amazon #AWS #Cloud Computing #Inferentia #Microsoft #nvidia #OpenAI #Sam Altman #Silicon War #Trainium #Venture Capital
Daily CyberSecurity
The $10B Pivot: OpenAI in Talks for Massive Amazon Funding—But There’s a Silicon Catch
OpenAI eyes a $10B+ investment from Amazon, but the deal requires a major shift: switching from NVIDIA GPUs to Amazon’s custom Trainium AI chips.
12 views
Daily Writeups
⤷ Title: The Internet Rewired: Cloudflare 2025 Review Unveils the AI Bot War and a 19% Traffic Surge
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Thu, 18 Dec 2025 00:08:11 +0000
════════════════════════
⌗ Tags: #Cybercriminals #2025 Year in Review #AI Bots #Cloudflare Radar #cybersecurity #DDoS attacks #Googlebot #Internet Outages #Matthew Prince #Post_Quantum Cryptography
Daily CyberSecurity
The Internet Rewired: Cloudflare 2025 Review Unveils the AI Bot War and a 19% Traffic Surge
Cloudflare’s 2025 report reveals a 19% traffic spike, Googlebot’s dominance in the "AI bot war," and the rise of post-quantum encryption for 52% of users.
15 views