Daily Writeups
@Daily_Writeups
3.56K subscribers
2 photos
130K links
Daily Bug Bounty / Cybersecurity Writeups
Source Code : https://github.com/Spix0r/writeup-miner
Download Telegram
About
Blog
Apps
Platform
Join
Daily Writeups
3.56K subscribers
Daily Writeups
⤷ Title: 21,000 SIMs Discovered: CBI Dismantles Massive “Phishing Factory” in Operation Chakra-V
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Mon, 22 Dec 2025 03:29:39 +0000
════════════════════════
⌗ Tags: #Cybercriminals #CBI #Cyber Security India #Digital Arrest #Financial Scams #KYC Violation #Lord Mahavira Services #NCR #Operation Chakra_V #phishing #SIM Box #SMS Fraud
Penetration Testing Tools
21,000 SIMs Discovered: CBI Dismantles Massive "Phishing Factory" in Operation Chakra-V
India’s Central Bureau of Investigation (CBI) has announced the arrest of three individuals suspected of orchestrating a large-scale
19 views
Daily Writeups
⤷ Title: Operation Magic Cat: Google Sues to Dismantle the Chinese “Darcula” Phishing Empire
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Mon, 22 Dec 2025 03:28:56 +0000
════════════════════════
⌗ Tags: #Cybercriminals #Google #Credit Card Fraud #Cyber Lawsuit #Darcula #google #Google Messages #Magic Cat #Phishing Toolkit #Phishing_as_a_Service #Smishing #Yucheng Chang
Penetration Testing Tools
Operation Magic Cat: Google Sues to Dismantle the Chinese "Darcula" Phishing Empire
Google has filed a lawsuit against a Chinese-speaking group it describes as a central driver behind a massive
10 views
Daily Writeups
⤷ Title: Hacking “Analytical Amnesia”: How the ATHF Framework Gives AI a Memory for Threat Hunting
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Mon, 22 Dec 2025 03:26:08 +0000
════════════════════════
⌗ Tags: #Open Source Tool #AI Agents #ATHF #Cybersecurity 2026 #Infosec Memory #LOCK Template #MITRE ATT&CK #open source #python #Threat Hunting #threat intelligence
Penetration Testing Tools
Hacking "Analytical Amnesia": How the ATHF Framework Gives AI a Memory for Threat Hunting
Stop losing context: The Agentic Threat Hunting Framework (ATHF) uses the LOCK template to build a permanent memory layer for AI-driven security teams.
9 views
Daily Writeups
⤷ Title: The Intimacy Breach: TikTok Sued for Unlawfully Tracking Users on Grindr
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Mon, 22 Dec 2025 03:21:32 +0000
════════════════════════
⌗ Tags: #Data Leak #AppsFlyer #Article 9 #Austrian DPA #Data Access Request #data privacy #GDPR #Grindr #Max Schrems #noyb #Off_App Tracking #Sensitive Data #TikTok
Penetration Testing Tools
The Intimacy Breach: TikTok Sued for Unlawfully Tracking Users on Grindr
The popular video platform TikTok has found itself at the center of a new scandal involving alleged violations
12 views
Daily Writeups
⤷ Title: The $2 Billion Heist: North Korea Smashes Crypto Theft Records in 2025
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Mon, 22 Dec 2025 03:20:26 +0000
════════════════════════
⌗ Tags: #Cybercriminals #2025 Crypto Report #Bybit Hack #Chainalysis #cryptocurrency #Cyber Espionage #DeFi #Ethereum #Lazarus Group #Money Laundering #North Korea #Tron
Penetration Testing Tools
The $2 Billion Heist: North Korea Smashes Crypto Theft Records in 2025
In 2025, hackers linked to North Korea stole a record-breaking two billion dollars in cryptocurrency—51% more than the
17 views
Daily Writeups
⤷ Title: The Pitch-Black Bot: DIG AI Emerges as the Dark Web’s Uncensored Malware Engine
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Mon, 22 Dec 2025 03:18:47 +0000
════════════════════════
⌗ Tags: #Cybercriminals #Cybercrime 2025 #Dark Web #DIG AI #Fraud GPT Alternative #Malicious AI #Malware Development #Pitch #Resecurity #Synthetic Content #Tor Network
Penetration Testing Tools
The Pitch-Black Bot: DIG AI Emerges as the Dark Web’s Uncensored Malware Engine
A new tool has surfaced on the dark web, quickly drawing the attention of security professionals—and not for
18 views
Daily Writeups
⤷ Title: Perimeter Breach: Critical Zero-Day CVE-2025-14733 Exploited to Hijack WatchGuard Firewalls
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Mon, 22 Dec 2025 03:17:10 +0000
════════════════════════
⌗ Tags: #Vulnerability #CISA KEV #CVE_2025_14733 #Firebox #Fireware OS #iked #IKEv2 VPN #network security #Patch Management #RCE #WatchGuard #zero_day
Penetration Testing Tools
Perimeter Breach: Critical Zero-Day CVE-2025-14733 Exploited to Hijack WatchGuard Firewalls
WatchGuard has warned customers of a critical vulnerability in its Firebox firewalls that is already being actively exploited
15 views
Daily Writeups
⤷ Title: Critical UEFI Flaw Bypasses All Early-Boot Protections
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Mon, 22 Dec 2025 03:15:16 +0000
════════════════════════
⌗ Tags: #Vulnerability #BIOS Update #CVE_2025_11901 #CVE_2025_14302 #DMA Attack #Hardware Root of Trust #IOMMU #Motherboard Security #Riot Games #UEFI #Vanguard
Penetration Testing Tools
Critical UEFI Flaw Bypasses All Early-Boot Protections
Researchers have uncovered a vulnerability in the UEFI firmware implementations used on motherboards from several major manufacturers, including
11 views
Daily Writeups
⤷ Title: The Single-Step Sniper: Bypassing EDR Hooks with TrapFlagForSyscalling
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Mon, 22 Dec 2025 02:34:50 +0000
════════════════════════
⌗ Tags: #Open Source Tool #EDR Bypass #EFLAGS #Malware Development #NtAllocateVirtualMemory #red teaming #Single_Step Exception #Syscall Tampering #Trap Flag #User_land Hooking #VEH
Penetration Testing Tools
The Single-Step Sniper: Bypassing EDR Hooks with TrapFlagForSyscalling
Master TrapFlagForSyscalling: Use the CPU’s Trap Flag and VEH to hijack whitelisted syscalls and bypass EDR user-land hooks with stealth.
11 views
Daily Writeups
⤷ Title: The Extortion Deficit: Ransomware Payments Plunge by 33% as Victims Refuse to Pay
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Mon, 22 Dec 2025 02:06:41 +0000
════════════════════════
⌗ Tags: #Malware #AML Act 2020 #BlackCat #Cybersecurity 2024 #Financial Crime #FinCEN #Healthcare Data #LockBit #Manufacturing Security #ransomware #U.S. Treasury
Penetration Testing Tools
The Extortion Deficit: Ransomware Payments Plunge by 33% as Victims Refuse to Pay
The U.S. Treasury is cautiously suggesting that the ransomware market may be beginning to cool. In a new
12 views
Daily Writeups
⤷ Title: Shared Shadows: Hunt.io Uncovers the Unified Staging Grounds of Lazarus and Kimsuky
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Mon, 22 Dec 2025 02:05:44 +0000
════════════════════════
⌗ Tags: #Cybercriminals #Acronis TRU #Badcall #BLINDINGCAN #Cyber Espionage #DPRK #Fast Reverse Proxy (FRP) #HttpTroy #Hunt.io #Kimsuky #Lazarus Group #Malware Infrastructure
Penetration Testing Tools
Shared Shadows: Hunt.io Uncovers the Unified Staging Grounds of Lazarus and Kimsuky
Groups operating in the interests of the DPRK continue to aggressively expand their infrastructure for cyber espionage, financial
11 views
Daily Writeups
⤷ Title: The Accounting of Intrusion: How the “Episode 4” Leak Exposed APT35’s Bureaucratic Machine
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Mon, 22 Dec 2025 02:05:12 +0000
════════════════════════
⌗ Tags: #Cyber Security #APT35 #Charming Kitten #Cryptomus #Cyber Espionage #cyber warfare #DomainTools #Infrastructure Management #Iran #IRGC #Moses Staff #Nariman Gharib
Penetration Testing Tools
The Accounting of Intrusion: How the "Episode 4" Leak Exposed APT35’s Bureaucratic Machine
The leak of a fourth episode linked to the APT35 hacking group—also known as Charming Kitten—dramatically reshapes perceptions
16 views
Daily Writeups
⤷ Title: Onions & Audit Trails: How the Tor Project is Decoupling from Government Funding
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Mon, 22 Dec 2025 02:02:00 +0000
════════════════════════
⌗ Tags: #Technology #Arti #Censorship Circumvention #Financial Audit #open source #privacy #Rust #Tails #Tor Project #Transparency Report #U.S. State Department
Penetration Testing Tools
Onions & Audit Trails: How the Tor Project is Decoupling from Government Funding
The Tor Project has published its Form 990 tax filings and an independent audit of its financial statements
20 views
Daily Writeups
⤷ Title: The $100M Stalker: Nefilim Ransomware Affiliate Pleads Guilty as DOJ Hunts Fugitive Leader
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Mon, 22 Dec 2025 03:40:52 +0000
════════════════════════
⌗ Tags: #Cybercriminals #Artem Stryzhak #Big Game Hunting #Corporate Leaks #Cybercrime #DOJ #Extortion #fbi #Nefilim #ransomware #Spain Extradition #Volodymyr Tymoshchuk
Daily CyberSecurity
The $100M Stalker: Nefilim Ransomware Affiliate Pleads Guilty as DOJ Hunts Fugitive Leader
Nefilim's Artem Stryzhak pleads guilty to targeting $100M+ firms. As he faces 10 years, the DOJ offers an $11 million reward for leader Volodymyr Tymoshchuk.
13 views
Daily Writeups
⤷ Title: A Tiny Lifeline: Google Pushes Mandatory Gemini Upgrade to March 2026
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Mon, 22 Dec 2025 03:07:27 +0000
════════════════════════
⌗ Tags: #Technology #AI Transition #Android 10 #Android Auto #Feature Parity #Google Assistant #Google Gemini #March 2026 #Pixel 10 #Smart Home #Wear OS
Daily CyberSecurity
A Tiny Lifeline: Google Pushes Mandatory Gemini Upgrade to March 2026
Google delays the death of Assistant, pushing the mandatory Gemini upgrade to March 2026 to fix reliability issues with timers, alarms, and smart home.
11 views
Daily Writeups
⤷ Title: Netflix’s Aurora Leap: How a Cloud-Native Shift Delivered 75% Faster Performance and 28% Lower Costs
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Mon, 22 Dec 2025 03:04:03 +0000
════════════════════════
⌗ Tags: #Technology
Daily CyberSecurity
Netflix’s Aurora Leap: How a Cloud-Native Shift Delivered 75% Faster Performance and 28% Lower Costs
Netflix migrates its databases to Amazon Aurora, achieving 75% faster performance and 28% lower costs while boosting reliability and scalability.
9 views
Daily Writeups
⤷ Title: The Skill Tree Revolution: Why LinkedIn’s CEO Says Your 5-Year Plan is Dead
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Mon, 22 Dec 2025 02:57:14 +0000
════════════════════════
⌗ Tags: #Technology #Agile Career #AI Workplace #Career Resilience #Gen Z #Growth Hunting #LinkedIn #Reskilling 2030 #Ryan Roslansky #Skill Sprints #World Economic Forum
Daily CyberSecurity
The Skill Tree Revolution: Why LinkedIn’s CEO Says Your 5-Year Plan is Dead
LinkedIn CEO Ryan Roslansky declares the 5-year plan obsolete. In the AI era, success belongs to "Growth Hunters" who master short-term skill sprints.
20 views
Daily Writeups
⤷ Title: The 2nm Revolution: Samsung Unveils the Exynos 2600 with All–Big-Core Power & HPB Cooling
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Mon, 22 Dec 2025 02:53:38 +0000
════════════════════════
⌗ Tags: #Technology #2nm GAA #All_Big_Core #Armv9.3 #Galaxy S26 #Generative AI NPU #Heat Path Block #HPB Cooling #Ray Tracing #Samsung Exynos 2600 #Xclipse 960
Daily CyberSecurity
The 2nm Revolution: Samsung Unveils the Exynos 2600 with All–Big-Core Power & HPB Cooling
Samsung’s 2nm Exynos 2600 debuts with an all-big-core design and Heat Path Block cooling, aiming to end thermal throttling for the Galaxy S26.
17 views
Daily Writeups
⤷ Title: Hang Up the Phone: Microsoft Retires Telephone Activation for an Online Portal
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Mon, 22 Dec 2025 02:49:32 +0000
════════════════════════
⌗ Tags: #Technology #Activation ID #CID #IID #MAK Key #Microsoft #Office 2024 #Offline Activation #Product Activation Portal #tech support #Volume Licensing #Windows 10 #Windows 11
Daily CyberSecurity
Hang Up the Phone: Microsoft Retires Telephone Activation for an Online Portal
Microsoft has moved its automated telephone activation to a new Online Product Activation Portal for all perpetual licenses. Offline IID/CID still supported.
21 views
Daily Writeups
⤷ Title: The End of “Robotic” AI: OpenAI Unlocks Sliders to Control ChatGPT’s Warmth and Tone
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Mon, 22 Dec 2025 02:45:15 +0000
════════════════════════
⌗ Tags: #Technology #AI Warmth #ChatGPT #Custom Instructions #Emoji Control #GPT_5.2 #Markdown Formatting #OpenAI #Personalization #Tone Sliders #User Experience
Daily CyberSecurity
The End of "Robotic" AI: OpenAI Unlocks Sliders to Control ChatGPT’s Warmth and Tone
Control the "vibe" of your AI: OpenAI rolls out sliders for warmth, enthusiasm, and emoji usage, letting you fix ChatGPT’s tone once and for all.
15 views
Daily Writeups
⤷ Title: Welcome back!
════════════════════════
𐀪 Author: StrangeRwhite
════════════════════════
ⴵ Time: Mon, 22 Dec 2025 02:32:42 GMT
════════════════════════
⌗ Tags: #penetration_testing #bug_bounty_tips #hacking #cybersecurity #bug_bounty
Medium
How I Found 7 Logical Bugs in the com-olho CTF Feature
And sorry, I don’t have any proof images this time (as always), because the platform com-olho blocked me. Yeah — they just blocked me. All…
25 views