Daily Writeups
@Daily_Writeups
4.05K subscribers
4 photos
137K links
Daily Bug Bounty / Cybersecurity Writeups
Source Code : https://github.com/Spix0r/writeup-miner
Download Telegram
About
Blog
Apps
Platform
Join
Daily Writeups
4.05K subscribers
Daily Writeups
⤷ Title: Perimeter Breach: Critical Zero-Day CVE-2025-14733 Exploited to Hijack WatchGuard Firewalls
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Mon, 22 Dec 2025 03:17:10 +0000
════════════════════════
⌗ Tags: #Vulnerability #CISA KEV #CVE_2025_14733 #Firebox #Fireware OS #iked #IKEv2 VPN #network security #Patch Management #RCE #WatchGuard #zero_day
Penetration Testing Tools
Perimeter Breach: Critical Zero-Day CVE-2025-14733 Exploited to Hijack WatchGuard Firewalls
WatchGuard has warned customers of a critical vulnerability in its Firebox firewalls that is already being actively exploited
15 views
Daily Writeups
⤷ Title: Critical UEFI Flaw Bypasses All Early-Boot Protections
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Mon, 22 Dec 2025 03:15:16 +0000
════════════════════════
⌗ Tags: #Vulnerability #BIOS Update #CVE_2025_11901 #CVE_2025_14302 #DMA Attack #Hardware Root of Trust #IOMMU #Motherboard Security #Riot Games #UEFI #Vanguard
Penetration Testing Tools
Critical UEFI Flaw Bypasses All Early-Boot Protections
Researchers have uncovered a vulnerability in the UEFI firmware implementations used on motherboards from several major manufacturers, including
11 views
Daily Writeups
⤷ Title: The Single-Step Sniper: Bypassing EDR Hooks with TrapFlagForSyscalling
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Mon, 22 Dec 2025 02:34:50 +0000
════════════════════════
⌗ Tags: #Open Source Tool #EDR Bypass #EFLAGS #Malware Development #NtAllocateVirtualMemory #red teaming #Single_Step Exception #Syscall Tampering #Trap Flag #User_land Hooking #VEH
Penetration Testing Tools
The Single-Step Sniper: Bypassing EDR Hooks with TrapFlagForSyscalling
Master TrapFlagForSyscalling: Use the CPU’s Trap Flag and VEH to hijack whitelisted syscalls and bypass EDR user-land hooks with stealth.
12 views
Daily Writeups
⤷ Title: The Extortion Deficit: Ransomware Payments Plunge by 33% as Victims Refuse to Pay
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Mon, 22 Dec 2025 02:06:41 +0000
════════════════════════
⌗ Tags: #Malware #AML Act 2020 #BlackCat #Cybersecurity 2024 #Financial Crime #FinCEN #Healthcare Data #LockBit #Manufacturing Security #ransomware #U.S. Treasury
Penetration Testing Tools
The Extortion Deficit: Ransomware Payments Plunge by 33% as Victims Refuse to Pay
The U.S. Treasury is cautiously suggesting that the ransomware market may be beginning to cool. In a new
12 views
Daily Writeups
⤷ Title: Shared Shadows: Hunt.io Uncovers the Unified Staging Grounds of Lazarus and Kimsuky
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Mon, 22 Dec 2025 02:05:44 +0000
════════════════════════
⌗ Tags: #Cybercriminals #Acronis TRU #Badcall #BLINDINGCAN #Cyber Espionage #DPRK #Fast Reverse Proxy (FRP) #HttpTroy #Hunt.io #Kimsuky #Lazarus Group #Malware Infrastructure
Penetration Testing Tools
Shared Shadows: Hunt.io Uncovers the Unified Staging Grounds of Lazarus and Kimsuky
Groups operating in the interests of the DPRK continue to aggressively expand their infrastructure for cyber espionage, financial
11 views
Daily Writeups
⤷ Title: The Accounting of Intrusion: How the “Episode 4” Leak Exposed APT35’s Bureaucratic Machine
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Mon, 22 Dec 2025 02:05:12 +0000
════════════════════════
⌗ Tags: #Cyber Security #APT35 #Charming Kitten #Cryptomus #Cyber Espionage #cyber warfare #DomainTools #Infrastructure Management #Iran #IRGC #Moses Staff #Nariman Gharib
Penetration Testing Tools
The Accounting of Intrusion: How the "Episode 4" Leak Exposed APT35’s Bureaucratic Machine
The leak of a fourth episode linked to the APT35 hacking group—also known as Charming Kitten—dramatically reshapes perceptions
16 views
Daily Writeups
⤷ Title: Onions & Audit Trails: How the Tor Project is Decoupling from Government Funding
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Mon, 22 Dec 2025 02:02:00 +0000
════════════════════════
⌗ Tags: #Technology #Arti #Censorship Circumvention #Financial Audit #open source #privacy #Rust #Tails #Tor Project #Transparency Report #U.S. State Department
Penetration Testing Tools
Onions & Audit Trails: How the Tor Project is Decoupling from Government Funding
The Tor Project has published its Form 990 tax filings and an independent audit of its financial statements
20 views
Daily Writeups
⤷ Title: The $100M Stalker: Nefilim Ransomware Affiliate Pleads Guilty as DOJ Hunts Fugitive Leader
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Mon, 22 Dec 2025 03:40:52 +0000
════════════════════════
⌗ Tags: #Cybercriminals #Artem Stryzhak #Big Game Hunting #Corporate Leaks #Cybercrime #DOJ #Extortion #fbi #Nefilim #ransomware #Spain Extradition #Volodymyr Tymoshchuk
Daily CyberSecurity
The $100M Stalker: Nefilim Ransomware Affiliate Pleads Guilty as DOJ Hunts Fugitive Leader
Nefilim's Artem Stryzhak pleads guilty to targeting $100M+ firms. As he faces 10 years, the DOJ offers an $11 million reward for leader Volodymyr Tymoshchuk.
13 views
Daily Writeups
⤷ Title: A Tiny Lifeline: Google Pushes Mandatory Gemini Upgrade to March 2026
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Mon, 22 Dec 2025 03:07:27 +0000
════════════════════════
⌗ Tags: #Technology #AI Transition #Android 10 #Android Auto #Feature Parity #Google Assistant #Google Gemini #March 2026 #Pixel 10 #Smart Home #Wear OS
Daily CyberSecurity
A Tiny Lifeline: Google Pushes Mandatory Gemini Upgrade to March 2026
Google delays the death of Assistant, pushing the mandatory Gemini upgrade to March 2026 to fix reliability issues with timers, alarms, and smart home.
11 views
Daily Writeups
⤷ Title: Netflix’s Aurora Leap: How a Cloud-Native Shift Delivered 75% Faster Performance and 28% Lower Costs
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Mon, 22 Dec 2025 03:04:03 +0000
════════════════════════
⌗ Tags: #Technology
Daily CyberSecurity
Netflix’s Aurora Leap: How a Cloud-Native Shift Delivered 75% Faster Performance and 28% Lower Costs
Netflix migrates its databases to Amazon Aurora, achieving 75% faster performance and 28% lower costs while boosting reliability and scalability.
9 views
Daily Writeups
⤷ Title: The Skill Tree Revolution: Why LinkedIn’s CEO Says Your 5-Year Plan is Dead
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Mon, 22 Dec 2025 02:57:14 +0000
════════════════════════
⌗ Tags: #Technology #Agile Career #AI Workplace #Career Resilience #Gen Z #Growth Hunting #LinkedIn #Reskilling 2030 #Ryan Roslansky #Skill Sprints #World Economic Forum
Daily CyberSecurity
The Skill Tree Revolution: Why LinkedIn’s CEO Says Your 5-Year Plan is Dead
LinkedIn CEO Ryan Roslansky declares the 5-year plan obsolete. In the AI era, success belongs to "Growth Hunters" who master short-term skill sprints.
20 views
Daily Writeups
⤷ Title: The 2nm Revolution: Samsung Unveils the Exynos 2600 with All–Big-Core Power & HPB Cooling
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Mon, 22 Dec 2025 02:53:38 +0000
════════════════════════
⌗ Tags: #Technology #2nm GAA #All_Big_Core #Armv9.3 #Galaxy S26 #Generative AI NPU #Heat Path Block #HPB Cooling #Ray Tracing #Samsung Exynos 2600 #Xclipse 960
Daily CyberSecurity
The 2nm Revolution: Samsung Unveils the Exynos 2600 with All–Big-Core Power & HPB Cooling
Samsung’s 2nm Exynos 2600 debuts with an all-big-core design and Heat Path Block cooling, aiming to end thermal throttling for the Galaxy S26.
17 views
Daily Writeups
⤷ Title: Hang Up the Phone: Microsoft Retires Telephone Activation for an Online Portal
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Mon, 22 Dec 2025 02:49:32 +0000
════════════════════════
⌗ Tags: #Technology #Activation ID #CID #IID #MAK Key #Microsoft #Office 2024 #Offline Activation #Product Activation Portal #tech support #Volume Licensing #Windows 10 #Windows 11
Daily CyberSecurity
Hang Up the Phone: Microsoft Retires Telephone Activation for an Online Portal
Microsoft has moved its automated telephone activation to a new Online Product Activation Portal for all perpetual licenses. Offline IID/CID still supported.
21 views
Daily Writeups
⤷ Title: The End of “Robotic” AI: OpenAI Unlocks Sliders to Control ChatGPT’s Warmth and Tone
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Mon, 22 Dec 2025 02:45:15 +0000
════════════════════════
⌗ Tags: #Technology #AI Warmth #ChatGPT #Custom Instructions #Emoji Control #GPT_5.2 #Markdown Formatting #OpenAI #Personalization #Tone Sliders #User Experience
Daily CyberSecurity
The End of "Robotic" AI: OpenAI Unlocks Sliders to Control ChatGPT’s Warmth and Tone
Control the "vibe" of your AI: OpenAI rolls out sliders for warmth, enthusiasm, and emoji usage, letting you fix ChatGPT’s tone once and for all.
15 views
Daily Writeups
⤷ Title: Welcome back!
════════════════════════
𐀪 Author: StrangeRwhite
════════════════════════
ⴵ Time: Mon, 22 Dec 2025 02:32:42 GMT
════════════════════════
⌗ Tags: #penetration_testing #bug_bounty_tips #hacking #cybersecurity #bug_bounty
Medium
How I Found 7 Logical Bugs in the com-olho CTF Feature
And sorry, I don’t have any proof images this time (as always), because the platform com-olho blocked me. Yeah — they just blocked me. All…
25 views
Daily Writeups
⤷ Title: How hackers intercept your mobile app traffic
════════════════════════
𐀪 Author: Buhushika Kumarage
════════════════════════
ⴵ Time: Mon, 22 Dec 2025 03:34:34 GMT
════════════════════════
⌗ Tags: #mobile_development #ios_app_development #hacking #cybersecurity #android_app_development
Medium
How hackers intercept your mobile app traffic
When establishing communication between the server and the client, it is often overlooked how easily the traffic can be intercepted between…
27 views
Daily Writeups
⤷ Title: Why Most Developers Accidentally Create Security Holes
════════════════════════
𐀪 Author: Hania Khan
════════════════════════
ⴵ Time: Mon, 22 Dec 2025 02:12:23 GMT
════════════════════════
⌗ Tags: #cybersecurity #secure_code #cyber_security_awareness #infosec #technology
Medium
Why Most Developers Accidentally Create Security Holes
I pushed a secret API key to GitHub. 3,000 people downloaded it before I noticed.
36 views
Daily Writeups
⤷ Title: Blackhat Hacking Languages Explained (Beginner to Expert)
════════════════════════
𐀪 Author: Shahzaib
════════════════════════
ⴵ Time: Mon, 22 Dec 2025 02:12:29 GMT
════════════════════════
⌗ Tags: #programming #learn_to_code #cybersecurity #ethical_hacking #level_up_coding
Medium
Blackhat Hacking Languages Explained (Beginner to Expert)
From Script Kiddie to Toolsmith: The Code That Actually Powers Real Hack
43 views
Daily Writeups
⤷ Title: Execution After Redirection (EAR): The Silent High-Impact Bug That Lets You Bypass Logins Like…
════════════════════════
𐀪 Author: CRAC Learning
════════════════════════
ⴵ Time: Mon, 22 Dec 2025 04:49:23 GMT
════════════════════════
⌗ Tags: #web_security #vulnerability #privilege_escalation #bug_bounty #execution
Medium
Execution After Redirection (EAR): The Silent High-Impact Bug That Lets You Bypass Logins Like…
Author: @ommishra21
33 views
Daily Writeups
⤷ Title: The Ultimate Kali Linux Bug Bounty Cheat Sheet: From Recon to Report
════════════════════════
𐀪 Author: Janhvee Laad
════════════════════════
ⴵ Time: Mon, 22 Dec 2025 04:11:18 GMT
════════════════════════
⌗ Tags: #ethical_hacking #kali_linux #bug_bounty #cybersecurity #cheatsheet
Medium
The Ultimate Kali Linux Bug Bounty Cheat Sheet: From Recon to Report
In the world of bug bounty, your tools are only as good as your methodology. This cheat sheet organizes the "chaos" of a security…
32 views
Daily Writeups
⤷ Title: Tải Tag After School Apk V2.0 Miễn Phí Cho Android
════════════════════════
𐀪 Author: Apkpuredev
════════════════════════
ⴵ Time: Mon, 22 Dec 2025 05:23:57 GMT
════════════════════════
⌗ Tags: #hacking #games #apkpure
Medium
Tải Tag After School Apk V2.0 Miễn Phí Cho Android
Tag After School là một trò chơi phiêu lưu tương tác mô phỏng cuộc sống học đường, nơi người chơi nhập vai vào một nhân vật học sinh tham…
31 views