Daily Writeups
@Daily_Writeups
4.01K subscribers
4 photos
136K links
Daily Bug Bounty / Cybersecurity Writeups
Source Code : https://github.com/Spix0r/writeup-miner
Download Telegram
About
Blog
Apps
Platform
Join
Daily Writeups
4.01K subscribers
Daily Writeups
⤷ Title: In Mid-December 2025, Hackers Stole Paid Members’ Pornhub Browsing and Intimate Data
════════════════════════
𐀪 Author: David SEHYEON Baek
════════════════════════
ⴵ Time: Mon, 22 Dec 2025 20:31:35 GMT
════════════════════════
⌗ Tags: #cybercrime #cybersecurity #hacker #pornhub #hacking
Medium
In Mid-December 2025, Hackers Stole Paid Members’ Pornhub Browsing and Intimate Data
In Mid-December 2025, Hackers Stole Paid Members’ Pornhub Browsing and Intimate Data The 2025 Pornhub Data Breach and the Collapse of Digital Anonymity The December 2025 security incident involving …
30 views
Daily Writeups
⤷ Title: Runers — Write-Up (The Hackers Labs)
════════════════════════
𐀪 Author: ManuM0re
════════════════════════
ⴵ Time: Mon, 22 Dec 2025 21:20:22 GMT
════════════════════════
⌗ Tags: #thehackerslabs #cybersecurity #linux #penetration_testing
Medium
Runers — Write-Up (The Hackers Labs)
En este write-up se documenta la resolución paso a paso de la máquina Runers de The Hackers Labs, clasificada como dificultad Easy…
32 views
Daily Writeups
⤷ Title: TryHackMe: Advent of Cyber 2025 — Day 22 Walkthrough
════════════════════════
𐀪 Author: Inyanji Lynnette
════════════════════════
ⴵ Time: Mon, 22 Dec 2025 20:09:33 GMT
════════════════════════
⌗ Tags: #rita #c2_detection #tryhackme #advent_of_cyber_2025 #zeek
Medium
TryHackMe: Advent of Cyber 2025 — Day 22 Walkthrough
C2 Detection — Command & Carol
31 views
Daily Writeups
⤷ Title: Hack The Box University CTF 2025: Tinsel Trouble
════════════════════════
𐀪 Author: Juan Pablo Morales
════════════════════════
ⴵ Time: Mon, 22 Dec 2025 20:19:17 GMT
════════════════════════
⌗ Tags: #cybersecurity #coding #hackthebox_writeup #hackthebox #ctf_writeup
Medium
Hack The Box University CTF 2025: Tinsel Trouble
Hello everyone! 👋
31 views
Daily Writeups
⤷ Title: Most AI Startups Are Just Thin Wrappers Around APIs
════════════════════════
𐀪 Author: Splicer Scorn: Lugubrious, Loquatious, Volatile...
════════════════════════
ⴵ Time: Mon, 22 Dec 2025 23:02:13 GMT
════════════════════════
⌗ Tags: #programming #ai #api #hacking #cyber
Medium
Most AI Startups Are Just Thin Wrappers Around APIs
There is a quiet pattern you start to notice once you have been around enough demo days, launch threads, and breathless Medium posts…
32 views
Daily Writeups
⤷ Title: HackTheBox: Soulmate Writeup
════════════════════════
𐀪 Author: Rahaliashraf
════════════════════════
ⴵ Time: Mon, 22 Dec 2025 22:33:03 GMT
════════════════════════
⌗ Tags: #ctf #ctf_writeup #hacking #cybersecurity #hackthebox
24 views
Daily Writeups
⤷ Title: Advent of Cyber 2025 Day 22 | TryHackMe | C2 Detection - Command & Carol | WriteUp
════════════════════════
𐀪 Author: Axoloth
════════════════════════
ⴵ Time: Mon, 22 Dec 2025 22:51:04 GMT
════════════════════════
⌗ Tags: #tryhackme_walkthrough #tryhackme_writeup #tryhackme #cyber_security_awareness #cybersecurity
33 views
Daily Writeups
⤷ Title: University CTF 2025: Tinsel Trouble experience (and writeups)
════════════════════════
𐀪 Author: Maksim Hayder
════════════════════════
ⴵ Time: Mon, 22 Dec 2025 23:23:45 GMT
════════════════════════
⌗ Tags: #ctf_writeup #hackthebox #ctf #hackthebox_writeup #htb_writeup
Medium
University CTF 2025: Tinsel Trouble experience (and writeups)
The University CTF 2025: Tinsel Trouble, mainly for University students/teams event lasted from December 19th-21st 2025.
32 views
Daily Writeups
⤷ Title: Hack The Box University CTF 2025: Tinsel Trouble - Coding Challenges
════════════════════════
𐀪 Author: Juan Pablo Morales
════════════════════════
ⴵ Time: Mon, 22 Dec 2025 20:19:17 GMT
════════════════════════
⌗ Tags: #cybersecurity #coding #hackthebox_writeup #hackthebox #ctf_writeup
Medium
Hack The Box University CTF 2025: Tinsel Trouble
Hello everyone! 👋
41 views
Daily Writeups
⤷ Title: Building Your First Hacking Lab: A Step-by-Step Guide to VirtualBox and Kali Linux
════════════════════════
𐀪 Author: Tonia Taiwo
════════════════════════
ⴵ Time: Mon, 22 Dec 2025 22:45:01 GMT
════════════════════════
⌗ Tags: #free_cyber_security #cybersecurity #ethical_hacking #cybersecurity_awareness #cybersecurity_training
Medium
Building Your First Hacking Lab: A Step-by-Step Guide to VirtualBox and Kali Linux
Your journey into cybersecurity starts with a safe place to break things.
45 views
Daily Writeups
⤷ Title: Anna’s Archive Claims 300TB Spotify Mirror, Forcing an Investigation Into a Massive Music Data Leak
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Tue, 23 Dec 2025 01:53:52 +0000
════════════════════════
⌗ Tags: #Data Leak #AI Training Data #Anna’s Archive #copyright #data leak #DRM Bypass #Music Piracy #Spotify #Streaming Platforms
Daily CyberSecurity
Anna’s Archive Claims 300TB Spotify Mirror, Forcing an Investigation Into a Massive Music Data Leak
The shadow library Anna’s Archive has claimed that it has carried out a large-scale “mirror” of Spotify’s music catalog and intends to distribute it via torrents totaling roughly 300 terabytes. Sp…
39 views
Daily Writeups
⤷ Title: Critical Unauthenticated MongoDB Flaw Leaks Sensitive Data via zlib Compression
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Tue, 23 Dec 2025 00:50:15 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #CVE_2025_14847 #database security #Heap Leak #Information Disclosure #Memory Leak #mongodb #NoSQL Security #Patch Alert #unauthenticated exploit #zlib
Daily CyberSecurity
Critical Unauthenticated MongoDB Flaw Leaks Sensitive Data via zlib Compression
A critical vulnerability was disclosed in MongoDB, one of the world’s most popular NoSQL database platforms. The security flaw, tracked as CVE-2025-14847, allows attackers to siphon sensitiv…
30 views
Daily Writeups
⤷ Title: The 3-Million Email Siege: Inside Scripted Sparrow’s Global Industrialized BEC Machine
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Tue, 23 Dec 2025 00:46:56 +0000
════════════════════════
⌗ Tags: #Cybercriminals #Automated Cyberattacks #BEC #business email compromise #Email Security #Executive Impersonation #Finance Fraud #Fortra FIRE #phishing #Scripted Sparrow #social engineering
Daily CyberSecurity
The 3-Million Email Siege: Inside Scripted Sparrow’s Global Industrialized BEC Machine
A massive, globally distributed cybercriminal collective is aggressively targeting corporate finance departments with a highly automated Business Email Compromise (BEC) campaign. A new report by F…
22 views
Daily Writeups
⤷ Title: A Desperate Cartel: Inside the Unlikely Alliance of Qilin, DragonForce, and a Fading LockBit
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Tue, 23 Dec 2025 00:43:35 +0000
════════════════════════
⌗ Tags: #Cybercriminals #cyber_espionage #Cybercrime Cartel #data extortion #DragonForce #LockBit #Operation Cronos #Qilin #RaaS #ransomware #Yarix Intelligence
Daily CyberSecurity
A Desperate Cartel: Inside the Unlikely Alliance of Qilin, DragonForce, and a Fading LockBit
In a digital underworld increasingly fractured by law enforcement takedowns and eroding trust, three of the most notorious ransomware groups have allegedly joined forces. A new report by the Yarix…
19 views
Daily Writeups
⤷ Title: Iranian “Prince of Persia” APT Resurfaces with Telegram-Controlled Stealth Malware
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Tue, 23 Dec 2025 00:38:30 +0000
════════════════════════
⌗ Tags: #Cyber Security #Malware #cyber_espionage #DGA #Foudre v34 #Infy #Iranian APT #Malware_as_a_Service #Prince of Persia #SafeBreach #Telegram C2 #Tonnerre v50
Daily CyberSecurity
Iranian “Prince of Persia” APT Resurfaces with Telegram-Controlled Stealth Malware
After years of radio silence that led many to believe they had disbanded, one of Iran’s most persistent state-sponsored threat groups has resurfaced with a revamped arsenal. A new investigat…
21 views
Daily Writeups
⤷ Title: “Purchase Order” Deception: Sophisticated Loader Targets Manufacturing Giants in Italy, Finland, and Saudi Arabia
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Tue, 23 Dec 2025 00:32:10 +0000
════════════════════════
⌗ Tags: #Cybercriminals #Cyble #Government Cyberattacks #Malware_as_a_Service #Manufacturing Security #PureLog Stealer #Remcos RAT #steganography #TaskScheduler #UAC bypass #Unified Commodity Loader
Daily CyberSecurity
“Purchase Order” Deception: Sophisticated Loader Targets Manufacturing Giants in Italy, Finland, and Saudi Arabia
A highly sophisticated cyber-espionage campaign is indiscriminately targeting the manufacturing and government sectors across Europe and the Middle East, using a “Swiss Army Knife” sty…
26 views
Daily Writeups
⤷ Title: Identity Theft in M-Files: High-Severity Flaw Lets Insiders Hijack User Accounts and Access Sensitive Data
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Tue, 23 Dec 2025 00:26:20 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #CVE_2025_13008 #CVE_2025_14267 #cybersecurity #Document Management #identity theft #Information Disclosure #M_Files #M_Files Server #Patch Update #Session Hijacking
Daily CyberSecurity
Identity Theft in M-Files: High-Severity Flaw Lets Insiders Hijack User Accounts and Access Sensitive Data
M-Files, the intelligent information management platform used by enterprises to organize their documents, has issued a security advisory addressing two distinct vulnerabilities. The most critical …
34 views
Daily Writeups
⤷ Title: “React2Shell” Exploited: New EtherRAT Malware Hunts for Crypto via Node.js
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Tue, 23 Dec 2025 00:21:31 +0000
════════════════════════
⌗ Tags: #Malware #ASEC #Blockchain C2 #Cryptocurrency Theft #CVE_2025_55182 #cyber_espionage #Ethereum #EtherRAT #Node.js #React2Shell #Remote Code Execution
Daily CyberSecurity
“React2Shell” Exploited: New EtherRAT Malware Hunts for Crypto via Node.js
A new, sophisticated malware campaign is sweeping across the internet, leveraging a recently disclosed vulnerability to install cryptocurrency-stealing software on unsuspecting servers. The AhnLab…
25 views
Daily Writeups
⤷ Title: AI-Generated Decoys & XLL Stealth: Inside the New “EchoGather” Cyber Espionage Campaign
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Tue, 23 Dec 2025 00:18:37 +0000
════════════════════════
⌗ Tags: #Cybercriminals #AI Phishing #backdoor #CVE_2025_8088 #cyber_espionage #EchoGather #GOFFEE #Intezer #Paper Werewolf #russia #WinRAR #XLL Malware
Daily CyberSecurity
AI-Generated Decoys & XLL Stealth: Inside the New “EchoGather” Cyber Espionage Campaign
A cyber-espionage group known for hunting Russian organizations has upgraded its arsenal, deploying malicious Excel add-ins to slip past defenses and install a new backdoor. A new report from Inte…
21 views
Daily Writeups
⤷ Title: Wonderland Unleashed: New Android “Dropper” Malware Hijacks Telegram to Drain Bank Accounts
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Tue, 23 Dec 2025 00:11:27 +0000
════════════════════════
⌗ Tags: #Malware #Android security #Banking Trojan #Cybercrime #Dropper Malware #Group_IB #mobile security #SMS Stealer #Telegram bot #Uzbekistan #Wonderland Malware
Daily CyberSecurity
Wonderland Unleashed: New Android “Dropper” Malware Hijacks Telegram to Drain Bank Accounts
A sophisticated wave of mobile malware is sweeping through Central Asia, marking a dangerous evolution in how cybercriminals target Android users. A new in-depth analysis by Group-IB reveals that …
24 views
Daily Writeups
⤷ Title: Zero-Day Alert: Linksys Auth Bypass Lets Hackers Hijack Routers Without Passwords
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Tue, 23 Dec 2025 00:06:21 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #Authentication Bypass #CSIT #CVE_2025_52692 #IoT security #Linksys E9450_SG #Network Safety #router security #Singtel #Telnet #zero_day
Daily CyberSecurity
Zero-Day Alert: Linksys Auth Bypass Lets Hackers Hijack Routers Without Passwords
A popular Wi-Fi 6 router found in thousands of homes has been blown wide open by security researchers, revealing a critical flaw that allows attackers to bypass login screens and seize full contro…
28 views