Daily Writeups
@Daily_Writeups
3.52K subscribers
2 photos
129K links
Daily Bug Bounty / Cybersecurity Writeups
Source Code : https://github.com/Spix0r/writeup-miner
Download Telegram
About
Blog
Apps
Platform
Join
Daily Writeups
3.52K subscribers
Daily Writeups
⤷ Title: The Ad Trap Closed: DOJ Seizes Global Control Hub Behind $28M Bank Fraud
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Wed, 24 Dec 2025 02:39:41 +0000
════════════════════════
⌗ Tags: #Cybercriminals #Bank Account Takeover #Cybercrime 2025 #DOJ #Estonia #FBI #Georgia #Google Ads #IC3 #phishing #Search Engine Fraud #web3adspanels
Information Security News
The Ad Trap Closed: DOJ Seizes Global Control Hub Behind $28M Bank Fraud
U.S. law enforcement authorities have announced the seizure of a domain used in a large-scale scheme to steal bank accounts. According to the U.S. Department of Justice, the site—web3adspanels[.]o…
20 views
Daily Writeups
⤷ Title: The Admin’s Shadow: How Hackers Turned the Nezha Monitoring Tool into a Stealth RAT
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Wed, 24 Dec 2025 02:38:40 +0000
════════════════════════
⌗ Tags: #Malware #Cyber Security 2025 #Evasion #Nezha #NT AUTHORITY\SYSTEM #Ontinue #open source #post_exploitation #Qualys #RAT #RMM Abuse #Root Access
Information Security News
The Admin’s Shadow: How Hackers Turned the Nezha Monitoring Tool into a Stealth RAT
Threat actors have begun repurposing a legitimate server monitoring tool as a ready-made platform for remotely controlling systems that have already been compromised. According to the Ontinue Cybe…
18 views
Daily Writeups
⤷ Title: The Silent Sync: How the “lotusbail” npm Package Hijacks WhatsApp Accounts
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Wed, 24 Dec 2025 02:36:24 +0000
════════════════════════
⌗ Tags: #Malware #Baileys library #Cybersecurity 2025 #JavaScript #Koi Security #lotusbail #malware #npm #Session Hijacking #supply chain attack #WhatsApp
Information Security News
The Silent Sync: How the “lotusbail” npm Package Hijacks WhatsApp Accounts
A malicious package named lotusbail has been uncovered in the npm repository, masquerading as a library for working with WhatsApp Web while quietly siphoning conversations and granting attackers p…
20 views
Daily Writeups
⤷ Title: Spotify Cracks Down After Anna’s Archive Publishes Massive Music Dataset
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Wed, 24 Dec 2025 02:33:00 +0000
════════════════════════
⌗ Tags: #Data Leak #Anna’s Archive #copyright #data scraping #digital libraries #music piracy #Spotify #stream_ripping
Information Security News
Spotify Cracks Down After Anna’s Archive Publishes Massive Music Dataset
Spotify has blocked a number of accounts after the Anna’s Archive team publicly released a dataset collected from the streaming platform. According to the group, the trove comprises 86 million aud…
20 views
Daily Writeups
⤷ Title: Agent Under Fire: OpenAI Hardens ChatGPT Atlas Against “Invisible” Resignation Attacks
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Wed, 24 Dec 2025 02:30:51 +0000
════════════════════════
⌗ Tags: #Vulnerability #Adversarial Training #AI security #Browser Agent #ChatGPT Atlas #Cyber Security 2025 #OpenAI #Prompt Injection #red teaming #Reinforcement Learning
Information Security News
Agent Under Fire: OpenAI Hardens ChatGPT Atlas Against “Invisible” Resignation Attacks
OpenAI has released a security update for ChatGPT Atlas, a browser equipped with a built-in “agent mode” that can browse the web and act within it almost like a human—clicking, typing, and carryin…
16 views
Daily Writeups
⤷ Title: Linux Kernel 6.19 Slashes Latency & Boosts Legacy AMD GPUs by 30%
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Wed, 24 Dec 2025 03:11:16 +0000
════════════════════════
⌗ Tags: #Linux #AMDGPU #GCN 1.0 #GCN 1.1 #GPU Drivers #Linux Kernel 6.19 #Mesa RADV #open_source #Radeon HD 7950 #Retro Gaming #Valve #Vulkan
Daily CyberSecurity
Linux Kernel 6.19 Slashes Latency & Boosts Legacy AMD GPUs by 30%
In 2011, AMD introduced its Graphics Core Next 1.0 architecture, codenamed Southern Islands, debuting with the now-iconic Radeon HD 7970. Within this design, AMD pioneered asynchronous compute eng…
12 views
Daily Writeups
⤷ Title: Racing the Zombie: PoC Released for Linux Kernel POSIX Timer Vulnerability (CVE-2025-38352)
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Wed, 24 Dec 2025 02:52:30 +0000
════════════════════════
⌗ Tags: #Linux #Vulnerability Report #Android security #ARM 32_bit #CVE_2025_38352 #KASAN #kernel_exploitation #Linux Kernel #POSIX CPU Timers #proof_of_concept #race condition #Use_After_Free (UAF)
Daily CyberSecurity
Racing the Zombie: PoC Released for Linux Kernel POSIX Timer Vulnerability (CVE-2025-38352)
A vulnerability in the Linux kernel’s implementation of POSIX CPU timers has drawn attention following the release of a working proof-of-concept exploit. The flaw, tracked as CVE-2025-38352, is a …
18 views
Daily Writeups
⤷ Title: Search Engine “Malvertising” Ring Disrupted: DOJ Seizes Backend of $14.6 Million Bank Fraud Scheme
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Wed, 24 Dec 2025 01:47:08 +0000
════════════════════════
⌗ Tags: #Cybercriminals #Account Takeover #ATO #Bing Ads #DOJ #fbi #Financial Crime #Google Ads #Malvertising #Northern District of Georgia #Search Engine Fraud #web3adspanels.org
Daily CyberSecurity
Search Engine “Malvertising” Ring Disrupted: DOJ Seizes Backend of $14.6 Million Bank Fraud Scheme
A sprawling cybercrime operation that weaponized trusted search engines to drain millions from American bank accounts has been dismantled by federal authorities. The Department of Justice (DOJ) an…
9 views
Daily Writeups
⤷ Title: The Hard-Coded Backdoor: Critical 9.8 Severity NVIDIA Flaws Grant Total Control of AI Systems
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Wed, 24 Dec 2025 01:37:08 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #AI security #CVE_2025_33222 #CVE_2025_33223 #CVE_2025_33224 #Hard_coded Credentials #Isaac Launchable #nvidia #privilege escalation #Remote Code Execution #Robotics
Daily CyberSecurity
The Hard-Coded Backdoor: Critical 9.8 Severity NVIDIA Flaws Grant Total Control of AI Systems
NVIDIA has issued an urgent security update for its Isaac Launchable software, patching a trio of critical vulnerabilities that could allow attackers to seize total control of affected systems. Th…
15 views
Daily Writeups
⤷ Title: Critical Network Collapse: 9.8 Severity Net-SNMP Buffer Overflow Threatens Global Monitoring Systems
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Wed, 24 Dec 2025 00:40:19 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #buffer overflow #CVE_2025_68615 #Denial of Service #Infrastructure Security #Net_SNMP #network monitoring #Patch Alert #Remote Code Execution #snmptrapd #Zero Day Initiative
Daily CyberSecurity
Critical Network Collapse: 9.8 Severity Net-SNMP Buffer Overflow Threatens Global Monitoring Systems
A critical security vulnerability has been found in Net-SNMP, the ubiquitous software suite used globally for network monitoring and management. Tracked as CVE-2025-68615, the flaw carries a near-…
18 views
Daily Writeups
⤷ Title: “Casting Call” for Malware: APT37 Poses as TV Writers to Hack Targets
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Wed, 24 Dec 2025 00:35:11 +0000
════════════════════════
⌗ Tags: #Cyber Security #Malware #APT37 #Artemis Campaign #cyber_espionage #Genians Security Center #HWP Malware #North Korea #pCloud #Reaper #Ricochet Chollima #social engineering #Yandex Cloud
Daily CyberSecurity
“Casting Call” for Malware: APT37 Poses as TV Writers to Hack Targets
A notorious threat group is auditioning victims for a new cyber-espionage campaign, masquerading as television production staff to slip malware past defenses. A new report from Genians Security Ce…
14 views
Daily Writeups
⤷ Title: The Notarized Nightmare: New MacSync Stealer Bypasses Gatekeeper to Hijack Mac Devices
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Wed, 24 Dec 2025 00:28:59 +0000
════════════════════════
⌗ Tags: #Malware #Apple Notarization #Code Signing #Cyber Security #Gatekeeper Bypass #Infostealer #Jamf Threat Labs #macOS Malware #MacSync Stealer #swift #ZK_Call Messenger
Daily CyberSecurity
The Notarized Nightmare: New MacSync Stealer Bypasses Gatekeeper to Hijack Mac Devices
The cat-and-mouse game between Apple’s security protocols and malware authors has taken a stealthy turn. A new report from Jamf Threat Labs reveals that the increasingly active MacSync Steal…
9 views
Daily Writeups
⤷ Title: “Operation IconCat”: Hackers Masquerade as Security Giants to Target Israeli Firms
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Wed, 24 Dec 2025 00:23:08 +0000
════════════════════════
⌗ Tags: #Cyber Security #Check Point #cyber_espionage #Icon Spoofing #Israel #Operation IconCat #PYTRIC #RUSTRIC #SentinelOne #Seqrite Labs #UNG0801 #Western Asia #wiper malware
Daily CyberSecurity
“Operation IconCat”: Hackers Masquerade as Security Giants to Target Israeli Firms
A new and deceptive cyber-espionage campaign is targeting Israeli organizations by disguising malicious implants as trusted antivirus software updates. A new report from SEQRITE Labs’ APT Team det…
10 views
Daily Writeups
⤷ Title: APT-36 Uses Fake “WhatsApp Fraud” Advisory to Hack Government Systems
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Wed, 24 Dec 2025 00:21:15 +0000
════════════════════════
⌗ Tags: #Cyber Security #APT_36 #cyber_espionage #Cyfirma #DLL hijacking #Indian government #LNK malware #Malware Persistence #NCERT Advisory #social engineering #spear_phishing #Transparent Tribe
Daily CyberSecurity
APT-36 Uses Fake “WhatsApp Fraud” Advisory to Hack Government Systems
The sophisticated threat group APT-36 is hacking government systems by warning them about hackers. A new intelligence report from CYFIRMA exposes a targeted espionage campaign where the attackers …
13 views
Daily Writeups
⤷ Title: “Webrat” Trap: Hackers Lure Junior Security Researchers with Fake GitHub Exploits
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Wed, 24 Dec 2025 00:15:56 +0000
════════════════════════
⌗ Tags: #Malware #backdoor #CVE_2025_10294 #CVE_2025_59295 #Cybersecurity Students #Fake PoC #github #kaspersky #malware #phishing #social engineering #Webrat
Daily CyberSecurity
“Webrat” Trap: Hackers Lure Junior Security Researchers with Fake GitHub Exploits
A cunning malware campaign initially designed to trick gamers has evolved into a dangerous trap for aspiring cybersecurity professionals. A new report from Kaspersky Labs reveals that the operator…
13 views
Daily Writeups
⤷ Title: Operation PCPcat: 60,000 Next.js Servers Hijacked in Just 48 Hours
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Wed, 24 Dec 2025 00:11:28 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #Beelzebub Research #botnet #Cloud Security #CVE_2025_29927 #CVE_2025_55182 #cyber_espionage #data exfiltration #Next.js #PCPcat #rce #React #React2Shell
Daily CyberSecurity
Operation PCPcat: 60,000 Next.js Servers Hijacked in Just 48 Hours
A highly automated and ruthlessly efficient cyber-espionage campaign is tearing through the cloud infrastructure of modern web applications, leaving tens of thousands of compromised servers in its…
17 views
Daily Writeups
⤷ Title: The Final Countdown: Valve Moves Steam to 64-Bit and Sets January 2026 Cutoff
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Wed, 24 Dec 2025 00:08:11 +0000
════════════════════════
⌗ Tags: #Technology #32_bit #64_bit #Legacy Hardware #PC Gaming #security patch #software update #Steam #Valve #Windows 10 #Windows 11
Daily CyberSecurity
The Final Countdown: Valve Moves Steam to 64-Bit and Sets January 2026 Cutoff
Valve previously announced that the Steam client would undergo a full transition to 64-bit, with the 32-bit version gradually phased out. Going forward, new Steam client releases will support only…
12 views
Daily Writeups
⤷ Title: The Great Rewrite: Microsoft’s Radical 2030 Vision to Kill C/C++ with AI-Powered Rust
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Wed, 24 Dec 2025 00:06:58 +0000
════════════════════════
⌗ Tags: #Technology #AI Agents #C++ #CoreAI #Future of Software Engineering #Garen Hunt #GitHub Copilot #memory safety #Microsoft #Rust #Technical Debt #Windows Kernel
Daily CyberSecurity
The Great Rewrite: Microsoft’s Radical 2030 Vision to Kill C/C++ with AI-Powered Rust
A recent job posting from Microsoft’s engineering team appears to hint at an ambitious, sweeping transformation now underway: by 2030, Microsoft aims to eliminate all C and C++ code from its codeb…
14 views
Daily Writeups
⤷ Title: Bypassing the Bottleneck: How Microsoft’s Native NVMe Driver Delivers an 80% IOPS Surge
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Wed, 24 Dec 2025 00:03:47 +0000
════════════════════════
⌗ Tags: #Windows #Enterprise Storage #IOPS #Native NVMe #PC Performance #Registry Hack #SCSI Translation #SSD Performance #StorNVMe.sys #Windows 11 25H2 #Windows Server 2025
Daily CyberSecurity
Bypassing the Bottleneck: How Microsoft’s Native NVMe Driver Delivers an 80% IOPS Surge
Microsoft has introduced a newly developed native NVMe SSD capability in the Windows Server 2025 operating system. This feature is, in essence, an entirely new driver that bypasses the legacy SCSI…
17 views
Daily Writeups
⤷ Title: The PowerShell Pivot: MAS Roadmap Reveals End of Batch Scripting Era
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Wed, 24 Dec 2025 00:00:14 +0000
════════════════════════
⌗ Tags: #Technology #Batch Script #github #MAS #Microsoft Activation Scripts #open_source #powershell #Software Optimization #Windows 10 #Windows 11 #Windows Activation
Daily CyberSecurity
The PowerShell Pivot: MAS Roadmap Reveals End of Batch Scripting Era
The development team behind the well-known activation tool MAS recently published a blog post outlining its future roadmap. In pursuit of building the best possible Windows activation utility, the…
19 views
Daily Writeups
⤷ Title: ️‍♂️ ReconKit I Built This Recon Tool Because Manual Recon Was Killing My Time ⚙️
════════════════════════
𐀪 Author: Purushotham.R
════════════════════════
ⴵ Time: Wed, 24 Dec 2025 03:12:41 GMT
════════════════════════
⌗ Tags: #bug_bounty #cybersecurity #penetration_testing #cyber_security_tools #ethical_hacking
Medium
🕵️‍♂️ ReconKit I Built This Recon Tool Because Manual Recon Was Killing My Time 💀⚙️
Let’s be honest.
20 views