Daily Writeups
@Daily_Writeups
3.53K subscribers
2 photos
130K links
Daily Bug Bounty / Cybersecurity Writeups
Source Code : https://github.com/Spix0r/writeup-miner
Download Telegram
About
Blog
Apps
Platform
Join
Daily Writeups
3.53K subscribers
Daily Writeups
⤷ Title: Emergency Patch: Microsoft Issues Out-of-Band Fix for Broken MSMQ Infrastructure
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Thu, 25 Dec 2025 02:54:51 +0000
════════════════════════
⌗ Tags: #Windows #bug fix #Enterprise IT #IIS #KB5074976 #Microsoft #MSMQ #Out_of_Band #Patch Tuesday #Sysadmin #Windows Server #Windows Update
Information Security News
Emergency Patch: Microsoft Issues Out-of-Band Fix for Broken MSMQ Infrastructure
Microsoft has released an out-of-band update to address a Message Queuing issue that emerged after the December 2025 update. The newly issued patches apply to Windows 10 22H2 ESU, Windows 10 Enter…
18 views
Daily Writeups
⤷ Title: The AMX Lockdown: Critical KVM Bug Allows Guest VMs to Crash Linux Hosts
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Thu, 25 Dec 2025 03:11:17 +0000
════════════════════════
⌗ Tags: #Linux #Cloud Security #dos #FPU #Hypervisor #Intel AMX #kernel panic #KVM #Linux Kernel #Paolo Bonzini #red hat #virtualization #Xeon Scalable #XSAVE
Daily CyberSecurity
The AMX Lockdown: Critical KVM Bug Allows Guest VMs to Crash Linux Hosts
An unpleasant flaw surfaced in Linux—one capable of causing serious headaches for server administrators, particularly in public cloud environments. The issue arises when a KVM guest virtual machin…
29 views
Daily Writeups
⤷ Title: Beyond Pixel: Google Rebrands Magic Cue to Bring Proactive AI to All Androids
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Thu, 25 Dec 2025 02:30:54 +0000
════════════════════════
⌗ Tags: #Android #AI #android #Contextual Suggestions #Gemini Nano #google #Google Play Services #machine_learning #Magic Cue #Pixel 10 #privacy #Private Compute Core
Daily CyberSecurity
Beyond Pixel: Google Rebrands Magic Cue to Bring Proactive AI to All Androids
Earlier this year, Google introduced the Pixel 10 lineup with a headline AI feature called “Magic Cue,” designed to proactively offer services based on a user’s context. That capability now appear…
22 views
Daily Writeups
⤷ Title: The 2nm Overflow: Why AMD and Tesla are Deserting TSMC for Samsung’s Texas Fab
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Thu, 25 Dec 2025 02:24:50 +0000
════════════════════════
⌗ Tags: #Technology #18A #2nm #AMD #Apple #Digital Markets Act #Foundry #GAA #geopolitics #google #intel #nvidia #samsung #Taylor Texas #Tesla #TSMC
Daily CyberSecurity
The 2nm Overflow: Why AMD and Tesla are Deserting TSMC for Samsung’s Texas Fab
Although TSMC continues to sit unchallenged at the pinnacle of process technology—commanding an effective 100% share of advanced AI chip manufacturing—two powerful forces, capacity constraints and…
18 views
Daily Writeups
⤷ Title: Intel’s 14A/18A Super Chip: The AI “System Foundry” That Challenges TSMC
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Thu, 25 Dec 2025 02:19:24 +0000
════════════════════════
⌗ Tags: #Technology #14A #18A_PT #AI Silicon #EMIB_T #Foveros Direct 3D #HBM4 #HBM5 #Heterogeneous Integration #Intel Foundry #PowerDirect #RibbonFET 2 #TSMC CoWoS
Daily CyberSecurity
Intel’s 14A/18A Super Chip: The AI “System Foundry” That Challenges TSMC
In a bid to demonstrate that it can truly rival TSMC in the foundry arena, Intel recently released a conceptual technology video through Intel Foundry, unveiling its next-generation hybrid packagi…
18 views
Daily Writeups
⤷ Title: The End of AirPods’ Monopoly: Apple to Unlock Proximity Pairing and Smartwatch Replies
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Thu, 25 Dec 2025 02:01:03 +0000
════════════════════════
⌗ Tags: #Technology #AirPods #Apple #Apple Watch #Bluetooth #DMA #European Union #iOS 26.3 #iphone #Proximity Pairing #sony #Tech Policy 2026 #Wear OS
Daily CyberSecurity
The End of AirPods’ Monopoly: Apple to Unlock Proximity Pairing and Smartwatch Replies
To comply with the European Union’s stringent Digital Markets Act (DMA), Apple is expected to introduce two pivotal features for the EU in the upcoming iOS 26.3 update: third-party device Proximit…
23 views
Daily Writeups
⤷ Title: Hackers Revive 2020 FortiGate Flaw to Bypass 2FA
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Thu, 25 Dec 2025 01:53:12 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #2FA bypass #active directory #CVE_2020_12812 #cyber attack #firewall security #FortiGate #Fortinet #LDAP #network_security #Patch Alert #SSL VPN
Daily CyberSecurity
Hackers Revive 2020 FortiGate Flaw to Bypass 2FA
Fortinet has issued a warning regarding the active exploitation of a three-year-old vulnerability that allows attackers to bypass two-factor authentication (2FA) on FortiGate firewalls simply by c…
22 views
Daily Writeups
⤷ Title: “LotusBail” Trap: 56,000 Developers Downloaded a Fake WhatsApp API That Works perfectly—While Stealing Everything
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Thu, 25 Dec 2025 00:41:07 +0000
════════════════════════
⌗ Tags: #Malware #@whiskeysockets/baileys #backdoor #data exfiltration #JavaScript Security #KOI Security #lotusbail #malware #npm #Open Source Security #supply chain attack #WhatsApp API
Daily CyberSecurity
“LotusBail” Trap: 56,000 Developers Downloaded a Fake WhatsApp API That Works perfectly—While Stealing Everything
A new investigation by Koi Security has exposed a highly sophisticated supply chain attack lurking in the npm registry. For six months, a package named lotusbail masqueraded as a legitimate WhatsA…
25 views
Daily Writeups
⤷ Title: Evasive Panda APT Hijacks Dictionary.com and App Updates in Two-Year Spree
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Thu, 25 Dec 2025 00:37:13 +0000
════════════════════════
⌗ Tags: #Cybercriminals #AiTM #cyber_espionage #Daggerfly #DLL Sideloading #DNS Poisoning #Evasive Panda #Kaspersky Labs #malware #MgBot #Software Update Hijack #SohuVA #StormBamboo
Daily CyberSecurity
Evasive Panda APT Hijacks Dictionary.com and App Updates in Two-Year Spree
A notorious cyber-espionage group has spent the last two years conducting a highly targeted surveillance campaign, hijacking network traffic and poisoning DNS responses to deliver malware through …
20 views
Daily Writeups
⤷ Title: High-Severity Flaws in TeamViewer DEX Allow Attackers to Hijack Nomad Services
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Thu, 25 Dec 2025 00:33:09 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #1E #Code Execution #Command Injection #CVE_2025_44016 #DEX #Digital Employee Experience #Nomad Branch #Patch Tuesday #privilege escalation #TeamViewer #Windows Security
Daily CyberSecurity
High-Severity Flaws in TeamViewer DEX Allow Attackers to Hijack Nomad Services
TeamViewer has issued important security bulletins addressing multiple vulnerabilities across its Digital Employee Experience (DEX) product line (formerly 1E). The updates patch high-severity flaw…
16 views
Daily Writeups
⤷ Title: ChatGPT Atlas Under Guard: OpenAI Fortifies Browser Agent Against “Prompt Injection” Attacks
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Thu, 25 Dec 2025 00:27:15 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #Adversarial Training #Agent Mode #AI security #Browser Agent #ChatGPT Atlas #Cyber Security #LLM Safety #OpenAI #Prompt injection #red_teaming
Daily CyberSecurity
ChatGPT Atlas Under Guard: OpenAI Fortifies Browser Agent Against “Prompt Injection” Attacks
As artificial intelligence begins to browse the web on our behalf, the battleground for security is shifting from servers to our own browser tabs. OpenAI has deployed a critical security update fo…
25 views
Daily Writeups
⤷ Title: The “lc” Leak: Critical 9.3 Severity LangChain Flaw Turns Prompt Injections into Secret Theft
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Thu, 25 Dec 2025 00:22:06 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #AI Agents #CVE_2025_68664 #data exfiltration #Environment Variables #Information Disclosure #LangChain #LLM Security #Prompt injection #Python Security #Serialization Injection
Daily CyberSecurity
The “lc” Leak: Critical 9.3 Severity LangChain Flaw Turns Prompt Injections into Secret Theft
A critical vulnerability was found in LangChain, the popular open-source framework used to power Large Language Model (LLM) agents. The flaw, tracked as CVE-2025-68664, carries a severe CVSS score…
32 views
Daily Writeups
⤷ Title: Hackers Weaponize npm to Hunt Critical Infrastructure Sales Teams
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Thu, 25 Dec 2025 00:19:34 +0000
════════════════════════
⌗ Tags: #Cybercriminals #adril7123 #AiTM #Critical Infrastructure #evilginx #Interpack #K_Fair #Manufacturing Security #MicroSecure #Microsoft 365 #npm #phishing #Socket #supply chain attack
Daily CyberSecurity
Hackers Weaponize npm to Hunt Critical Infrastructure Sales Teams
A new investigation by The Socket Threat Research Team has uncovered a sophisticated spear-phishing operation that has abused the npm registry for at least five months to target critical infrastru…
25 views
Daily Writeups
⤷ Title: Zimbra Under Siege: High-Severity LFI Vulnerability Exposes Internal Files to Unauthenticated Attackers
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Thu, 25 Dec 2025 00:11:18 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #CVE_2025_67809 #CVE_2025_68645 #Email Security #hardcoded credentials #infosec #lfi #local file inclusion #Patch Update #ZCS #Zimbra
Daily CyberSecurity
Zimbra Under Siege: High-Severity LFI Vulnerability Exposes Internal Files to Unauthenticated Attackers
Administrators of the popular Zimbra Collaboration Suite (ZCS) are being urged to patch immediately after the discovery of two distinct security vulnerabilities. The most severe of the pair allows…
28 views
Daily Writeups
⤷ Title: “Contagious Interview” Goes macOS: North Korean Hackers Deploy Stealthy “DriverFixer” Stealer
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Thu, 25 Dec 2025 00:06:47 +0000
════════════════════════
⌗ Tags: #Malware #Apple Security #Contagious Interview #credential stealer #cyber_espionage #DriverFixer0428 #Dropbox C2 #macOS Malware #North Korea #Sandbox Evasion #social engineering
Daily CyberSecurity
“Contagious Interview” Goes macOS: North Korean Hackers Deploy Stealthy “DriverFixer” Stealer
A notorious North Korean cyber-espionage campaign known for targeting job seekers has expanded its arsenal with a sophisticated new tool aimed specifically at macOS users. A new analysis by securi…
24 views
Daily Writeups
⤷ Title: The Ghost in the Market: Unmasking “Fly,” the Secret Architect of the Infamous Russian Market
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Thu, 25 Dec 2025 00:00:11 +0000
════════════════════════
⌗ Tags: #Cybercriminals #Alex Aske #Blockchain Forensics #BTC_E #Cybercrime #dark web #Fly #Flyded #Infostealer #Intrinsec #RDP Access #Russian market #threat intelligence
Daily CyberSecurity
The Ghost in the Market: Unmasking “Fly,” the Secret Architect of the Infamous Russian Market
For over a decade, Russian Market has stood as a pillar of the cybercrime underground, a sprawling bazaar where stolen digital identities, browser cookies, and remote access credentials are sold b…
28 views
Daily Writeups
⤷ Title: H
════════════════════════
𐀪 Author: Beta
════════════════════════
ⴵ Time: Thu, 25 Dec 2025 02:05:12 GMT
════════════════════════
⌗ Tags: #tryhackme #aoc2025 #tryhackme_walkthrough #ctf #bug_bounty
Medium
H
https://gist.githubusercontent.com/beta0x01/efb57e7e0bda1c2e4a5950d7bbba38d7/raw/52393a49d50fc5aa322c114de36951952e43341f/thm-aoc25-flags.md…
28 views
Daily Writeups
⤷ Title: Tải Clash Of Clans Mod APK (Vô Hạn Tiền, Kim Cương, Vô Hạn Lính) V18.0.5
════════════════════════
𐀪 Author: Apkpuredev
════════════════════════
ⴵ Time: Thu, 25 Dec 2025 03:44:32 GMT
════════════════════════
⌗ Tags: #games #apkpure #hacking
Medium
Tải Clash Of Clans Mod APK (Vô Hạn Tiền, Kim Cương, Vô Hạn Lính) V18.0.5
Clash of Clans Mod APK mang đến một trải nghiệm chơi game vô cùng tự do và thú vị, cho phép bạn xây dựng đế chế hùng mạnh và tham gia vào…
22 views
Daily Writeups
⤷ Title: Getting Started with Shodan: The Google of IoT Devices
════════════════════════
𐀪 Author: Cybeague Technologies
════════════════════════
ⴵ Time: Thu, 25 Dec 2025 02:36:51 GMT
════════════════════════
⌗ Tags: #security #hacking #information_security #hacker #cybersecurity
Medium
Getting Started with Shodan: The Google of IoT Devices
Discover what’s really connected to the internet with just a few clicks!
25 views
Daily Writeups
⤷ Title: Netcraft: Uncovering Website Secrets Made Simple
════════════════════════
𐀪 Author: Cybeague Technologies
════════════════════════
ⴵ Time: Thu, 25 Dec 2025 02:35:16 GMT
════════════════════════
⌗ Tags: #information_security #hacking #cybersecurity #hacker #security
Medium
Netcraft: Uncovering Website Secrets Made Simple
Learn how to peek behind the curtain of any website in minutes!
33 views
Daily Writeups
⤷ Title: Chasing the Wizard: A Deep Dive into the “Smag Grotto” Walkthrough
════════════════════════
𐀪 Author: Justin Jude Cabodil
════════════════════════
ⴵ Time: Thu, 25 Dec 2025 03:04:00 GMT
════════════════════════
⌗ Tags: #cronjob #tryhackme #privilege_escalation #linux #crontab
Medium
Chasing the Wizard: A Deep Dive into the “Smag Grotto” Walkthrough
Following the Yellow Brick Road
39 views