Daily Writeups
@Daily_Writeups
3.54K subscribers
2 photos
130K links
Daily Bug Bounty / Cybersecurity Writeups
Source Code : https://github.com/Spix0r/writeup-miner
Download Telegram
About
Blog
Apps
Platform
Join
Daily Writeups
3.54K subscribers
Daily Writeups
⤷ Title: Hackers Revive 2020 FortiGate Flaw to Bypass 2FA
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Thu, 25 Dec 2025 01:53:12 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #2FA bypass #active directory #CVE_2020_12812 #cyber attack #firewall security #FortiGate #Fortinet #LDAP #network_security #Patch Alert #SSL VPN
Daily CyberSecurity
Hackers Revive 2020 FortiGate Flaw to Bypass 2FA
Fortinet has issued a warning regarding the active exploitation of a three-year-old vulnerability that allows attackers to bypass two-factor authentication (2FA) on FortiGate firewalls simply by c…
22 views
Daily Writeups
⤷ Title: “LotusBail” Trap: 56,000 Developers Downloaded a Fake WhatsApp API That Works perfectly—While Stealing Everything
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Thu, 25 Dec 2025 00:41:07 +0000
════════════════════════
⌗ Tags: #Malware #@whiskeysockets/baileys #backdoor #data exfiltration #JavaScript Security #KOI Security #lotusbail #malware #npm #Open Source Security #supply chain attack #WhatsApp API
Daily CyberSecurity
“LotusBail” Trap: 56,000 Developers Downloaded a Fake WhatsApp API That Works perfectly—While Stealing Everything
A new investigation by Koi Security has exposed a highly sophisticated supply chain attack lurking in the npm registry. For six months, a package named lotusbail masqueraded as a legitimate WhatsA…
25 views
Daily Writeups
⤷ Title: Evasive Panda APT Hijacks Dictionary.com and App Updates in Two-Year Spree
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Thu, 25 Dec 2025 00:37:13 +0000
════════════════════════
⌗ Tags: #Cybercriminals #AiTM #cyber_espionage #Daggerfly #DLL Sideloading #DNS Poisoning #Evasive Panda #Kaspersky Labs #malware #MgBot #Software Update Hijack #SohuVA #StormBamboo
Daily CyberSecurity
Evasive Panda APT Hijacks Dictionary.com and App Updates in Two-Year Spree
A notorious cyber-espionage group has spent the last two years conducting a highly targeted surveillance campaign, hijacking network traffic and poisoning DNS responses to deliver malware through …
20 views
Daily Writeups
⤷ Title: High-Severity Flaws in TeamViewer DEX Allow Attackers to Hijack Nomad Services
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Thu, 25 Dec 2025 00:33:09 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #1E #Code Execution #Command Injection #CVE_2025_44016 #DEX #Digital Employee Experience #Nomad Branch #Patch Tuesday #privilege escalation #TeamViewer #Windows Security
Daily CyberSecurity
High-Severity Flaws in TeamViewer DEX Allow Attackers to Hijack Nomad Services
TeamViewer has issued important security bulletins addressing multiple vulnerabilities across its Digital Employee Experience (DEX) product line (formerly 1E). The updates patch high-severity flaw…
16 views
Daily Writeups
⤷ Title: ChatGPT Atlas Under Guard: OpenAI Fortifies Browser Agent Against “Prompt Injection” Attacks
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Thu, 25 Dec 2025 00:27:15 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #Adversarial Training #Agent Mode #AI security #Browser Agent #ChatGPT Atlas #Cyber Security #LLM Safety #OpenAI #Prompt injection #red_teaming
Daily CyberSecurity
ChatGPT Atlas Under Guard: OpenAI Fortifies Browser Agent Against “Prompt Injection” Attacks
As artificial intelligence begins to browse the web on our behalf, the battleground for security is shifting from servers to our own browser tabs. OpenAI has deployed a critical security update fo…
25 views
Daily Writeups
⤷ Title: The “lc” Leak: Critical 9.3 Severity LangChain Flaw Turns Prompt Injections into Secret Theft
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Thu, 25 Dec 2025 00:22:06 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #AI Agents #CVE_2025_68664 #data exfiltration #Environment Variables #Information Disclosure #LangChain #LLM Security #Prompt injection #Python Security #Serialization Injection
Daily CyberSecurity
The “lc” Leak: Critical 9.3 Severity LangChain Flaw Turns Prompt Injections into Secret Theft
A critical vulnerability was found in LangChain, the popular open-source framework used to power Large Language Model (LLM) agents. The flaw, tracked as CVE-2025-68664, carries a severe CVSS score…
32 views
Daily Writeups
⤷ Title: Hackers Weaponize npm to Hunt Critical Infrastructure Sales Teams
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Thu, 25 Dec 2025 00:19:34 +0000
════════════════════════
⌗ Tags: #Cybercriminals #adril7123 #AiTM #Critical Infrastructure #evilginx #Interpack #K_Fair #Manufacturing Security #MicroSecure #Microsoft 365 #npm #phishing #Socket #supply chain attack
Daily CyberSecurity
Hackers Weaponize npm to Hunt Critical Infrastructure Sales Teams
A new investigation by The Socket Threat Research Team has uncovered a sophisticated spear-phishing operation that has abused the npm registry for at least five months to target critical infrastru…
25 views
Daily Writeups
⤷ Title: Zimbra Under Siege: High-Severity LFI Vulnerability Exposes Internal Files to Unauthenticated Attackers
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Thu, 25 Dec 2025 00:11:18 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #CVE_2025_67809 #CVE_2025_68645 #Email Security #hardcoded credentials #infosec #lfi #local file inclusion #Patch Update #ZCS #Zimbra
Daily CyberSecurity
Zimbra Under Siege: High-Severity LFI Vulnerability Exposes Internal Files to Unauthenticated Attackers
Administrators of the popular Zimbra Collaboration Suite (ZCS) are being urged to patch immediately after the discovery of two distinct security vulnerabilities. The most severe of the pair allows…
28 views
Daily Writeups
⤷ Title: “Contagious Interview” Goes macOS: North Korean Hackers Deploy Stealthy “DriverFixer” Stealer
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Thu, 25 Dec 2025 00:06:47 +0000
════════════════════════
⌗ Tags: #Malware #Apple Security #Contagious Interview #credential stealer #cyber_espionage #DriverFixer0428 #Dropbox C2 #macOS Malware #North Korea #Sandbox Evasion #social engineering
Daily CyberSecurity
“Contagious Interview” Goes macOS: North Korean Hackers Deploy Stealthy “DriverFixer” Stealer
A notorious North Korean cyber-espionage campaign known for targeting job seekers has expanded its arsenal with a sophisticated new tool aimed specifically at macOS users. A new analysis by securi…
24 views
Daily Writeups
⤷ Title: The Ghost in the Market: Unmasking “Fly,” the Secret Architect of the Infamous Russian Market
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Thu, 25 Dec 2025 00:00:11 +0000
════════════════════════
⌗ Tags: #Cybercriminals #Alex Aske #Blockchain Forensics #BTC_E #Cybercrime #dark web #Fly #Flyded #Infostealer #Intrinsec #RDP Access #Russian market #threat intelligence
Daily CyberSecurity
The Ghost in the Market: Unmasking “Fly,” the Secret Architect of the Infamous Russian Market
For over a decade, Russian Market has stood as a pillar of the cybercrime underground, a sprawling bazaar where stolen digital identities, browser cookies, and remote access credentials are sold b…
28 views
Daily Writeups
⤷ Title: H
════════════════════════
𐀪 Author: Beta
════════════════════════
ⴵ Time: Thu, 25 Dec 2025 02:05:12 GMT
════════════════════════
⌗ Tags: #tryhackme #aoc2025 #tryhackme_walkthrough #ctf #bug_bounty
Medium
H
https://gist.githubusercontent.com/beta0x01/efb57e7e0bda1c2e4a5950d7bbba38d7/raw/52393a49d50fc5aa322c114de36951952e43341f/thm-aoc25-flags.md…
28 views
Daily Writeups
⤷ Title: Tải Clash Of Clans Mod APK (Vô Hạn Tiền, Kim Cương, Vô Hạn Lính) V18.0.5
════════════════════════
𐀪 Author: Apkpuredev
════════════════════════
ⴵ Time: Thu, 25 Dec 2025 03:44:32 GMT
════════════════════════
⌗ Tags: #games #apkpure #hacking
Medium
Tải Clash Of Clans Mod APK (Vô Hạn Tiền, Kim Cương, Vô Hạn Lính) V18.0.5
Clash of Clans Mod APK mang đến một trải nghiệm chơi game vô cùng tự do và thú vị, cho phép bạn xây dựng đế chế hùng mạnh và tham gia vào…
22 views
Daily Writeups
⤷ Title: Getting Started with Shodan: The Google of IoT Devices
════════════════════════
𐀪 Author: Cybeague Technologies
════════════════════════
ⴵ Time: Thu, 25 Dec 2025 02:36:51 GMT
════════════════════════
⌗ Tags: #security #hacking #information_security #hacker #cybersecurity
Medium
Getting Started with Shodan: The Google of IoT Devices
Discover what’s really connected to the internet with just a few clicks!
25 views
Daily Writeups
⤷ Title: Netcraft: Uncovering Website Secrets Made Simple
════════════════════════
𐀪 Author: Cybeague Technologies
════════════════════════
ⴵ Time: Thu, 25 Dec 2025 02:35:16 GMT
════════════════════════
⌗ Tags: #information_security #hacking #cybersecurity #hacker #security
Medium
Netcraft: Uncovering Website Secrets Made Simple
Learn how to peek behind the curtain of any website in minutes!
33 views
Daily Writeups
⤷ Title: Chasing the Wizard: A Deep Dive into the “Smag Grotto” Walkthrough
════════════════════════
𐀪 Author: Justin Jude Cabodil
════════════════════════
ⴵ Time: Thu, 25 Dec 2025 03:04:00 GMT
════════════════════════
⌗ Tags: #cronjob #tryhackme #privilege_escalation #linux #crontab
Medium
Chasing the Wizard: A Deep Dive into the “Smag Grotto” Walkthrough
Following the Yellow Brick Road
39 views
Daily Writeups
⤷ Title: TaleX Airdrop: Claim $50K in $X Tokens Easily — [December 2025 Guide]
════════════════════════
𐀪 Author: Vanessa
Price
════════════════════════
ⴵ Time: Thu, 25 Dec 2025 03:39:40 GMT
════════════════════════
⌗ Tags: #blockchain #rewards #crypto #bonus #xs
45 views
Daily Writeups
⤷ Title: Tải Dynamons World Hack (Full Tiền, Kim Cương, Pokemon) V1.11.88
════════════════════════
𐀪 Author: genzvnmod
════════════════════════
ⴵ Time: Thu, 25 Dec 2025 04:35:13 GMT
════════════════════════
⌗ Tags: #genzvnmod #games #hacking
Medium
Tải Dynamons World Hack (Full Tiền, Kim Cương, Pokemon) V1.11.88
Dynamons World Hack mang đến cho người chơi một trải nghiệm hoàn toàn mới với những tính năng vượt trội, giúp bạn dễ dàng khám phá và chiến…
39 views
Daily Writeups
⤷ Title: Tải BarbarQ Mod Apk (Menu, Vô Hạn Tiền) v1.0.1811 Mới Nhất
════════════════════════
𐀪 Author: Game4u
════════════════════════
ⴵ Time: Thu, 25 Dec 2025 04:21:01 GMT
════════════════════════
⌗ Tags: #game4u #games #hacking
Medium
Tải BarbarQ Mod Apk (Menu, Vô Hạn Tiền) v1.0.1811 Mới Nhất
BarbarQ Mod APK là phiên bản nâng cấp của tựa game hành động chiến thuật BarbarQ, mang đến trải nghiệm chơi game mượt mà và đầy hấp dẫn…
32 views
Daily Writeups
⤷ Title: Tải Hack Truckers of Europe 3 Mod APK (Full Tiền) v0.5.59
════════════════════════
𐀪 Author: Bandisharecx
════════════════════════
ⴵ Time: Thu, 25 Dec 2025 04:10:01 GMT
════════════════════════
⌗ Tags: #games #bandishare #hacking
Medium
Tải Hack Truckers of Europe 3 Mod APK (Full Tiền) v0.5.59
Truckers of Europe 3 là game mô phỏng lái xe tải, nơi bạn vào vai tài xế chuyên nghiệp, điều khiển những chiếc xe tải hạng nặng và thực…
27 views
Daily Writeups
⤷ Title: Exploitation with cURL — Hoperation Eggsploit
════════════════════════
𐀪 Author: THM{0x416469747961204D6163686972616A75}
════════════════════════
ⴵ Time: Thu, 25 Dec 2025 04:48:28 GMT
════════════════════════
⌗ Tags: #advent_of_cyber_2025 #tryhackme_writeup #cybersecurity #tryhackme #tryhackme_walkthrough
Medium
Exploitation with cURL — Hoperation Eggsploit
The evil Easter bunnies operate a web control panel that holds the wormhole open. Using cURL, identify the endpoints, send the required…
36 views
Daily Writeups
⤷ Title: TryHackMe: Year of the Fox Writeup
════════════════════════
𐀪 Author: cbev
════════════════════════
ⴵ Time: Thu, 25 Dec 2025 04:10:35 GMT
════════════════════════
⌗ Tags: #cybersecurity #tryhackme #pentesting #information_security
Medium
TryHackMe: Year of the Fox Writeup
This box is ranked hard difficulty on THM, it involves us brute forcing a webpage login, getting a reverse shell via RCE, port forwarding…
43 views