Daily Writeups
@Daily_Writeups
3.54K subscribers
2 photos
130K links
Daily Bug Bounty / Cybersecurity Writeups
Source Code : https://github.com/Spix0r/writeup-miner
Download Telegram
About
Blog
Apps
Platform
Join
Daily Writeups
3.54K subscribers
Daily Writeups
⤷ Title: Baby | Hack The Box Walkthrough
════════════════════════
𐀪 Author: WireHawk Security
════════════════════════
ⴵ Time: Sun, 28 Dec 2025 22:33:58 GMT
════════════════════════
⌗ Tags: #security #penetration_testing #information_technology #cybersecurity #information_security
Medium
Baby 👶 | Hack The Box Walkthrough
Walkthrough for “Baby” on Hack The Box
25 views
Daily Writeups
⤷ Title: The iOS 26.2 Trap: New WebKit Integer Overflow Discovered with PoC—Is Your iPhone at Risk?
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Mon, 29 Dec 2025 01:53:21 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #Apple #Gigacage #integer overflow #iOS 26.2 #iPhone security #JavaScriptCore #Joseph Goydish #PoC #rce #Remote Code Execution #Safari #Vulnerability #WebKit
Daily CyberSecurity
The iOS 26.2 Trap: New WebKit Integer Overflow Discovered with PoC—Is Your iPhone at Risk?
Joseph Goydish uncovers a critical integer overflow in iOS 26.2’s WebKit. Proof of Concept shows how attackers can crash browsers or trigger RCE.
22 views
Daily Writeups
⤷ Title: PoC Released: MongoBleed Exploit Allows Unauthenticated Attackers to Drain MongoDB Memory
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Mon, 29 Dec 2025 00:40:34 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #CVE_2025_14847 #Data Breach #database security #Heap Over_read #Information Disclosure #infosec #Joe Desimone #Memory Leak #MongoBleed #mongodb #PoC #zlib
Daily CyberSecurity
PoC Released: MongoBleed Exploit Allows Unauthenticated Attackers to Drain MongoDB Memory
MongoBleed (CVE-2025-14847) allows unauthenticated MongoDB memory leaks. With Joe Desimone's PoC released, upgrade to v8.0.17 or v7.0.28 now!
16 views
Daily Writeups
⤷ Title: Holiday ColdFusion Attacks Reveal Massive 2.5 Million Request Onslaught
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Mon, 29 Dec 2025 00:35:07 +0000
════════════════════════
⌗ Tags: #Cybercriminals #Adobe ColdFusion #Christmas 2025 #CTG Server Limited #CVE_2017_9841 #CVE_2023_26360 #cyber_espionage #GreyNoise #IAB #initial access broker #Japan_based Threat #java #Mass Exploitation
Daily CyberSecurity
Holiday ColdFusion Attacks Reveal Massive 2.5 Million Request Onslaught
GreyNoise reveals a massive Japan-based holiday campaign: 2.5 million attacks targeting 767 CVEs to harvest access for ransomware gangs.
14 views
Daily Writeups
⤷ Title: “Headphone Jacking”: Critical Flaws in Popular Earbuds Let Hackers Hijack Your Phone
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Mon, 29 Dec 2025 00:29:34 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #Airoha RACE #Bluetooth security #CVE_2025_20700 #firmware update #Headphone Jacking #infosec #Jabra #JBL #Marshall #sony #TWS Earbuds #Wireless Security
Daily CyberSecurity
"Headphone Jacking": Critical Flaws in Popular Earbuds Let Hackers Hijack Your Phone
ERNW exposes "Headphone Jacking," a critical Airoha RACE flaw in Sony & JBL chips allowing hackers to eavesdrop and hijack connected smartphones.
24 views
Daily Writeups
⤷ Title: CVE-2025-54322 (CVSS 10): AI Agents Uncover Critical Zero-Day in Global Networking Gear
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Mon, 29 Dec 2025 00:22:02 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #AI Agents #Autonomous Hacking #CVE_2025_54322 #Networking Security #pwn.ai #rce #Remote Code Execution #SD_WAN #SXZOS #Xspeeder #zero_day
Daily CyberSecurity
CVE-2025-54322 (CVSS 10): AI Agents Uncover Critical Zero-Day in Global Networking Gear
pwn.ai reveals CVE-2025-54322, the first remotely exploitable zero-day found by autonomous AI agents, targeting Xspeeder SD-WAN gear globally.
17 views
Daily Writeups
⤷ Title: EmEditor Compromised: “WALSHAM” Imposter Poisons Official Installer with Spyware
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Mon, 29 Dec 2025 00:16:52 +0000
════════════════════════
⌗ Tags: #Malware #browser extension #cyber_espionage #cybersecurity #Data Breach #EmEditor #Google Drive Caching #Infostealer #malware #RedDrip Team #supply chain attack #WALSHAM INVESTMENTS LIMITED
Daily CyberSecurity
EmEditor Compromised: "WALSHAM" Imposter Poisons Official Installer with Spyware
EmEditor confirms its official site was compromised, redirecting users to a malicious MSI signed by WALSHAM INVESTMENTS LIMITED to steal sensitive data.
15 views
Daily Writeups
⤷ Title: The Performance Propeller: Google Proposes Upstreaming Its High-Octane Optimizer to LLVM
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Mon, 29 Dec 2025 00:16:48 +0000
════════════════════════
⌗ Tags: #Linux #BOLT #Clang #Compiler Optimization #google #Linux Kernel #LLD #LLVM #open_source #Performance Engineering #PGO #Post_Link Optimization #Propeller
Daily CyberSecurity
The Performance Propeller: Google Proposes Upstreaming Its High-Octane Optimizer to LLVM
Google is upstreaming Propeller to LLVM, bringing its 10% performance boost for the Linux kernel and large-scale apps to the standard compiler toolchain.
17 views
Daily Writeups
⤷ Title: The Christmas Drain: How a Backdoor in Trust Wallet v2.68 Stole $7M
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Mon, 29 Dec 2025 00:15:53 +0000
════════════════════════
⌗ Tags: #Cybercriminals #Binance #Blockchain security #Crypto Hack #infosec #PostHog #Recovery Phrase #SlowMist #supply chain attack #Trust Wallet #v2.68.0 #ZachXBT
Daily CyberSecurity
The Christmas Drain: How a Backdoor in Trust Wallet v2.68 Stole $7M
The well-known cryptocurrency wallet extension Trust Wallet appears to have recently fallen victim to a supply-chain attack. Attackers somehow compromised the extension and injected malicious code…
14 views
Daily Writeups
⤷ Title: The Stalled Update: Why Your Samsung’s Google Play Patch is Stuck in 2025
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Mon, 29 Dec 2025 00:13:28 +0000
════════════════════════
⌗ Tags: #Android #Android 16 #Galaxy #Google Play System Update #heise online #One UI 8 #One UI 8.5 #Project Mainline #samsung #Samsung Members #security patch #software update
Daily CyberSecurity
The Stalled Update: Why Your Samsung’s Google Play Patch is Stuck in 2025
Samsung confirms it has "frozen" Google Play system updates to protect One UI 8 stability. Learn why your Galaxy is stuck and when it will resume in 2026.
29 views
Daily Writeups
⤷ Title: “Prefix Swap” Panic: Sophisticated “Jackson” Imposter Infiltrates Maven Central
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Mon, 29 Dec 2025 00:06:49 +0000
════════════════════════
⌗ Tags: #Malware #Aikido Security #cybersecurity #DevOps #Jackson Library #jackson_databind #Java security #malware #Maven Central #org.fasterxml #supply chain attack #Typosquatting
Daily CyberSecurity
"Prefix Swap" Panic: Sophisticated "Jackson" Imposter Infiltrates Maven Central
Aikido Security uncovers the first sophisticated malware on Maven Central: a "prefix swap" attack on the Jackson library used to steal data.
15 views
Daily Writeups
⤷ Title: Fixing the “RAM Tax”: Microsoft’s New Plan to Make File Explorer Search 2X Faster
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Mon, 29 Dec 2025 00:00:48 +0000
════════════════════════
⌗ Tags: #Windows #File Explorer #Microsoft #Optimization #PC Speed #RAM Usage #Search Indexer #System Performance #Windows 11 #Windows 11 Build 26220.7523 #Windows Insider
Daily CyberSecurity
Fixing the "RAM Tax": Microsoft’s New Plan to Make File Explorer Search 2X Faster
Microsoft is testing a major fix for Windows 11 File Explorer that eliminates redundant indexing, slashing RAM and CPU usage for faster file searches.
14 views
Daily Writeups
⤷ Title: The $70 Chip War: Why Google is Firing Execs and Apple is Bracing for a 230% Price Surge
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Mon, 29 Dec 2025 00:00:37 +0000
════════════════════════
⌗ Tags: #Technology #AI Shortage #Apple #Data Center #google #HBM3e #iPhone 17 #iPhone 18 #LPDDR5X #Microsoft #samsung #Semiconductor Crisis #SK Hynix #TPU
Daily CyberSecurity
The $70 Chip War: Why Google is Firing Execs and Apple is Bracing for a 230% Price Surge
Google and Microsoft execs are clashing with South Korean suppliers as a massive HBM shortage forces Apple to face a 230% price hike for iPhone RAM.
21 views
Daily Writeups
⤷ Title: JPGChat | TryHackMe | Walkthrough
════════════════════════
𐀪 Author: Sornphut
════════════════════════
ⴵ Time: Mon, 29 Dec 2025 01:53:12 GMT
════════════════════════
⌗ Tags: #tryhackme #python #tryhackme_walkthrough #tryhackme_writeup #python_libraries
Medium
JPGChat | TryHackMe | Walkthrough
Initial Access
27 views
Daily Writeups
⤷ Title: The Unshakable Foundation: How Anycast Keeps the Internet’s Root DNS Alive
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Mon, 29 Dec 2025 03:46:51 +0000
════════════════════════
⌗ Tags: #Cybercriminals #Anycast #BGP Routing #DDoS Mitigation #DNSSEC #internet infrastructure #IP Anycast #NetScout #Network Redundancy #network security #Root DNS
Information Security News
The Unshakable Foundation: How Anycast Keeps the Internet’s Root DNS Alive
The stability and resilience of the internet rest largely on systems that remain invisible to most users. Among these foundational pillars is the root DNS server system—a critical mechanism respon…
26 views
Daily Writeups
⤷ Title: The Enemy Within: Why Hackers are Paying Your Employees $100K to Betray You
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Mon, 29 Dec 2025 03:45:07 +0000
════════════════════════
⌗ Tags: #Cybercriminals #Check Point #cybercrime #Dark Web #data breach #Employee Monitoring #FinTech Security #Infosec #Insider Threat #SIM Swapping #Social Engineering
Penetration Testing Tools
The Enemy Within: Why Hackers are Paying Your Employees $100K to Betray You
Within cybercriminal circles, interest in recruiting insiders from within companies is surging. Rather than mounting complex external intrusions,
18 views
Daily Writeups
⤷ Title: Operation Sentinel: Interpol Arrests 574 in Sweeping African Cybercrime Bust
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Mon, 29 Dec 2025 03:38:10 +0000
════════════════════════
⌗ Tags: #Cybercriminals #AFJOC #Africa #BEC #Benin #cybercrime #Digital Extortion #Ghana #Interpol #Nigeria #Operation Sentinel #ransomware #Senegal
Penetration Testing Tools
Operation Sentinel: Interpol Arrests 574 in Sweeping African Cybercrime Bust
A coordinated cybercrime crackdown across Africa has culminated in hundreds of arrests and the seizure of millions of
10 views
Daily Writeups
⤷ Title: NVIDIA’s Christmas Surprise: Open Sourcing CUDA Tile IR to Break the Moat
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Mon, 29 Dec 2025 03:29:52 +0000
════════════════════════
⌗ Tags: #Technology #AI Infrastructure #Apache 2.0 #Blackwell #CUDA 13.1 #CUDA Tile IR #GPU Programming #MLIR #Nvidia #open source #Tensor Cores #ZLUDA
Penetration Testing Tools
NVIDIA’s Christmas Surprise: Open Sourcing CUDA Tile IR to Break the Moat
As a Christmas gift to the open-source community, NVIDIA has released the CUDA Tile IR intermediate representation as
6 views
Daily Writeups
⤷ Title: Beyond Macros: Paper Werewolf’s “EchoGather” Backdoor Exploits Excel XLLs
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Mon, 29 Dec 2025 03:28:34 +0000
════════════════════════
⌗ Tags: #Malware #APT #Cyber Espionage #EchoGather #Excel Exploits #GOFFEE #Malware 2025 #Paper Werewolf #phishing #Russia #Ukraine #WinRAR vulnerability #XLL
Penetration Testing Tools
Beyond Macros: Paper Werewolf’s "EchoGather" Backdoor Exploits Excel XLLs
The Excel format—long regarded as a harmless office staple—is increasingly being exploited as an entry point for cyberattacks.
10 views
Daily Writeups
⤷ Title: Shadow Updates: Evasive Panda’s Two-Year Espionage Spree Revealed
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Mon, 29 Dec 2025 03:26:51 +0000
════════════════════════
⌗ Tags: #Cybercriminals #APT #Cyber Espionage #DNS Poisoning #Evasive Panda #Infosec #iQIYI #kaspersky #malware #MgBot #MitM Attack #SohuVA #supply chain attack
Penetration Testing Tools
Shadow Updates: Evasive Panda’s Two-Year Espionage Spree Revealed
The Chinese hacking group known as Evasive Panda (also tracked as Bronze Highland, Daggerfly, and StormBamboo) carried out
8 views
Daily Writeups
⤷ Title: The 2026 Deficit: AI-Driven Spies Meet a Retreating U.S. Cyber Defense
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Mon, 29 Dec 2025 03:26:06 +0000
════════════════════════
⌗ Tags: #Information Security #2026 Cyber Risk #AI Espionage #China #CISA #FCC #Federal Budget #Grid Security #Infrastructure Security #One_Time Passwords #Salt Typhoon
Penetration Testing Tools
The 2026 Deficit: AI-Driven Spies Meet a Retreating U.S. Cyber Defense
By 2026, government agencies are finding it increasingly difficult to describe cyber risk with a single word or
10 views