Daily Writeups
@Daily_Writeups
3.55K subscribers
2 photos
130K links
Daily Bug Bounty / Cybersecurity Writeups
Source Code : https://github.com/Spix0r/writeup-miner
Download Telegram
About
Blog
Apps
Platform
Join
Daily Writeups
3.55K subscribers
Daily Writeups
⤷ Title: Growing up in the hacking underground before DOS, IRC, and phreaking went mainstream
════════════════════════
𐀪 Author: Sam Gabsi
════════════════════════
ⴵ Time: Mon, 29 Dec 2025 21:12:27 GMT
════════════════════════
⌗ Tags: #programming #hacking #cybersecurity #technology_history #internet_culture
Medium
Growing Up in the Hacking Underground (Before It Had a Name)
“I made a discovery today. I found a computer. Wait a second, this is cool. It does what I want it to.”
18 views
Daily Writeups
⤷ Title: TryHackMe Writeup: Cyborg
════════════════════════
𐀪 Author: Berkay AĞGÜL
════════════════════════
ⴵ Time: Mon, 29 Dec 2025 21:41:20 GMT
════════════════════════
⌗ Tags: #tryhackme_walkthrough #tryhackme_writeup #cybersecurity #cybercrime #tryhackme
Medium
TryHackMe Writeup: Cyborg
Bugün; varsayılan bir Apache sayfasıyla masum görünen, ancak arka planda kritik sistem dizinlerini ifşa eden bir sunucuyu analiz edeceğiz…
22 views
Daily Writeups
⤷ Title: Advent of Cyber Day 3: Splunk Basics — Did You SIEM?
════════════════════════
𐀪 Author: Samuel Mikeng Mbongo
════════════════════════
ⴵ Time: Mon, 29 Dec 2025 20:59:08 GMT
════════════════════════
⌗ Tags: #advent_of_cyber_2025 #tryhackme #cybersecurity
Medium
Advent of Cyber Day 3: Splunk Basics — Did You SIEM?
Advent of Cyber Day 3: Splunk Basics — Did You SIEM? Christmas in Wareville was supposed to be calm. Decorations were up, systems were stable, and The Best Festival Company (TBFC) SOC team was …
30 views
Daily Writeups
⤷ Title: Hackeado por ser “Eficiente”☠️ (Parte 1)
════════════════════════
𐀪 Author: Saulo Briceño Wong
════════════════════════
ⴵ Time: Mon, 29 Dec 2025 20:43:03 GMT
════════════════════════
⌗ Tags: #artificial_intelligence #devsecops_solutions #ciberseguridad #ethical_hacking #devsecops
Medium
Hackeado por ser “Eficiente”☠️ (Parte 1)
Por que la automatización de tu empresa podría ser mas peligroso de lo que crees…
49 views
Daily Writeups
⤷ Title: The n8n RCE Bug That Quietly Turned Automation Into an Attack Surface
════════════════════════
𐀪 Author: CyberSecurity
════════════════════════
ⴵ Time: Mon, 29 Dec 2025 21:50:34 GMT
════════════════════════
⌗ Tags: #cybersecurity_news #cybersecurity #rce_vulnerability #n8n #vulnerability
49 views
Daily Writeups
⤷ Title: How to not get hacked
════════════════════════
𐀪 Author: Vikash Bajaj
════════════════════════
ⴵ Time: Mon, 29 Dec 2025 22:20:48 GMT
════════════════════════
⌗ Tags: #security #information_technology #hacking #software_development #information_security
Medium
How to not get hacked
Recently we saw multiple users with services running vulnerable Next.js version got hacked due to critical Next.js vulnerability…
45 views
Daily Writeups
⤷ Title: CISSP Domain 3: Security Engineering | Complete Study Notes (Part 2)
════════════════════════
𐀪 Author: Pushpak Sharma
════════════════════════
ⴵ Time: Mon, 29 Dec 2025 23:07:11 GMT
════════════════════════
⌗ Tags: #cybersecurity #infosec #cissp #security_engineering #cisspstudyguide
Medium
CISSP Domain 3: Security Engineering | Complete Study Notes (Part 2)
Domain 3 (Security Engineering) is one of the largest and most challenging domains in the CISSP certification. Many candidates struggle…
30 views
Daily Writeups
⤷ Title: CISA Alert: MongoBleed Added to KEV Catalog as 80,000+ Servers Face Active Exploitation
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Tue, 30 Dec 2025 01:58:20 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #Active Exploitation #CISA KEV #CVE_2025_14847 #database security #Federal Directive #Information Disclosure #infosec #Memory Leak #MongoBleed #mongodb #Patch Alert #zlib
Daily CyberSecurity
CISA Alert: MongoBleed Added to KEV Catalog as 80,000+ Servers Face Active Exploitation
CISA adds MongoBleed (CVE-2025-14847) to its KEV Catalog after confirming active exploitation. 80,000+ MongoDB servers are at risk. Patch by Jan 19!
34 views
Daily Writeups
⤷ Title: CVE-2025-52691 (CVSS 10): Critical SmarterMail Flaw Opens Servers to Unauthenticated Attacks
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Tue, 30 Dec 2025 00:15:10 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #CSA Singapore #CSIT #CVE_2025_52691 #Email Security #Enterprise Security #File Upload Vulnerability #rce #Remote Code Execution #SmarterMail #SmarterTools
Daily CyberSecurity
CVE-2025-52691 (CVSS 10): Critical SmarterMail Flaw Opens Servers to Unauthenticated Attacks
SmarterMail hits a 10/10 CVSS severity! CVE-2025-52691 allows unauthenticated RCE via arbitrary file uploads. Update to Build 9413 immediately!
24 views
Daily Writeups
⤷ Title: CVE-2025-13915: Critical 9.8 Flaw in IBM API Connect Lets Attackers Bypass Login
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Tue, 30 Dec 2025 00:11:38 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #API Connect #API Gateway #Authentication Bypass #Critical Vulnerability #CVE_2025_13915 #Enterprise Security #IBM #Patch Now #v10.0.11 #v10.0.8
Daily CyberSecurity
CVE-2025-13915: Critical 9.8 Flaw in IBM API Connect Lets Attackers Bypass Login
IBM issues a 9.8 critical alert for API Connect! CVE-2025-13915 allows unauthenticated remote access. Update to v10.0.11 or apply iFixes now.
18 views
Daily Writeups
⤷ Title: The $339 Trillion Glitch: Ubisoft Loses Control of Rainbow Six Siege in Massive Breach
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Tue, 30 Dec 2025 00:07:33 +0000
════════════════════════
⌗ Tags: #Cybercriminals #anti_cheat #BattlEye #cyberattack #Data Breach #Gaming News 2025 #mongodb #R6 Credits #Rainbow Six Siege #Server Outage #Software security #Ubisoft
Daily CyberSecurity
The $339 Trillion Glitch: Ubisoft Loses Control of Rainbow Six Siege in Massive Breach
Ubisoft takes Rainbow Six Siege offline after a massive backend breach. Hackers gifted 2 billion credits to players and hijacked the game's ban system.
17 views
Daily Writeups
⤷ Title: The Arms Dealer Returns: Why NVIDIA is Retreating from the Cloud War
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Tue, 30 Dec 2025 00:05:49 +0000
════════════════════════
⌗ Tags: #Technology #AI Infrastructure #AWS #Blackwell #Cloud Computing #DGX Cloud #Dwight Diercks #Google Cloud #H100 #Isaac AI #Jensen Huang #Microsoft Azure #nvidia
Daily CyberSecurity
The Arms Dealer Returns: Why NVIDIA is Retreating from the Cloud War
NVIDIA folds DGX Cloud into its engineering arm to focus on internal R&D. Is the AI "arms dealer" quitting the cloud war to protect its chip monopoly?
12 views
Daily Writeups
⤷ Title: Beyond SOS: Samsung’s Exynos 5410 Brings 5G Video Calls to the Middle of Nowhere
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Tue, 30 Dec 2025 00:03:20 +0000
════════════════════════
⌗ Tags: #Technology #5G NTN #Direct_to_Cell #Exynos Modem 5410 #Galaxy S26 #mobile connectivity #NR_NTN #Post_Quantum Cryptography #samsung #Satellite Communication #Smartphone Tech
Daily CyberSecurity
Beyond SOS: Samsung’s Exynos 5410 Brings 5G Video Calls to the Middle of Nowhere
Samsung’s Exynos 5410 modem enables 5G satellite video calls for the Galaxy S26, shifting mobile tech from emergency texts to global broadband connectivity.
14 views
Daily Writeups
⤷ Title: The £1.5bn Showdown: Apple Appeals Landmark Ruling Over “Unfair” App Store Fees
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Tue, 30 Dec 2025 00:00:17 +0000
════════════════════════
⌗ Tags: #Technology #Antitrust #App Store #Apple #Apple Tax #big tech #competition law #consumer rights #Court of Appeal #Digital Economy #Rachael Kent #UK Lawsuit
Daily CyberSecurity
The £1.5bn Showdown: Apple Appeals Landmark Ruling Over "Unfair" App Store Fees
Apple appeals a £1.5bn UK ruling that labeled its 30% App Store fee "unfair." Over 19 million users could receive payouts if the $2bn fine is upheld.
11 views
Daily Writeups
⤷ Title: API Keys, Tokens & Secrets: How They Leak and How Developers can Avoid it
════════════════════════
𐀪 Author: Veronica Peter
════════════════════════
ⴵ Time: Tue, 30 Dec 2025 01:21:19 GMT
════════════════════════
⌗ Tags: #api #sdlc #credentials #api_key #application_security
Medium
API Keys, Tokens & Secrets: How They Leak and How Developers can Avoid it
Credential exposures are one of the fastest paths to compromise. In 2024 alone, GitHub detected over 39M leaked secrets across its…
16 views
Daily Writeups
⤷ Title: Understanding Broken Object Level Authorization (BOLA): What It Is, How It Happens, and How to…
════════════════════════
𐀪 Author: Veronica Peter
════════════════════════
ⴵ Time: Tue, 30 Dec 2025 01:04:01 GMT
════════════════════════
⌗ Tags: #application_security #owasp_top_10 #api_security #owasp #api
Medium
Understanding Broken Object Level Authorization (BOLA): What It Is, How It Happens, and How to Prevent it
Broken Object Level Authorization (BOLA) is a critical API vulnerability that occurs when an application fails to properly verify whether…
23 views
Daily Writeups
⤷ Title: Droid-Warden CTF by INE : How I Finished First Under Pressure
════════════════════════
𐀪 Author: The.Flying.Wolf
════════════════════════
ⴵ Time: Tue, 30 Dec 2025 00:02:46 GMT
════════════════════════
⌗ Tags: #reverse_engineering #red_team #android_pentesting #ctf_writeup #hacking
Medium
Droid-Warden CTF by INE : How I Finished First Under Pressure
INE’s Android Pentesting CTF · Medium · 14 days Challenge
17 views
Daily Writeups
⤷ Title: Advanced Mobile App Security: Protecting Code, Integrity, and User Trust
════════════════════════
𐀪 Author: Rafi zimraan arjuna wijaya
════════════════════════
ⴵ Time: Tue, 30 Dec 2025 00:57:23 GMT
════════════════════════
⌗ Tags: #cybersecurity #app_development #infosec #react_native #mobile_security
Medium
Advanced Mobile App Security: Protecting Code, Integrity, and User Trust
The Day My Assumptions Failed
29 views
Daily Writeups
⤷ Title: Building a Secure Malware Lab & Dissecting WannaCry: From ISO to IOCs
════════════════════════
𐀪 Author: Eren Ergen
════════════════════════
ⴵ Time: Tue, 30 Dec 2025 00:43:41 GMT
════════════════════════
⌗ Tags: #ransomware #infosec #cybersecurity #blue_team #malware_analysis
Medium
Building a Secure Malware Lab & Dissecting WannaCry: From ISO to IOCs
A step-by-step guide to setting up an isolated VirtualBox environment for safe ransomware analysis.
29 views
Daily Writeups
⤷ Title: Hacker “Lovely” Leaks 2.3M WIRED Subscriber Records
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Tue, 30 Dec 2025 03:15:51 +0000
════════════════════════
⌗ Tags: #Data Leak #data breach #hacker #Have I Been Pwned #Hudson Rock #identity theft #Lovely #Subscriber Leak #The New Yorker #Vogue #WIRED
Penetration Testing Tools
Hacker "Lovely" Leaks 2.3M WIRED Subscriber Records
A hacker using the alias Lovely has published a database containing the personal information of WIRED subscribers on
31 views
Daily Writeups
⤷ Title: Skip the SIEM: BlueTriage Delivers Instant Incident Reports from Raw Logs
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Tue, 30 Dec 2025 03:14:40 +0000
════════════════════════
⌗ Tags: #Open Source Tool #BlueTriage #DFIR #Incident Response #Log Analysis #MITRE ATT&CK #open source #python #Threat Hunting #Triage #Windows Security Logs
Penetration Testing Tools
Skip the SIEM: BlueTriage Delivers Instant Incident Reports from Raw Logs
BlueTriage is a new Python tool for rapid Windows log triage. Normalize JSON events, detect MITRE-mapped threats, and generate HTML reports in seconds.
29 views