Daily Writeups
@Daily_Writeups
3.55K subscribers
2 photos
130K links
Daily Bug Bounty / Cybersecurity Writeups
Source Code : https://github.com/Spix0r/writeup-miner
Download Telegram
About
Blog
Apps
Platform
Join
Daily Writeups
3.55K subscribers
Daily Writeups
⤷ Title: The Extradition of a Memory Thief: How a Fake Windows Tool Stole $1.2M in Crypto
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Wed, 31 Dec 2025 04:11:19 +0000
════════════════════════
⌗ Tags: #Cybercriminals #Cryptocurrency Theft #Cybercrime 2025 #extradition #Infosec #Interpol #KMSAuto #malware #Memory Hijack #South Korea #Wallet Hijacking
Information Security News
The Extradition of a Memory Thief: How a Fake Windows Tool Stole $1.2M in Crypto
A foreign hacker who stole cryptocurrency worth more than 1.7 billion won (approximately $1.18 million) using malware that covertly replaced wallet addresses has been extradited to South Korea. Ac…
15 views
Daily Writeups
⤷ Title: MongoBleed Emergency: 87,000 Databases Leaking Secrets as Hackers Bypass Login
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Wed, 31 Dec 2025 04:08:46 +0000
════════════════════════
⌗ Tags: #Vulnerability #CISA #CVE_2025_14847 #cyber attack #data breach #Heap Overflow #Heartbleed #Infosec 2025 #MongoBleed #MongoDB #NoSQL Security #Zlib
Information Security News
MongoBleed Emergency: 87,000 Databases Leaking Secrets as Hackers Bypass Login
U.S. and Australian cybersecurity authorities have confirmed that hackers are already exploiting a newly disclosed vulnerability in MongoDB-based data storage systems. The issue surfaced over the …
15 views
Daily Writeups
⤷ Title: The Audio Backdoor: How Your Premium Headphones Could Hack Your Phone
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Wed, 31 Dec 2025 04:06:51 +0000
════════════════════════
⌗ Tags: #Vulnerability #Airoha #Bluetooth Vulnerability #Bose #CVE_2025_20700 #CVE_2025_20701 #CVE_2025_20702 #Eavesdropping #JBL #Marshall #RACE Protocol #Smartphone Security #Sony
Information Security News
The Audio Backdoor: How Your Premium Headphones Could Hack Your Phone
Vulnerabilities discovered in wireless headphones powered by Airoha chips have opened the door to remote compromise of the smartphones they are connected to. The flaws identified by security resea…
14 views
Daily Writeups
⤷ Title: Web-Enshittification: Why the Creator of JavaScript Says Windows 11 is Broken
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Wed, 31 Dec 2025 04:02:58 +0000
════════════════════════
⌗ Tags: #Windows #bloatware #Brendan Eich #Discord #electron #JavaScript #Microsoft #performance #RAM Usage #Software Engineering #WebView2 #WhatsApp #Windows 11
Information Security News
Web-Enshittification: Why the Creator of JavaScript Says Windows 11 is Broken
Windows 11 continues to accrete web components virtually everywhere—from Discord and Teams to WhatsApp, Windows Search, the Start menu, and even the new agenda view in the notification center. The…
14 views
Daily Writeups
⤷ Title: The $41 Billion Golden Ticket: SoftBank Seals Historic OpenAI Stake
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Wed, 31 Dec 2025 07:46:06 +0000
════════════════════════
⌗ Tags: #Technology #AGI #AI Infrastructure #DigitalBridge #Masayoshi Son #Microsoft #nvidia #OpenAI #SoftBank #Stargate Project #T_Mobile #Venture Capital
Daily CyberSecurity
The $41 Billion Golden Ticket: SoftBank Seals Historic OpenAI Stake
Japan’s SoftBank Group has officially announced that it completed the payment of an additional $22.5 billion investment into OpenAI last Friday (12/26). This marks the fulfillment of a pledge made…
24 views
Daily Writeups
⤷ Title: The Christmas Heist: How Shai-Hulud Hijacked Trust Wallet for an $8.5M Score
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Wed, 31 Dec 2025 07:36:56 +0000
════════════════════════
⌗ Tags: #Cybercriminals #backdoor #Binance #Chrome Web Store #Crypto theft #Mnemonic Seed #NPM Attack #Shai_Hulud #Supply Chain #Trust Wallet #Version 2.68 #ZachXBT
Daily CyberSecurity
The Christmas Heist: How Shai-Hulud Hijacked Trust Wallet for an $8.5M Score
Earlier, Binance-owned non-custodial crypto wallet Trust Wallet fell victim to a hacking incident in which attackers, through as-yet-unknown means, directly replaced the Trust Wallet listing in th…
20 views
Daily Writeups
⤷ Title: CVE-2025-47411: Critical Apache StreamPipes Flaw Allows Standard Users to Seize Admin Control
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Wed, 31 Dec 2025 03:06:14 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #Apache StreamPipes #Authentication Bypass #CVE_2025_47411 #Cyber Security #Data Tampering #IIoT Security #Industrial IoT #JWT Manipulation #Open Source Security #privilege escalation
Daily CyberSecurity
CVE-2025-47411: Critical Apache StreamPipes Flaw Allows Standard Users to Seize Admin Control
The Apache Software Foundation has released a critical fix for StreamPipes, its self-service Industrial IoT toolbox designed to let non-technical users analyze complex data streams. A newly disclo…
19 views
Daily Writeups
⤷ Title: “RondoDoX” Strikes Back: Exposed Logs Reveal Massive 9-Month Campaign Targeting Next.js and IoT
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Wed, 31 Dec 2025 02:33:19 +0000
════════════════════════
⌗ Tags: #Malware #botnet #CloudSEK #CVE_2025_55182 #IoT security #Next.js #Prototype Pollution #rce #React2Shell #RondoDox #Server Actions #Web Framework Security #XMRig
Daily CyberSecurity
“RondoDoX” Strikes Back: Exposed Logs Reveal Massive 9-Month Campaign Targeting Next.js and IoT
The RondoDoX botnet has resurfaced with a potent new arsenal, shifting its sights from simple routers to enterprise-grade web frameworks. A new intelligence report from CloudSEK details a sprawlin…
20 views
Daily Writeups
⤷ Title: Cybersecurity Pros Admit to Moonlighting as BlackCat Ransomware Affiliates
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Wed, 31 Dec 2025 02:19:42 +0000
════════════════════════
⌗ Tags: #Cybercriminals #ALPHV #Bitcoin Extortion #BlackCat #Cybercrime #Department of Justice #DigitalMint #Insider Threat #Kevin Martin #ransomware #Ryan Goldberg #Sygnia
Daily CyberSecurity
Cybersecurity Pros Admit to Moonlighting as BlackCat Ransomware Affiliates
Two cybersecurity professionals have admitted to moonlighting as ransomware affiliates, utilizing the very skills designed to protect networks to instead lock them down and extort millions. Ryan G…
17 views
Daily Writeups
⤷ Title: The $2 Billion Bet: Why Meta Just Bought the World’s Fastest-Growing AI Startup
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Wed, 31 Dec 2025 02:10:18 +0000
════════════════════════
⌗ Tags: #Technology #Acquisitions 2025 #AI Agents #Alexandr Wang #Butterfly Effect Technology #Instagram #Manus #Mark Zuckerberg #Meta #Silicon Valley #WhatsApp
Daily CyberSecurity
The $2 Billion Bet: Why Meta Just Bought the World’s Fastest-Growing AI Startup
With 2025 drawing to a close, Meta CEO Mark Zuckerberg’s AI shopping cart is clearly not yet full. Once again, he has demonstrated his formidable “checkbook power” by acquiring Manus, a red-hot AI…
23 views
Daily Writeups
⤷ Title: Bixby’s Revenge: Samsung Pairs with Perplexity AI to Outsmart Google Gemini
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Wed, 31 Dec 2025 02:04:17 +0000
════════════════════════
⌗ Tags: #Android #Technology #AI Assistant #Apple Intelligence #Bixby #CES 2026 #Galaxy S26 #Google Gemini #machine_learning #One UI 8.5 #Perplexity.ai #samsung #Smart Home
Daily CyberSecurity
Bixby’s Revenge: Samsung Pairs with Perplexity AI to Outsmart Google Gemini
At the beginning of this year, Samsung made a bold move in its One UI 7 update by introducing Google Gemini and replacing its own Bixby as the default assistant, briefly making Bixby appear relega…
12 views
Daily Writeups
⤷ Title: The Insider Crisis: How Bribed Outsourced Staff Sold Out Ubisoft’s Crown Jewels
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Wed, 31 Dec 2025 01:59:20 +0000
════════════════════════
⌗ Tags: #Cybercriminals #cyber_espionage #Data Breach #InfoSec 2025 #Insider Threat #MongoBleed #Outsourcing #R6 Credits #Rainbow Six Siege #Ubisoft #VX_Underground
Daily CyberSecurity
The Insider Crisis: How Bribed Outsourced Staff Sold Out Ubisoft’s Crown Jewels
The security research group vx-underground, active on social media platforms, recently released a series of disclosures concerning attacks against Ubisoft and its Rainbow Six franchise. Because th…
10 views
Daily Writeups
⤷ Title: The Mole in the Machine: New Arrests in Coinbase’s $400M Insider Data Scandal
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Wed, 31 Dec 2025 01:54:30 +0000
════════════════════════
⌗ Tags: #Cybercriminals #Brian Armstrong #coinbase #crypto scam #Cybersecurity 2025 #Data Breach #Hyderabad Police #India #Insider Threat #social engineering #TaskUs
Daily CyberSecurity
The Mole in the Machine: New Arrests in Coinbase’s $400M Insider Data Scandal
The U.S.-listed cryptocurrency exchange Coinbase recently announced that Indian police have once again arrested a former employee suspected of accepting bribes in exchange for handing over custome…
11 views
Daily Writeups
⤷ Title: Como participar de um programa de hacker
════════════════════════
𐀪 Author: Bughunt
════════════════════════
ⴵ Time: Tue, 30 Dec 2025 19:51:00 GMT
════════════════════════
⌗ Tags: No_Tags
BugHunt
Como participar de um programa de hacker
Entenda como participar de um programa de hacker de forma legal, conheça os principais modelos e veja como atuar em programas de bug bounty na BugHunt.
9 views
Daily Writeups
⤷ Title: From “Nothing Interesting” to Critical Impact: The Power of Re-Reading Responses ⚠️
════════════════════════
𐀪 Author: Iski
════════════════════════
ⴵ Time: Wed, 31 Dec 2025 07:54:49 GMT
════════════════════════
⌗ Tags: #bug_bounty_tips #infosec #bug_bounty #cybersecurity #hacking
Medium
From “Nothing Interesting” to Critical Impact: The Power of Re-Reading Responses 🔍⚠️
Hey there!😁
14 views
Daily Writeups
⤷ Title: How I Found a Broken Access Control Flaw: Bypassing Authentication with Extensionless Paths.
════════════════════════
𐀪 Author: DOD cyber solutions
════════════════════════
ⴵ Time: Wed, 31 Dec 2025 07:38:16 GMT
════════════════════════
⌗ Tags: #hacking #bug_bounty #ethical_hacking #cybersecurity #technology
Medium
How I Found a Broken Access Control Flaw: Bypassing Authentication with Extensionless Paths.
Hi everyone, I’m back with another writeup! 🎉
18 views
Daily Writeups
⤷ Title: Top 20 Shadow IT Discovery Tools for Attack Surface Mapping: Learn How Pros Uncover Hidden Risks
════════════════════════
𐀪 Author: Very Lazy Tech
════════════════════════
ⴵ Time: Wed, 31 Dec 2025 07:00:46 GMT
════════════════════════
⌗ Tags: #bug_bounty #hacking #penetration_testing #cybersecurity #ethical_hacking
Medium
Top 20 Shadow IT Discovery Tools for Attack Surface Mapping: Learn How Pros Uncover Hidden Risks
Ever tried mapping your company’s attack surface, only to discover a rogue AWS S3 bucket leaking sensitive data to the world? You’re not…
19 views
Daily Writeups
⤷ Title: How I Discovered an SSRF Vulnerability in Ferrari’s System — and Earned a Place in Their Hall of…
════════════════════════
𐀪 Author: Ninadgowda
════════════════════════
ⴵ Time: Wed, 31 Dec 2025 06:54:16 GMT
════════════════════════
⌗ Tags: #bug_bounty #hacking #bug_bounty_tips #business #cybersecurity
Medium
How I Discovered an SSRF Vulnerability in Ferrari’s System — and Earned a Place in Their Hall of Fame
by Ninad Gowda
17 views
Daily Writeups
⤷ Title: Hands-On SQL Injection Using Burp Suite: A Beginner’s Walkthrough
════════════════════════
𐀪 Author: CRAC Learning
════════════════════════
ⴵ Time: Wed, 31 Dec 2025 04:16:37 GMT
════════════════════════
⌗ Tags: #vulnerability #security #code #bug_bounty #cybersecurity
Medium
Hands-On SQL Injection Using Burp Suite: A Beginner’s Walkthrough
Author: Indira Paul
9 views
Daily Writeups
⤷ Title: Bypassing a Monthly Secure Message Limit Using a Race Condition
════════════════════════
𐀪 Author: Bavly Zaher
════════════════════════
ⴵ Time: Wed, 31 Dec 2025 02:05:18 GMT
════════════════════════
⌗ Tags: #web_security #vulnerability #race_condition #bug_bounty #bug_bounty_tips
Medium
Bypassing a Monthly Secure Message Limit Using a Race Condition
Introduction
13 views
Daily Writeups
⤷ Title: Top Bug Bounty Platforms
════════════════════════
𐀪 Author: Shahzaib
════════════════════════
ⴵ Time: Wed, 31 Dec 2025 01:48:54 GMT
════════════════════════
⌗ Tags: #platform #bug_bounty #cybersecurity #post #ethical_hacking
Medium
Bug Top Bug Bounty Platforms
The Real Difference Between Getting Paid and Getting Ghosted
12 views