Daily Writeups
@Daily_Writeups
3.52K subscribers
2 photos
129K links
Daily Bug Bounty / Cybersecurity Writeups
Source Code : https://github.com/Spix0r/writeup-miner
Download Telegram
About
Blog
Apps
Platform
Join
Daily Writeups
3.52K subscribers
Daily Writeups
⤷ Title: TryHackMe: K2 (Base Camp) Writeup
════════════════════════
𐀪 Author: cbev
════════════════════════
ⴵ Time: Mon, 12 Jan 2026 06:31:25 GMT
════════════════════════
⌗ Tags: #information_security #cybersecurity #tryhackme #pentesting
Medium
TryHackMe: K2 (Base Camp) Writeup
This is the first installment of a three part box. It is rated hard difficulty on THM and includes both Linux and Windows/AD components.
22 views
Daily Writeups
⤷ Title: Post-Quantum Readiness for Banking APIs: What to Do Now
════════════════════════
𐀪 Author: Mavidev Software And Consulting Co.
════════════════════════
ⴵ Time: Mon, 12 Jan 2026 07:02:51 GMT
════════════════════════
⌗ Tags: #financial_technology #post_quantum_cryptography #digital_banking #api_security #cyber_risk_management
Medium
When Quantum Meets Banking: Preparing APIs Before It’s Too Late
Prepare banking APIs for the quantum era with crypto-agility, algorithm migration, and step-by-step readiness strategies.
31 views
Daily Writeups
⤷ Title: Content Security Policy (CSP) Explained: Simple Guide for XSS Defense
════════════════════════
𐀪 Author: Muhammed Asfan | Cybersecurity Analyst
════════════════════════
ⴵ Time: Mon, 12 Jan 2026 06:08:57 GMT
════════════════════════
⌗ Tags: #web #csp #bug_bounty_tips #bug_bounty_writeup #cybersecurity
Medium
Content Security Policy (CSP) Explained: Simple Guide for XSS Defense
If you build or hack web applications, you’ve probably seen the Content-Security-Policy header and ignored it because it looks noisy and…
42 views
Daily Writeups
⤷ Title: Anthropic Launches Claude AI for Healthcare with Secure Health Record Access
════════════════════════
𐀪 Author: Unknown
════════════════════════
ⴵ Time: Mon, 12 Jan 2026 14:07:00 +0530
════════════════════════
⌗ Tags: No_Tags
36 views
Daily Writeups
⤷ Title: Researchers Uncover Service Providers Fueling Industrial-Scale Pig Butchering Fraud
════════════════════════
𐀪 Author: Unknown
════════════════════════
ⴵ Time: Mon, 12 Jan 2026 13:04:00 +0530
════════════════════════
⌗ Tags: No_Tags
38 views
Daily Writeups
⤷ Title: Fact or Flaw? Instagram Denies 17M User Breach Amid Password Reset Chaos
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Mon, 12 Jan 2026 08:30:36 +0000
════════════════════════
⌗ Tags: #Data Leak #API Leak #BreachForums #Cybersecurity 2026 #data breach #Instagram #Malwarebytes #Meta #Password Reset #phishing #Social Media Security
Information Security News
Fact or Flaw? Instagram Denies 17M User Breach Amid Password Reset Chaos
Instagram has formally denied allegations of a breach, notwithstanding a deluge of disconcerting password-reset notifications received by users in recent days. The corporation maintains that these…
40 views
Daily Writeups
⤷ Title: The Metadata Trap: How WhatsApp Silently Reveals Your Phone Type to Hackers
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Mon, 12 Jan 2026 08:24:04 +0000
════════════════════════
⌗ Tags: #Vulnerability #Android vs iOS #cryptography #Cyber Espionage #end_to_end encryption #fingerprinting #InfoSec 2026 #Meta #metadata #privacy #Tal Be'ery #WhatsApp
Information Security News
The Metadata Trap: How WhatsApp Silently Reveals Your Phone Type to Hackers
WhatsApp, a subsidiary of Meta, has long served as a primary conduit for sophisticated cyber incursions. With a monthly active user base exceeding three billion, the platform presents an extraordi…
20 views
Daily Writeups
⤷ Title: The Cyber Slump: JLR Sales Crater After “Costliest Hack in UK History”
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Mon, 12 Jan 2026 08:22:22 +0000
════════════════════════
⌗ Tags: #Cybercriminals #2026 Tech News #Automotive News #cyberattack #Defender #Jaguar Land Rover #JLR #Q3 2026 #Range Rover #Supply Chain #Tata Motors #US Tariffs
Information Security News
The Cyber Slump: JLR Sales Crater After “Costliest Hack in UK History”
Jaguar Land Rover has disclosed its wholesale and retail performance metrics for the third quarter of fiscal year 2026, which concluded on December 31, 2025. The findings depict a grueling period;…
10 views
Daily Writeups
⤷ Title: The WhatsApp Worm: “Boto Cor-de-Rosa” Campaign Weaponizes Social Trust
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Mon, 12 Jan 2026 08:21:17 +0000
════════════════════════
⌗ Tags: #Cybercriminals #2026 Cyber Attacks #Acronis #Astaroth #banking trojan #Boto Cor_de_Rosa #Brazil #Guildma #python #Social Engineering #Visual Basic #WhatsApp
Information Security News
The WhatsApp Worm: “Boto Cor-de-Rosa” Campaign Weaponizes Social Trust
A sophisticated malware campaign has surfaced in Brazil, leveraging the ubiquity of WhatsApp to propagate the Astaroth banking trojan. This delivery vector has proven exceptionally potent given th…
12 views
Daily Writeups
⤷ Title: Operation Black Axe: 34 Arrested in Spain as Global Fraud Syndicate Topples
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Mon, 12 Jan 2026 08:19:30 +0000
════════════════════════
⌗ Tags: #Cybercriminals #Black Axe #Business Email Compromise #Cybercrime 2026 #Europol #Financial Fraud #Interpol Operation Jackal #Money Laundering #Organized Crime #Spanish National Police #West African Syndicate
Information Security News
Operation Black Axe: 34 Arrested in Spain as Global Fraud Syndicate Topples
A coordinated international endeavor, spearheaded by the Spanish National Police and bolstered by the expertise of Europol and the Bavarian Criminal Police, has culminated in the apprehension of 3…
11 views
Daily Writeups
⤷ Title: The AI Reconnaissance: 91,000 Attacks Target Exposed LLM Infrastructure
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Mon, 12 Jan 2026 08:18:00 +0000
════════════════════════
⌗ Tags: #Cybercriminals #2026 Tech News #AI Vulnerabilities #Claude #Cyber Reconnaissance #GPT_4o #GreyNoise #Llama 3 #LLM Security #OAST #Ollama #ProjectDiscovery #SSRF
Information Security News
The AI Reconnaissance: 91,000 Attacks Target Exposed LLM Infrastructure
Adversaries have embarked upon a pervasive reconnaissance of the internet, systematically identifying misconfigured proxy servers that facilitate unauthorized access to commercial services predica…
15 views
Daily Writeups
⤷ Title: The Square Trap: FBI Warns of North Korean “Quishing” Campaigns
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Mon, 12 Jan 2026 08:13:12 +0000
════════════════════════
⌗ Tags: #Cybercriminals #2026 Security News #Cyber Espionage #FBI #Google Find My Device #Kimsuky #KONNI #MFA Bypass #North Korea #phishing #QR Codes #Quishing
Information Security News
The Square Trap: FBI Warns of North Korean “Quishing” Campaigns
North Korean cyber adversaries have intensified their deployment of QR codes to facilitate credential exfiltration and circumvent enterprise security perimeters. The FBI has issued a formal warnin…
11 views
Daily Writeups
⤷ Title: The Professionalized Underground: Chainalysis Reveals $154B in Illicit Crypto Flows
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Mon, 12 Jan 2026 08:11:55 +0000
════════════════════════
⌗ Tags: #Cybercriminals #2026 Tech News #A7A5 Stablecoin #Bybit Hack #Chainalysis #Crypto Crime #Money Laundering #North Korea #Russia #Sanctions Evasion #Stablecoins #Web3 Security
Information Security News
The Professionalized Underground: Chainalysis Reveals $154B in Illicit Crypto Flows
By 2025, the subterranean cryptocurrency landscape had decisively transcended its origins as a chaotic bazaar of dubious schemes, coalescing into a sophisticated ecosystem defined by established h…
7 views
Daily Writeups
⤷ Title: Double Blow in Caracas: Y Combinator-Backed Kontigo Paralyzed by Second Breach
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Mon, 12 Jan 2026 08:10:19 +0000
════════════════════════
⌗ Tags: #Cybercriminals #2026 Hack #Camilo Sanchez #Caracas #Crypto Security #cyber attack #fintech #Kontigo #Neobank #USDC #Venezuela #Y Combinator
Information Security News
Double Blow in Caracas: Y Combinator-Backed Kontigo Paralyzed by Second Breach
Kontigo, a nascent enterprise bolstered by the Y Combinator accelerator and a formidable $22 million capital injection in 2025, has succumbed to yet another cybernetic incursion, necessitating a t…
5 views
Daily Writeups
⤷ Title: The Silent Exit: Microsoft Grants Admins a New Tool to Purge Copilot
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Mon, 12 Jan 2026 08:09:50 +0000
════════════════════════
⌗ Tags: #Windows #App Management #Build 26220.7535 #Copilot #enterprise security #Group Policy #IT Administration #Microsoft #Windows 11 #Windows 11 25H2 #Windows Insider
Information Security News
The Silent Exit: Microsoft Grants Admins a New Tool to Purge Copilot
Should the Microsoft Copilot application have “spontaneously” taken up residence on your managed corporate workstations, occupying valuable digital real estate, Microsoft has introduce…
9 views
Daily Writeups
⤷ Title: The Ghost in the Terminal: How “Ghost Tap” Malware Hijacks Your NFC Card
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Mon, 12 Jan 2026 08:07:46 +0000
════════════════════════
⌗ Tags: #Cybercriminals #Android malware #Contactless Fraud #Cybercrime 2026 #Ghost Tap #Group_IB #mobile security #NFC Relay #NFU Pay #Point of Sale #TX_NFC
Information Security News
The Ghost in the Terminal: How “Ghost Tap” Malware Hijacks Your NFC Card
Group-IB researchers have identified a burgeoning proliferation of Android malware within subterranean marketplaces designed to exploit Near Field Communication (NFC) technology for fraudulent con…
16 views
Daily Writeups
⤷ Title: The Hype Hangover: Dell Admits Consumers Aren’t Buying the “AI PC” Narrative
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Mon, 12 Jan 2026 08:34:04 +0000
════════════════════════
⌗ Tags: #Technology #AI PC #CES 2026 #Consumer Tech #dell #Intel Panther Lake #Laptop Trends #Microsoft Copilot #NPU #Tech Industry News #XPS
Daily CyberSecurity
The Hype Hangover: Dell Admits Consumers Aren’t Buying the “AI PC” Narrative
Over the past biennium, the vanguard of the technology sector—including silicon titans such as Intel, AMD, and Qualcomm, alongside the architectural behemoth Microsoft—has exerted monumental effor…
16 views
Daily Writeups
⤷ Title: How I Found 124,000 Leaked PII Records in AT&T
════════════════════════
𐀪 Author: 0xMicho
════════════════════════
ⴵ Time: Mon, 12 Jan 2026 09:43:39 GMT
════════════════════════
⌗ Tags: #bug_bounty #cybersecurity
Medium
How I Found 124,000 Leaked PII Records in AT&T
"”فَرِحِينَ بِمَا آتَاهُمُ اللَّهُ مِن فَضْلِهِ"
15 views
Daily Writeups
⤷ Title: The Tiny Auth Misstep That Hid a Login Bypass for Three Years
════════════════════════
𐀪 Author: 1$ Mistake
════════════════════════
ⴵ Time: Mon, 12 Jan 2026 08:25:23 GMT
════════════════════════
⌗ Tags: #login #bug_bounty #bypass #hacking #misconfiguration
Medium
The Tiny Auth Misstep That Hid a Login Bypass for Three Years
Imagine logging into your company dashboard one Monday morning and seeing a customer record you shouldn’t see.
14 views
Daily Writeups
⤷ Title: Belajar dari Logic Error: Saat Bug Berubah Menjadi Kerugian
════════════════════════
𐀪 Author: Hanifsholihin
════════════════════════
ⴵ Time: Mon, 12 Jan 2026 08:03:21 GMT
════════════════════════
⌗ Tags: #dumbwaysindonesia #logic_error #bug_bounty #programming
Medium
Belajar dari Logic Error: Saat Bug Berubah Menjadi Kerugian
Melihat layar penuh dengan pesan error berwarna merah rasanya seperti melihat kiamat kecil. Muncul rasa panik, bingung, bahkan keinginan…
13 views
Daily Writeups
⤷ Title: IP Whitelist Bypass via Partial String Matching in n8n Webhook Node (CVE-2025–68949)
════════════════════════
𐀪 Author: Berk Dedekargınoğlu
════════════════════════
ⴵ Time: Mon, 12 Jan 2026 09:26:29 GMT
════════════════════════
⌗ Tags: #vulnerability #information_security #red_team #cybersecurity #application_security
Medium
IP Whitelist Bypass via Partial String Matching in n8n Webhook Node (CVE-2025–68949)
Introduction
13 views