Daily Writeups
@Daily_Writeups
3.83K subscribers
4 photos
134K links
Daily Bug Bounty / Cybersecurity Writeups
Source Code : https://github.com/Spix0r/writeup-miner
Download Telegram
About
Blog
Apps
Platform
Join
Daily Writeups
3.83K subscribers
Daily Writeups
⤷ Title: Emerging Operator “0-P” Announces c0bra-ransomware
════════════════════════
𐀪 Author: Cybersec News
════════════════════════
ⴵ Time: Tue, 13 Jan 2026 02:42:02 GMT
════════════════════════
⌗ Tags: #threat_intelligence #hacking #frontpage #cybersecurity
Medium
Emerging Operator “0-P” Announces c0bra-ransomware
No Known Attacks Yet — But Defenders Should Treat the Claim Seriously
27 views
Daily Writeups
⤷ Title: Lightning Strike: Testing Salesforce Security with the Auraditor Extension
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Tue, 13 Jan 2026 04:12:16 +0000
════════════════════════
⌗ Tags: #Open Source Tool #Apex #API Testing #AppSec #Aura Framework #Auraditor #Burp Suite #IDOR #LWC #Penetration Testing #Salesforce Lightning #Salesforce Security #Security Audit
Penetration Testing Tools
Lightning Strike: Testing Salesforce Security with the Auraditor Extension
Auraditor for Burp Suite is the ultimate tool for Salesforce Lightning security audits, featuring Aura action editing and LWC endpoint discovery.
24 views
Daily Writeups
⤷ Title: The AI Alliance: Apple Taps Google Gemini to Power the New Siri
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Tue, 13 Jan 2026 04:08:09 +0000
════════════════════════
⌗ Tags: #Apple #Google #Apple Intelligence #Gemini #Generative AI #google #iOS 26 #Private Cloud Compute #Siri #Sundar Pichai #Tim Cook #WWDC 2026
Penetration Testing Tools
The AI Alliance: Apple Taps Google Gemini to Power the New Siri
Apple has resolved to fortify its artificial intelligence capabilities through the most direct avenue possible: by leveraging the
18 views
Daily Writeups
⤷ Title: The Great VM Escape: MAESTRO Toolkit Breaks VMware Isolation
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Tue, 13 Jan 2026 04:07:16 +0000
════════════════════════
⌗ Tags: #Vulnerability #BYOVD #CVE_2025_22224 #Cyber Security 2026 #ESXi #Huntress #hypervisor #MAESTRO #SonicWall #VM Escape #vmware #VSOCKpuppet #zero_day
Penetration Testing Tools
The Great VM Escape: MAESTRO Toolkit Breaks VMware Isolation
Virtual machines are often perceived as impenetrable bastions for risk assessment, operating under the assumption that the host
31 views
Daily Writeups
⤷ Title: The Minting Glitch: How a 5-Year-Old Bug Cost Truebit $26 Million
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Tue, 13 Jan 2026 04:05:04 +0000
════════════════════════
⌗ Tags: #Vulnerability #Blockchain Security #DeFi Hack 2026 #Ethereum #Halborn #Integer Overflow #SlowMist #Smart Contract Exploit #Tornado Cash #TRU Token #Truebit Protocol
Penetration Testing Tools
The Minting Glitch: How a 5-Year-Old Bug Cost Truebit $26 Million
In early January 2026, a sophisticated adversary identified a critical vulnerability within the purchase and minting contract of
15 views
Daily Writeups
⤷ Title: Kill it with Poison: The “Poison Fountain” Plan to Break AI for Good
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Tue, 13 Jan 2026 04:03:11 +0000
════════════════════════
⌗ Tags: #Technology #Adversarial AI #AI Data Poisoning #AI safety #Anthropic Research #machine learning #Model Collapse #Poison Fountain #Tech Sabotage #The Register #Tor Network
Penetration Testing Tools
Kill it with Poison: The "Poison Fountain" Plan to Break AI for Good
A vanguard and decidedly audacious initiative has emerged within the artificial intelligence sector, designed to subvert the efficacy
14 views
Daily Writeups
⤷ Title: The Truman Show Scam: AI “Trust Factories” Creating Fake Investment Realities
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Tue, 13 Jan 2026 04:01:14 +0000
════════════════════════
⌗ Tags: #Cybercriminals #AI Fraud #Check Point Research #Crypto Fraud #deepfakes #Financial Security #identity theft #Investment Scams 2026 #OPCOPRO #Social Engineering #Truman Show Scam #WhatsApp Scams
Penetration Testing Tools
The Truman Show Scam: AI "Trust Factories" Creating Fake Investment Realities
Fraudulent investment stratagems are increasingly assuming a hyper-realistic façade, meticulously augmented by the advancements of artificial intelligence. Researchers
15 views
Daily Writeups
⤷ Title: Hikvision Security Cameras and Access Controls Hit by Stack Overflow Flaws
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Tue, 13 Jan 2026 03:04:10 +0000
════════════════════════
⌗ Tags: #Vulnerability #Access Control #Cisco Talos #Denial of Service #Hikvision #IP Camera Security #Network Video Recorder #Physical Security #stack overflow
Daily CyberSecurity
Hikvision Security Cameras and Access Controls Hit by Stack Overflow Flaws
High-severity Hikvision stack overflow flaws (CVE-2025-66176) allow attackers to crash cameras & NVRs via LAN. Update firmware now to prevent DoS.
9 views
Daily Writeups
⤷ Title: AI Identity Theft: Critical ServiceNow Flaw (CVE-2025-12420) Allows Unauthenticated Impersonation
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Tue, 13 Jan 2026 02:59:19 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #AI security #AppOmni #Cloud Security #CVE_2025_12420 #Identity Spoofing #Patch Alert #privilege escalation #SaaS Security #ServiceNow #Virtual Agent
Daily CyberSecurity
AI Identity Theft: Critical ServiceNow Flaw (CVE-2025-12420) Allows Unauthenticated Impersonation
Critical ServiceNow AI flaw (CVE-2025-12420) allows unauthenticated user impersonation. Self-hosted users: update Now Assist & Virtual Agent immediately.
15 views
Daily Writeups
⤷ Title: CISA “Must-Patch” Alert: Critical Gogs Exploit CVE-2025-8110 Active in Wild
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Tue, 13 Jan 2026 02:27:08 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #CISA #CVE_2024_55947 #CVE_2025_8110 #DevSecOps #Git Security #Gogs #KEV List #Remote Code Execution #vulnerability management #Wiz Research
Daily CyberSecurity
CISA “Must-Patch” Alert: Critical Gogs Exploit CVE-2025-8110 Active in Wild
The Cybersecurity and Infrastructure Security Agency (CISA) has added a dangerous new entry to its “Must-Patch” list, warning that a popular tool used by developers worldwide is active…
16 views
Daily Writeups
⤷ Title: Attackers Weaponize Legitimate RMM Tools via Fake PDFs
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Tue, 13 Jan 2026 02:12:20 +0000
════════════════════════
⌗ Tags: #Cybercriminals #ASEC #cyber attacks #living_off_the_land #Malware Analysis #NinjaOne #NSIS #PDF Malware #phishing #RMM Abuse #ScreenConnect #SuperOps #Syncro
Daily CyberSecurity
Attackers Weaponize Legitimate RMM Tools via Fake PDFs
In a new report, the AhnLab Security Intelligence Center (ASEC) warns of a rising trend where threat actors are hijacking powerful Remote Monitoring and Management (RMM) software to infiltrate vic…
17 views
Daily Writeups
⤷ Title: Remote Code Execution (RCE) Zafiyeti
════════════════════════
𐀪 Author: Halil Ibrahim Eroglu
════════════════════════
ⴵ Time: Tue, 13 Jan 2026 05:04:56 GMT
════════════════════════
⌗ Tags: #penetration_testing #rce #vulnerability #cybersecurity #web_security
Medium
Remote Code Execution (RCE) Zafiyeti
Bazı zafiyetler can sıkar, bazıları sistemi yavaşlatır; ancak Remote Code Execution (RCE), bilgisayarınızı saldırgana teslim eder. Bir…
23 views
Daily Writeups
⤷ Title: Active Directory Hardening — Writeup
════════════════════════
𐀪 Author: Mahir
════════════════════════
ⴵ Time: Tue, 13 Jan 2026 05:35:27 GMT
════════════════════════
⌗ Tags: #windows #tryhackme #cybersecurity #active_directory #tryhackme_writeup
Medium
Active Directory Hardening — Writeup
This is a short writeup for the TryHackMe room — Active Directory Hardening
28 views
Daily Writeups
⤷ Title: TryHackMe SOC Level 1 (2026 Update): Revamped Rooms + Cold Start Tickets + Full Video Walkthroughs
════════════════════════
𐀪 Author: ayed djalil
════════════════════════
ⴵ Time: Tue, 13 Jan 2026 05:11:28 GMT
════════════════════════
⌗ Tags: #soc #tryhackme #soc_level_1 #the_cold_start #tryhackme_walkthrough
Medium
TryHackMe SOC Level 1 (2026 Update): Revamped Rooms + Cold Start Tickets + Full Video Walkthroughs
The TryHackMe SOC Level 1 learning path has been rebuilt into a more practical, job-aligned track for junior analysts focused on real SOC…
39 views
Daily Writeups
⤷ Title: Request Authenticity Checks in PHP That Don’t Use Tokens
════════════════════════
𐀪 Author: Asian Digital Hub
════════════════════════
ⴵ Time: Tue, 13 Jan 2026 05:13:40 GMT
════════════════════════
⌗ Tags: #api_security #web_security #php_developers #php #programming_tips
Medium
Request Authenticity Checks in PHP That Don’t Use Tokens
Every PHP backend eventually hits this moment: traffic is flowing, APIs are humming, and then boom - requests start showing up that feel…
37 views
Daily Writeups
⤷ Title: When a Checkout Page Leaks Your Session
════════════════════════
𐀪 Author: Monika sharma
════════════════════════
ⴵ Time: Tue, 13 Jan 2026 06:21:22 GMT
════════════════════════
⌗ Tags: #technology #bug_bounty #cybersecurity #hacking #penetration_testing
Medium
When a Checkout Page Leaks Your Session
Breaking Down a Real Reflected XSS in WordPress Checkout Flow
28 views
Daily Writeups
⤷ Title: Bypassing SSRF Protections: A $10,000 Lesson from Slack
════════════════════════
𐀪 Author: Abhishek meena
════════════════════════
ⴵ Time: Tue, 13 Jan 2026 06:16:16 GMT
════════════════════════
⌗ Tags: #infosec #bug_bounty_tips #ssrf #hacking #bug_bounty
Medium
Bypassing SSRF Protections: A $10,000 Lesson from Slack
How a Simple DNS Rebinding Attack Led to Internal Network Access
26 views
Daily Writeups
⤷ Title: 10 Psychology-Based Detection Tactics Blue Teams Use: Master How Defenders Outsmart Attackers
════════════════════════
𐀪 Author: Very Lazy Tech
════════════════════════
ⴵ Time: Tue, 13 Jan 2026 07:17:27 GMT
════════════════════════
⌗ Tags: #bug_bounty #psychology #hacking #cybersecurity #cyberattack
Medium
10 Psychology-Based Detection Tactics Blue Teams Use: Master How Defenders Outsmart Attackers
Ever wonder why even the most advanced attackers sometimes walk right into a trap? Turns out, the sharpest blue teams don’t just rely on…
19 views
Daily Writeups
⤷ Title: When a Checkout Page Leaks Your Session
════════════════════════
𐀪 Author: Monika sharma
════════════════════════
ⴵ Time: Tue, 13 Jan 2026 06:21:21 GMT
════════════════════════
⌗ Tags: #technology #bug_bounty #cybersecurity #hacking #penetration_testing
Medium
When a Checkout Page Leaks Your Session
Breaking Down a Real Reflected XSS in WordPress Checkout Flow
24 views
Daily Writeups
⤷ Title: DevSecOps Pipeline: Güvenli Yazılım Dağıtımı için CI/CD Yaklaşımı
════════════════════════
𐀪 Author: Dehaberkin
════════════════════════
ⴵ Time: Tue, 13 Jan 2026 07:53:15 GMT
════════════════════════
⌗ Tags: #devsecops #devsecops_solutions #application_security #cybersecurity #uygulama_güvenliği
Medium
DevSecOps Pipeline: Güvenlik Odaklı CI/CD Mimarisi
Yazılım geliştirme süreçlerinde güvenliği yalnızca “canlıya çıkmadan önce yapılan bir kontrol” olarak ele almak, pratikte çoğu zaman…
18 views
Daily Writeups
⤷ Title: Forging a JWT to Break Into the OopsSec Store Admin Panel
════════════════════════
𐀪 Author: OopsSec Store
════════════════════════
ⴵ Time: Tue, 13 Jan 2026 07:46:47 GMT
════════════════════════
⌗ Tags: #cybersecurity #hacking #web_development #jwt #programming
Medium
Forging a JWT to Break Into the OopsSec Store Admin Panel
A single missing signature lets you walk straight into the admin dashboard
15 views