Daily Writeups
@Daily_Writeups
4.06K subscribers
4 photos
137K links
Daily Bug Bounty / Cybersecurity Writeups
Source Code : https://github.com/Spix0r/writeup-miner
Download Telegram
About
Blog
Apps
Platform
Join
Daily Writeups
4.06K subscribers
Daily Writeups
⤷ Title: “Browser-in-the-Browser” Attack Escalates: Trellix Reports Surge in Sophisticated Facebook Phishing
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Thu, 15 Jan 2026 00:18:49 +0000
════════════════════════
⌗ Tags: #Cybercriminals #BitB #Browser In The Browser #Credential Harvesting #Cyber Security #Facebook Security #Netlify #phishing #social engineering #Trellix #Vercel
Daily CyberSecurity
"Browser-in-the-Browser" Attack Escalates: Trellix Reports Surge in Sophisticated Facebook Phishing
Trellix warns: "Browser-in-the-Browser" phishing creates perfect fake Facebook login pop-ups. Learn how this invisible trap steals credentials.
20 views
Daily Writeups
⤷ Title: High-Severity Flaws in HPE Aruba Networking Expose Mobility Controllers to Attack
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Thu, 15 Jan 2026 00:11:39 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #AOS_10 #AOS_8 #Arbitrary File Deletion #Command Injection #CVE_2025_37168 #CVE_2025_37169 #Denial of Service #HPE Aruba Networking #network_security #Patch Alert
Daily CyberSecurity
High-Severity Flaws in HPE Aruba Networking Expose Mobility Controllers to Attack
HPE Aruba Networking has released a critical security advisory patching a swarm of vulnerabilities across its AOS-8 and AOS-10 operating systems. The flaws, which affect Mobility Conductors, Contr…
14 views
Daily Writeups
⤷ Title: “Magecart” Strikes Again: Long-Running Web Skimming Campaign Targets Global Payment Networks
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Thu, 15 Jan 2026 00:05:40 +0000
════════════════════════
⌗ Tags: #Cybercriminals #Credit card skimming #Cyber Crime #e_commerce security #JavaScript malware #Magecart #Online Shopping Security #Silent Push #Stripe Fraud #web skimming #WooCommerce
Daily CyberSecurity
“Magecart” Strikes Again: Long-Running Web Skimming Campaign Targets Global Payment Networks
A vast and persistent web-skimming campaign has been unearthed, targeting the checkout pages of online retailers to silently harvest credit card data from unsuspecting shoppers. Dubbed under the u…
13 views
Daily Writeups
⤷ Title: Command Injection Alert: High-Severity Flaws Hit LoadMaster & MOVEit WAF
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Thu, 15 Jan 2026 00:01:34 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #Application Delivery #Command Injection #CVE_2025_13444 #CVE_2025_13447 #LoadMaster #MOVEit WAF #network_security #Patch Alert #Progress Software #Remote Code Execution
Daily CyberSecurity
Command Injection Alert: High-Severity Flaws Hit LoadMaster & MOVEit WAF
Progress Software Corporation has kicked off the 2026 security calendar with an important update for its network infrastructure products. On January 12, 2026, the vendor released patches addressin…
17 views
Daily Writeups
⤷ Title: Case Study: Digital Forensics Investigation of an Insider Data Breach
════════════════════════
𐀪 Author: William Azaria Simanjuntak
════════════════════════
ⴵ Time: Wed, 14 Jan 2026 23:54:37 GMT
════════════════════════
⌗ Tags: #cybersecurity #security_analysis #digital_forensics #case_study #infosec
Medium
Case Study: Digital Forensics Investigation of an Insider Data Breach
Assignment 1: Digital Forensics
27 views
Daily Writeups
⤷ Title: TryHackMe: Year of the Rabbit Writeup
════════════════════════
𐀪 Author: cbev
════════════════════════
ⴵ Time: Thu, 15 Jan 2026 01:39:11 GMT
════════════════════════
⌗ Tags: #pentesting #tryhackme #cybersecurity #information_security
Medium
TryHackMe: Year of the Rabbit Writeup
This box is rated easy difficulty on THM. It involves us brute forcing an FTP login after finding a password list from hidden image data…
24 views
Daily Writeups
⤷ Title: SilentButDeadly: New Tool Blinds EDR Without Killing Processes
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Thu, 15 Jan 2026 03:42:42 +0000
════════════════════════
⌗ Tags: #Open Source Tool #Cybersecurity 2026 #EDR Bypass #EDR Silencing #Infosec #Network Isolation #Red Team #SilentButDeadly #Telemetry Blocking #WFP #Windows Filtering Platform
Penetration Testing Tools
SilentButDeadly: New Tool Blinds EDR Without Killing Processes
SilentButDeadly is a 2026 tool that uses the Windows Filtering Platform to blind EDR/AV by severing cloud links without stopping their processes.
18 views
Daily Writeups
⤷ Title: Collections Retired: Microsoft Edge Sunsets Research Tool Amid Data Loss Fears
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Thu, 15 Jan 2026 03:32:37 +0000
════════════════════════
⌗ Tags: #Technology #Browser Updates 2026 #Copilot #CSV Export #Data Loss #Edge Collections #microsoft edge #Microsoft Edge Dev #Sunsetting #Tech News #Web Research
Daily CyberSecurity
Collections Retired: Microsoft Edge Sunsets Research Tool Amid Data Loss Fears
Users enrolled in the Microsoft Edge Dev Channel may have recently encountered a disconcerting notification: Microsoft intends to sunset the Collections feature, after which users will be preclude…
14 views
Daily Writeups
⤷ Title: Powering the Boom: Microsoft Agrees to Trump’s “Self-Funding” Energy Mandate
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Thu, 15 Jan 2026 03:24:42 +0000
════════════════════════
⌗ Tags: #Technology #AI Infrastructure #Brad Smith #Community_First AI #data centers #Donald Trump #Energy Crisis 2026 #Microsoft #Power Grid #PUE #Truth Social #Utility Bills
Daily CyberSecurity
Powering the Boom: Microsoft Agrees to Trump’s “Self-Funding” Energy Mandate
While the advancement of artificial intelligence proceeds at a breakneck pace, its voracious appetite for energy has begun to manifest as a profound liability, emerging as a pivotal flashpoint in …
17 views
Daily Writeups
⤷ Title: The Anonymity Trap: New Telegram Flaw Leaks Real IPs via Proxy Links
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Thu, 15 Jan 2026 03:19:13 +0000
════════════════════════
⌗ Tags: #Data Leak #Android security #Anonymity #cybersecurity #iOS security #IP Leak #MTProto #Privacy Leak #Proxy Link #Telegram #Vulnerability 2026
Daily CyberSecurity
The Anonymity Trap: New Telegram Flaw Leaks Real IPs via Proxy Links
The Telegram development team has responded to security researchers’ reports concerning a vulnerability that facilitates the exfiltration of authentic IP addresses via maliciously crafted hy…
22 views
Daily Writeups
⤷ Title: CVE-2025-33206: High-Severity Flaw Patched in NVIDIA Nsight Graphics for Linux
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Thu, 15 Jan 2026 02:57:35 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #Command Injection #CVE_2025_33206 #Developer Tools #Graphics Debugging #Linux Security #Nsight Graphics #nvidia #Patch Alert #privilege escalation
Daily CyberSecurity
CVE-2025-33206: High-Severity Flaw Patched in NVIDIA Nsight Graphics for Linux
NVIDIA patches high-severity command injection in Nsight Graphics for Linux (CVE-2025-33206). Update to v2025.5 to prevent code execution.
17 views
Daily Writeups
⤷ Title: The $24 Criminal Tool: Microsoft & Police Shut Down RedVDS Fraud Engine
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Thu, 15 Jan 2026 02:38:22 +0000
════════════════════════
⌗ Tags: #Cybercriminals #Crime_as_a_Service #cyber fraud #Cybercrime Takedown #Digital Crimes Unit #Europol #H2_Pharma #Microsoft #Online Safety #RedVDS #Virtual Machines
Daily CyberSecurity
The $24 Criminal Tool: Microsoft & Police Shut Down RedVDS Fraud Engine
Microsoft & police seize RedVDS, a service providing disposable VMs for crime. The takedown stops a network responsible for over $40M in fraud losses.
13 views
Daily Writeups
⤷ Title: Palo Alto Networks Firewalls Hit by Unauthenticated GlobalProtect DoS Flaw
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Thu, 15 Jan 2026 02:12:16 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #CVE_2026_0227 #Denial of Service #firewall security #GlobalProtect #infosec #Maintenance Mode #network_security #Palo Alto Networks #PAN_OS #Patch Alert
Daily CyberSecurity
Palo Alto Networks Firewalls Hit by Unauthenticated GlobalProtect DoS Flaw
Palo Alto warns: CVE-2026-0227 forces GlobalProtect firewalls into maintenance mode. Unauthenticated DoS risk. Update PAN-OS immediately.
13 views
Daily Writeups
⤷ Title: Mitigating Common Web Vulnerabilities in a Flask CRUD Application: A Security Analysis
════════════════════════
𐀪 Author: Dionisius felysto
════════════════════════
ⴵ Time: Thu, 15 Jan 2026 02:53:51 GMT
════════════════════════
⌗ Tags: #python #cybersecurity #application_security #programming #web_development
Medium
Mitigating Common Web Vulnerabilities in a Flask CRUD Application: A Security Analysis
Executive Summary
18 views
Daily Writeups
⤷ Title: Network and Communications Security Part 4: IP Address Classes, Explained Without the Headache
════════════════════════
𐀪 Author: Manubhav Sharma
════════════════════════
ⴵ Time: Thu, 15 Jan 2026 03:32:48 GMT
════════════════════════
⌗ Tags: #cybersecurity #hacking #information_technology #security #networking
Medium
Network and Communications Security Part 4: IP Address Classes, Explained Without the Headache
27 views
Daily Writeups
⤷ Title: Sc0rp10n, el grupo hacker menos precavido.
════════════════════════
𐀪 Author: Nescoroco
════════════════════════
ⴵ Time: Thu, 15 Jan 2026 02:38:52 GMT
════════════════════════
⌗ Tags: #elecciones #hacking #exploit #hacker #mexico
Medium
Sc0rp10n, el grupo hacker menos precavido.
Sc0rp10n nunca destacó por su orden ni por su disciplina. Desde afuera, su operación siempre dio la impresión de improvisación constante…
26 views
Daily Writeups
⤷ Title: From “Looks Legit” to “Definitely Malicious”: Header Analysis Explained
════════════════════════
𐀪 Author: Paritosh
════════════════════════
ⴵ Time: Thu, 15 Jan 2026 04:55:21 GMT
════════════════════════
⌗ Tags: #malicious #bug_bounty #phishing #hacking #cybersecurity
Medium
From “Looks Legit” to “Definitely Malicious”: Header Analysis Explained
At first glance, many phishing emails look perfectly legitimate.
32 views
Daily Writeups
⤷ Title: AI Hacking Lab
════════════════════════
𐀪 Author: Dael Chávez
════════════════════════
ⴵ Time: Thu, 15 Jan 2026 04:09:50 GMT
════════════════════════
⌗ Tags: #generative_ai_tools #hacking #ai #cybersecurity #red_team
Medium
AI Hacking Lab
In this lab, we are going to configure Claude in conjunction with Metasploit to perform an automated penetration test.
28 views
Daily Writeups
⤷ Title: The Internet’s Greatest Mystery How an Anonymous Puzzle Hunted the World’s Smartest Minds And Then…
════════════════════════
𐀪 Author: Mark L. Hill
════════════════════════
ⴵ Time: Thu, 15 Jan 2026 04:03:57 GMT
════════════════════════
⌗ Tags: #cryptography #cybersecurity #unsolved_mysteries #hacking #technology
Medium
The Internet’s Greatest Mystery How an Anonymous Puzzle Hunted the World’s Smartest Minds And Then Vanished
It started with a single image on a random Tuesday in January 2012.
24 views
Daily Writeups
⤷ Title: Building a Secure, Enterprise-Grade API with AWS: A Deep Dive into API Gateway, Route53, Custom…
════════════════════════
𐀪 Author: Sasmitha Dasanayaka
════════════════════════
ⴵ Time: Wed, 14 Jan 2026 21:43:41 GMT
════════════════════════
⌗ Tags: #aws_cdk #aws_route53 #lambda_authorizer #api_security #aws_private_api_gateway
Medium
Building a Secure, Enterprise-Grade API with AWS: A Deep Dive into API Gateway, Custom Domains, and…
Introduction
35 views
Daily Writeups
⤷ Title: Grok dan Buruk Wajah Industri AI
════════════════════════
𐀪 Author: Khoirul Rifai
════════════════════════
ⴵ Time: Thu, 15 Jan 2026 04:48:40 GMT
════════════════════════
⌗ Tags: #grok #media_monitoring #jangkara #social_media_monitoring #xs
Medium
Grok dan Buruk Wajah Industri AI
Pemerintah Indonesia melalui Kementerian Komunikasi, Informasi, dan Digital (Komdigi) resmi memblokir penggunaan Grok di platform X…
36 views