Daily Writeups
@Daily_Writeups
3.53K subscribers
2 photos
129K links
Daily Bug Bounty / Cybersecurity Writeups
Source Code : https://github.com/Spix0r/writeup-miner
Download Telegram
About
Blog
Apps
Platform
Join
Daily Writeups
3.53K subscribers
Daily Writeups
⤷ Title: Seguridad Web: Guía de Explotación de Métodos HTTP y Bypass de WAF
════════════════════════
𐀪 Author: JPablo13
════════════════════════
ⴵ Time: Fri, 16 Jan 2026 00:02:50 GMT
════════════════════════
⌗ Tags: #cybersecurity #web_security #hacking #bug_bounty #technology
Medium
Seguridad Web: Guía de Explotación de Métodos HTTP y Bypass de WAF
Aprende a auditar métodos HTTP, detectar vulnerabilidades de control de acceso y realizar bypass de WAF de forma efectiva.
12 views
Daily Writeups
⤷ Title: The Visual Ghost: How a Single Unicode Character Led to a Critical Account Takeover on self hosted…
════════════════════════
𐀪 Author: Be nice insabat
════════════════════════
ⴵ Time: Thu, 15 Jan 2026 09:41:22 GMT
════════════════════════
⌗ Tags: #money #hacking #cybersecurity #programming #bug_bounty
Medium
critical Account takeover: How a Single Unicode Character Led to a Critical Account Takeover on self hosted bug bounty program
Assalam o alaikum muslims and hello for non muslims i hope all of u are doing great and keep learning every day, i am back with another…
15 views
Daily Writeups
⤷ Title: CAMBIO DE PARADIGMA — Seguridad de las Comunicaciones en Sistemas Modernos
════════════════════════
𐀪 Author: Fernando Flores Alvarado
════════════════════════
ⴵ Time: Fri, 16 Jan 2026 00:15:55 GMT
════════════════════════
⌗ Tags: #cybersecurity #owasp #application_security #distributed_systems #software_architecture
Medium
CAMBIO DE PARADIGMA — Seguridad de las Comunicaciones en Sistemas Modernos
Cuando proteger los extremos ya no es suficiente
18 views
Daily Writeups
⤷ Title: You’ve Been Hacked, Now What? A Step-By-Step Guide
════════════════════════
𐀪 Author: Emory French
════════════════════════
ⴵ Time: Thu, 15 Jan 2026 23:54:34 GMT
════════════════════════
⌗ Tags: #data_security #hacking #data_breach #cybersecurity #pci
Medium
You’ve Been Hacked, Now What? A Step-By-Step Guide
Finding out your business has been compromised is a scary moment. As a fellow business owner, I know that your first instinct is usually to…
28 views
Daily Writeups
⤷ Title: The Nim Shadow: Conquest C2 Redefines Stealth for 2026 Red Teams
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Fri, 16 Jan 2026 03:47:54 +0000
════════════════════════
⌗ Tags: #Open Source Tool #adversary simulation #Conquest C2 #Dear ImGui #evasion techniques #InfoSec 2026 #Monarch Agent #Nim Programming #Penetration Testing #post_exploitation #red teaming
Information Security News
The Nim Shadow: Conquest C2 Redefines Stealth for 2026 Red Teams
Conquest is a feature-rich, extensible and malleable command & control/post-exploitation framework developed for penetration testing and adversary simulation. Conquest’s team server, ope…
18 views
Daily Writeups
⤷ Title: The Final Sunset: Microsoft Kills Windows Server 2008 and Legacy Modem Drivers
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Fri, 16 Jan 2026 03:36:39 +0000
════════════════════════
⌗ Tags: #Windows #Agere Modem #CVE_2023_31096 #Legacy IT #Longhorn Server #Microsoft #Patch Tuesday 2026 #Premium Assurance #Windows 10 #Windows Server 2008 #Windows Vista
Penetration Testing Tools
The Final Sunset: Microsoft Kills Windows Server 2008 and Legacy Modem Drivers
This week marked the definitive conclusion of an era as Microsoft formally terminated support for Windows Server 2008,
11 views
Daily Writeups
⤷ Title: The Ghost in the Machine: UN Exposes North Korea’s $2B Deepfake IT Scam
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Fri, 16 Jan 2026 03:33:02 +0000
════════════════════════
⌗ Tags: #Cybercriminals #AI Fraud #Cryptocurrency Theft #Cybercrime 2026 #deepfakes #Global Security #IT Worker Scheme #Jonathan Fritz #MSMT #North Korea #Sanctions Evasion #United Nations
Penetration Testing Tools
The Ghost in the Machine: UN Exposes North Korea’s $2B Deepfake IT Scam
North Korea continues to amass billions of dollars through a sophisticated synthesis of cybercrime and fraudulent remote employment,
6 views
Daily Writeups
⤷ Title: Dismantling the Phish-Factory: Microsoft Seizes RedVDS Cybercrime Network
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Fri, 16 Jan 2026 03:31:03 +0000
════════════════════════
⌗ Tags: #Cybercriminals #BEC #cybercrime #Digital Crimes Unit #Europol #H2 Pharma #Infosec #Jan 2026 #Microsoft #phishing #RedVDS #Storm_2470
Penetration Testing Tools
Dismantling the Phish-Factory: Microsoft Seizes RedVDS Cybercrime Network
Microsoft has formally proclaimed the neutralization of RedVDS, a nefarious platform that, since 2019, provided cyber adversaries with
3 views
Daily Writeups
⤷ Title: The Crash Code: Node.js Issues Critical Fix for Framework-Breaking DoS Flaw
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Fri, 16 Jan 2026 03:26:52 +0000
════════════════════════
⌗ Tags: #Vulnerability #async_hooks #Datadog #DoS vulnerability #Infosec #Next.js #Node.js #OpenTelemetry #React Server Components #Security Update 2026 #Web Development
Penetration Testing Tools
The Crash Code: Node.js Issues Critical Fix for Framework-Breaking DoS Flaw
The Node.js development team has disseminated critical security updates to mitigate a high-severity vulnerability capable of precipitating a
6 views
Daily Writeups
⤷ Title: The Blockchain Ghost: DeadLock Ransomware Uses Smart Contracts to Defy Bans
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Fri, 16 Jan 2026 03:26:22 +0000
════════════════════════
⌗ Tags: #Cybercriminals #BYOVD #Cisco Talos #Cyber Security 2026 #DeadLock #EtherHiding #Group_IB #Infosec News #Polygon Blockchain #ransomware #Session App #smart contracts
Penetration Testing Tools
The Blockchain Ghost: DeadLock Ransomware Uses Smart Contracts to Defy Bans
The DeadLock syndicate, which emerged within the cyber threat landscape during the summer of 2025, persists as one
7 views
Daily Writeups
⤷ Title: Zombies in the Living Room: 2 Million Android TV Boxes Hijacked for Proxy Fraud
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Fri, 16 Jan 2026 03:24:28 +0000
════════════════════════
⌗ Tags: #Malware #AISURU #Android TV #Black Lotus Labs #BOTNET #ByteConnect #Cybersecurity 2026 #DDoS #Infosec News #Kimwolf #Lumen Technologies #Residential Proxies
Penetration Testing Tools
Zombies in the Living Room: 2 Million Android TV Boxes Hijacked for Proxy Fraud
Since the autumn of the previous year, the Black Lotus Labs team at Lumen Technologies has successfully decommissioned
11 views
Daily Writeups
⤷ Title: OpenAI Launches “ChatGPT Translate” to Rewrite the World
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Fri, 16 Jan 2026 03:19:14 +0000
════════════════════════
⌗ Tags: #Technology #AI Translation 2026 #ChatGPT Translate #Contextual AI #Google Translate #GPT_5.2 #Language Learning #Machine Translation #OpenAI #Personal Intelligence #Tech News
Penetration Testing Tools
OpenAI Launches "ChatGPT Translate" to Rewrite the World
OpenAI has unveiled its novel linguistic utility, ChatGPT Translate. Although the corporation has refrained from a formal proclamation,
6 views
Daily Writeups
⤷ Title: Beyond Words: OpenAI Launches “ChatGPT Translate” to Rewrite the World
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Fri, 16 Jan 2026 03:15:28 +0000
════════════════════════
⌗ Tags: #Technology #AI Translation 2026 #ChatGPT Translate #Contextual AI #Google Translate #GPT_5.2 #Language Learning #Machine Translation #OpenAI #Personal Intelligence #Tech News
Daily CyberSecurity
Beyond Words: OpenAI Launches "ChatGPT Translate" to Rewrite the World
OpenAI quietly launches ChatGPT Translate in Jan 2026, featuring AI refinement toggles for "Executive Formal" and "Child-Friendly" translations.
13 views
Daily Writeups
⤷ Title: Defeating the Epochalypse: GRUB 2.14 Arrives to Save Linux from Year 2038
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Fri, 16 Jan 2026 03:12:22 +0000
════════════════════════
⌗ Tags: #Linux #Argon2 #Bootloader #EROFS #GNU Project #GRUB 2.14 #NX Protection #Open Source 2026 #Secure Boot #TPM 2.0 #Year 2038
Daily CyberSecurity
Defeating the Epochalypse: GRUB 2.14 Arrives to Save Linux from Year 2038
GRUB 2.14 launches in Jan 2026, fixing the Year 2038 bug and adding Argon2, TPM 2.0, and EROFS support for the ultimate Linux boot security.
9 views
Daily Writeups
⤷ Title: Canon Critical Alert: 7 New Flaws Expose Printers to Remote Hackers
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Fri, 16 Jan 2026 03:03:59 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #buffer overflow #Canon #CVE_2025_14231 #firmware update #i_SENSYS #imageCLASS #IoT security #printer security #Remote Code Execution #Satera
Daily CyberSecurity
Canon Critical Alert: 7 New Flaws Expose Printers to Remote Hackers
Canon warns of 7 critical flaws (CVSS 9.8) in imageCLASS & i-SENSYS printers. Unauthenticated RCE risk. Update firmware immediately to secure devices.
7 views
Daily Writeups
⤷ Title: Zero-Day Threat: UAT-8837 Targets North American Infrastructure
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Fri, 16 Jan 2026 02:37:36 +0000
════════════════════════
⌗ Tags: #Cyber Security #APT #China_nexus #Cisco Talos #Critical Infrastructure #CVE_2025_53690 #infosec #Sitecore #supply chain attack #UAT_8837 #zero_day
Daily CyberSecurity
Zero-Day Threat: UAT-8837 Targets North American Infrastructure
A sophisticated threat actor, tentatively linked to China, is aggressively targeting critical infrastructure in North America with an arsenal of open-source tools and potential zero-day exploits. …
8 views
Daily Writeups
⤷ Title: 40,000 Hits in 4 Hours: RondoDox Botnet Storms HPE OneView
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Fri, 16 Jan 2026 02:28:29 +0000
════════════════════════
⌗ Tags: #Malware #botnet #Check Point Research #CISA #Critical Vulnerability #CVE_2025_37164 #cyber attack #HPE OneView #network_security #Remote Code Execution #RondoDox
Daily CyberSecurity
40,000 Hits in 4 Hours: RondoDox Botnet Storms HPE OneView
Check Point Research uncovered a massive, automated assault on HPE OneView. Researchers observed a botnet launching over 40,000 exploitation attempts in a span of just four hours, targeting a crit…
12 views
Daily Writeups
⤷ Title: DeadLock Ransomware: New Strain Hides C2 in Polygon Smart Contracts
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Fri, 16 Jan 2026 02:10:20 +0000
════════════════════════
⌗ Tags: #Cybercriminals #Blockchain security #C2 Infrastructure #Cyber Security #DeadLock #EtherHiding #Group_IB #Polygon Network #ransomware #Session Messenger #smart contracts
Daily CyberSecurity
DeadLock Ransomware: New Strain Hides C2 in Polygon Smart Contracts
A new ransomware family is turning the decentralized dream of blockchain into a cybersecurity nightmare. Analysts at Group-IB have uncovered DeadLock, a ransomware strain discovered in July 2025 t…
13 views
Daily Writeups
⤷ Title: One Click to Compromise: Microsoft Copilot’s “Reprompt” Flaw Exposed
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Fri, 16 Jan 2026 02:02:11 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #AI Assistant #AI security #Copilot Personal #Cyber Security #data exfiltration #Microsoft Copilot #Reprompt #Varonis Threat Labs #Vulnerability
Daily CyberSecurity
One Click to Compromise: Microsoft Copilot’s “Reprompt” Flaw Exposed
A new research report from Varonis Threat Labs has unveiled a vulnerability in Microsoft Copilot Personal that could have allowed attackers to steal sensitive data with a single mouse click. Dubbe…
14 views
Daily Writeups
⤷ Title: If You Had to Secure a Company With Only 5 Tools, What Would They Be?
════════════════════════
𐀪 Author: Paritosh
════════════════════════
ⴵ Time: Fri, 16 Jan 2026 02:28:09 GMT
════════════════════════
⌗ Tags: #ai #cybersecurity #bug_bounty #hacking #information_technology
Medium
If You Had to Secure a Company With Only 5 Tools, What Would They Be?
A brutally honest, real-world take — no vendor fluff
15 views
Daily Writeups
⤷ Title: Speedtest.net Privacy Issue: Why Sharing Your Results Can Expose Your IP
════════════════════════
𐀪 Author: Alanbiju
════════════════════════
ⴵ Time: Fri, 16 Jan 2026 02:12:51 GMT
════════════════════════
⌗ Tags: #internet_speed_test #bug_bounty
Medium
Speedtest.net Privacy Issue: Why Sharing Your Results Can Expose Your IP
In today’s increasingly connected digital world, online privacy is more critical than ever. Millions of users rely on tools like…
19 views