Daily Writeups
@Daily_Writeups
3.56K subscribers
2 photos
130K links
Daily Bug Bounty / Cybersecurity Writeups
Source Code : https://github.com/Spix0r/writeup-miner
Download Telegram
About
Blog
Apps
Platform
Join
Daily Writeups
3.56K subscribers
Daily Writeups
⤷ Title: Sitting Ducks and Scammy Notifications: Inside a Global Malvertising Operation
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Mon, 19 Jan 2026 00:32:03 +0000
════════════════════════
⌗ Tags: #Cybercriminals #Ad Fraud #Android security #Cyber Crime #Cyber Hygiene #DNS hijacking #DNS Vulnerability #Infoblox #Malvertising #Push Notification Scam #Sitting Ducks
Daily CyberSecurity
Sitting Ducks and Scammy Notifications: Inside a Global Malvertising Operation
Researchers at Infoblox have peeled back the curtain on a massive, deceptive push notification network, revealing how poor DNS hygiene and “Sitting Ducks” vulnerabilities are fueling a…
16 views
Daily Writeups
⤷ Title: Unpatched RCE: Livewire Filemanager Upload Flaw (CVE-2025-14894) Exposes Laravel Apps
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Mon, 19 Jan 2026 00:27:13 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #CVE_2025_14894 #File Upload Vulnerability #Laravel #Livewire Filemanager #PHP Security #Remote Code Execution #Unpatched Vulnerability #Web Security
Daily CyberSecurity
Unpatched RCE: Livewire Filemanager Upload Flaw (CVE-2025-14894) Exposes Laravel Apps
A critical new security flaw has been unearthed in Livewire Filemanager, a popular tool used within the Laravel PHP framework, potentially leaving web applications wide open to unauthenticated rem…
24 views
Daily Writeups
⤷ Title: KnownSec Data Leak Exposes State-Aligned Cyber Espionage Pipeline
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Mon, 19 Jan 2026 00:22:49 +0000
════════════════════════
⌗ Tags: #Data Leak #APT #China MPS #cyber_espionage #data leak #DomainTools #GhostX #infosec #KnownSec #Passive Radar #Un_Mail #zoomeye
Daily CyberSecurity
KnownSec Data Leak Exposes State-Aligned Cyber Espionage Pipeline
A massive data leak from KnownSec, a prominent Beijing-based cybersecurity firm, has exposed the inner workings of a sophisticated, state-aligned cyber espionage apparatus. The leaked documents, i…
21 views
Daily Writeups
⤷ Title: Bluetooth “Heartbleed” and DoS Flaws Found in Xiaomi Redmi Buds, No Patch
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Mon, 19 Jan 2026 00:19:21 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #Audio Security #Bluetooth security #CERT/CC #CVE_2025_13328 #CVE_2025_13834 #Denial of Service #Heartbleed #Privacy Leak #Redmi Buds #Xiaomi
Daily CyberSecurity
Bluetooth “Heartbleed” and DoS Flaws Found in Xiaomi Redmi Buds, No Patch
A pair of critical vulnerabilities has been discovered in Xiaomi’s popular Redmi Buds series, exposing users to privacy leaks and persistent denial-of-service (DoS) attacks. According to a new vul…
17 views
Daily Writeups
⤷ Title: Invisible Intruder: Fileless Remcos RAT Hides in Shipping Emails
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Mon, 19 Jan 2026 00:15:56 +0000
════════════════════════
⌗ Tags: #Vulnerability #CVE_2017_11882 #Cyber Security #Fileless Malware #FortiGuard Labs #Malware Analysis #phishing #Process Hollowing #Remcos RAT #steganography
Daily CyberSecurity
Invisible Intruder: Fileless Remcos RAT Hides in Shipping Emails
A sophisticated new phishing campaign has been detected in the wild, leveraging a fileless variant of the notorious Remcos RAT (Remote Access Trojan) to evade detection and seize control of victim…
25 views
Daily Writeups
⤷ Title: Critical Deno Flaws Risk Secrets (CVE-2026-22863) & Execution (CVE-2026-22864)
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Mon, 19 Jan 2026 00:14:29 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #Command Injection #cryptography #CVE_2026_22863 #CVE_2026_22864 #Deno #JavaScript Security #Node.js Compatibility #Patch Alert #Windows Security
Daily CyberSecurity
Critical Deno Flaws Risk Secrets (CVE-2026-22863) & Execution (CVE-2026-22864)
Deno, CVE-2026-22863, CVE-2026-22864, JavaScript Security, Cryptography, Command Injection, Windows Security, Node.js Compatibility, Patch Alert
31 views
Daily Writeups
⤷ Title: New “LOTUSLITE” Backdoor Targets U.S. Government in Suspected Mustang Panda Campaign
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Mon, 19 Jan 2026 00:11:03 +0000
════════════════════════
⌗ Tags: #Cyber Security #Malware #Acronis TRU #APT #DLL Sideloading #Espionage #LOTUSLITE #Malware Analysis #Mustang Panda #spear_phishing #US government
Daily CyberSecurity
New “LOTUSLITE” Backdoor Targets U.S. Government in Suspected Mustang Panda Campaign
A new espionage campaign targeting U.S. government entities has been uncovered, utilizing a custom backdoor dubbed LOTUSLITE. Researchers from the Acronis Threat Research Unit (TRU) have linked th…
20 views
Daily Writeups
⤷ Title: Critical ABB Alert: OPTIMAX Flaw Allows Full System Takeover
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Mon, 19 Jan 2026 00:09:28 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #ABB #Ability OPTIMAX #Authentication Bypass #Azure AD #Critical Infrastructure #CVE_2025_14510 #CVSS 9.2 #ICS #Industrial Security #SCADA
Daily CyberSecurity
Critical ABB Alert: OPTIMAX Flaw Allows Full System Takeover
Critical: ABB OPTIMAX flaw CVE-2025-14510 (CVSS 9.2) allows auth bypass via Azure AD. Attackers can shut down systems. Patch or disable SSO now.
23 views
Daily Writeups
⤷ Title: The Fake “RedLine”: Imposter Malware Hijacks Crypto Wallets on Discord
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Mon, 19 Jan 2026 00:05:25 +0000
════════════════════════
⌗ Tags: #Cybercriminals #Clipboard Hijacker #CloudSEK #Cryptocurrency Theft #Discord Security #Python Malware #Redline stealer #RedLineCyber #social engineering #Wallet drainer
Daily CyberSecurity
The Fake "RedLine": Imposter Malware Hijacks Crypto Wallets on Discord
CloudSEK exposes "RedLineCyber," an impostor hijacking crypto clipboards on Discord. This stealthy malware drains wallets without a C2 server.
34 views
Daily Writeups
⤷ Title: Decades-Old Flaw & New Heap Corruption: Critical glibc Bugs Revealed
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Mon, 19 Jan 2026 00:01:47 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #ASLR Bypass #CVE_2026_0861 #CVE_2026_0915 #glibc #GNU C Library #heap corruption #infosec #integer overflow #Linux Security #Memory Leak
Daily CyberSecurity
Decades-Old Flaw & New Heap Corruption: Critical glibc Bugs Revealed
The maintainers of the GNU C Library (glibc), the core library that underpins the vast majority of Linux-based systems, have disclosed details on two security vulnerabilities ranging from high-sev…
30 views
Daily Writeups
⤷ Title: Mastering Input Handling in PHP: A Deep Dive into ‘Sanitize’ vs ‘Validate’
════════════════════════
𐀪 Author: Ann R.
════════════════════════
ⴵ Time: Mon, 19 Jan 2026 01:36:19 GMT
════════════════════════
⌗ Tags: #input_sanitization #input_validation #sql_injection #php #prepared_statements
Medium
Mastering Input Handling in PHP: A Deep Dive into ‘Sanitize’ vs ‘Validate’
How Proper Input Validation and Sanitization Can Secure Your PHP Applications
29 views
Daily Writeups
⤷ Title: The Silent Listener: WhisperPair Exploit Turns Flagship Headphones into Spy Tools
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Mon, 19 Jan 2026 04:00:05 +0000
════════════════════════
⌗ Tags: #Vulnerability #Bluetooth Security #cybersecurity #Find My Device #Google Fast Pair #Google Pixel Buds #InfoSec 2026 #JBL #KU Leuven #privacy #Sony #WhisperPair
Penetration Testing Tools
The Silent Listener: WhisperPair Exploit Turns Flagship Headphones into Spy Tools
Envision strolling through a thoroughfare, enveloped in the melodies of your headphones, utterly oblivious to the specter of
20 views
Daily Writeups
⤷ Title: The Kill Switch: Palo Alto Patches GlobalProtect Flaw That Freezes Firewalls
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Mon, 19 Jan 2026 03:54:43 +0000
════════════════════════
⌗ Tags: #Vulnerability #CVE_2026_0227 #Denial of Service #Firewall Security #GlobalProtect #InfoSec 2026 #Palo Alto Networks #PAN_OS #Patch Tuesday #Prisma Access #VPN Security
Penetration Testing Tools
The Kill Switch: Palo Alto Patches GlobalProtect Flaw That Freezes Firewalls
Palo Alto Networks has successfully remediated a perilous vulnerability within its firewalls that permitted unauthenticated adversaries to effectively
14 views
Daily Writeups
⤷ Title: Absolute Compromise: 10.0 Flaw in Modular DS Plugin Grants Instant Admin Access
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Mon, 19 Jan 2026 03:37:50 +0000
════════════════════════
⌗ Tags: #Vulnerability #Admin Bypass #CVE_2026_23550 #cyberattack #InfoSec 2026 #Modular DS #Patchstack #Plugin Security #privilege escalation #WordPress #zero_day
Penetration Testing Tools
Absolute Compromise: 10.0 Flaw in Modular DS Plugin Grants Instant Admin Access
A critical vulnerability has been unearthed in the ubiquitous WordPress plugin Modular DS, which is currently being actively
16 views
Daily Writeups
⤷ Title: The RAM Crunch: Why Your Next Smartphone Will Cost More in 2026
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Mon, 19 Jan 2026 03:35:36 +0000
════════════════════════
⌗ Tags: #Technology #AI hardware #Apple #IDC #Memory Shortage #MWC 2026 #RAM Crisis 2026 #samsung #Smartphone Market #Supply Chain #Tech News
Daily CyberSecurity
The RAM Crunch: Why Your Next Smartphone Will Cost More in 2026
IDC warns of an "unprecedented" memory shortage in 2026 that could hike smartphone prices by 30%. See how Apple and Samsung are bracing for the hit.
15 views
Daily Writeups
⤷ Title: The $134 Billion Gambit: Musk Sues OpenAI While California Crackdown Hits xAI
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Mon, 19 Jan 2026 03:09:56 +0000
════════════════════════
⌗ Tags: #Technology #AI Lawsuit 2026 #California DOJ #Deepfakes #Elon Musk #Grok #Microsoft #OpenAI #Rob Bonta #Sam Altman #Tech Ethics #xAI
Daily CyberSecurity
The $134 Billion Gambit: Musk Sues OpenAI While California Crackdown Hits xAI
Elon Musk demands $134B from OpenAI in Jan 2026 as California orders xAI to stop Grok from generating non-consensual deepfake pornography.
16 views
Daily Writeups
⤷ Title: Defending the Data Moat: Google Appeals Monopoly Ruling to Block Forced Data Sharing
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Mon, 19 Jan 2026 03:05:12 +0000
════════════════════════
⌗ Tags: #Technology #2026 Legal News #AI Search #Antitrust Law #Corporate Litigation #Data Privacy #Department of Justice #google #Google Search Index #search monopoly #Tech Giants
Daily CyberSecurity
Defending the Data Moat: Google Appeals Monopoly Ruling to Block Forced Data Sharing
Google appeals the 2024 search monopoly ruling in Jan 2026, fighting a federal mandate to share its proprietary search data and index with competitors.
24 views
Daily Writeups
⤷ Title: Beyond Routing: Transform the OpenWrt One into a Powerful Debian Micro-Server
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Mon, 19 Jan 2026 02:59:44 +0000
════════════════════════
⌗ Tags: #Linux #Banana Pi #Debian Linux #HomeLab #MediaTek Filogic #Micro_server #Networking #NVMe SSD #Open Source Hardware #OpenWrt One #WiFi 6
Daily CyberSecurity
Beyond Routing: Transform the OpenWrt One into a Powerful Debian Micro-Server
OpenWrt One gets a Debian boost in Jan 2026. Use the M.2 NVMe slot to turn this "unbrickable" WiFi 6 router into a full Linux micro-server for $89.
16 views
Daily Writeups
⤷ Title: Unlocking the Power of Hashcat: Advanced Cracking Techniques for Real-World Pentesting
════════════════════════
𐀪 Author: Cybeague Technologies
════════════════════════
ⴵ Time: Mon, 19 Jan 2026 03:31:11 GMT
════════════════════════
⌗ Tags: #information_security #hacking #cybersecurity #security #password_cracking
Medium
Unlocking the Power of Hashcat: Advanced Cracking Techniques for Real-World Pentesting
Most people know Hashcat as “that password-cracking tool.” But professionals know it as a weapon — a GPU-accelerated powerhouse that…
17 views
Daily Writeups
⤷ Title: Getting Started with Hashcat: Your Fast Track Into Password Cracking Basics
════════════════════════
𐀪 Author: Cybeague Technologies
════════════════════════
ⴵ Time: Mon, 19 Jan 2026 03:30:17 GMT
════════════════════════
⌗ Tags: #information_security #password_cracking #hacking #security #cybersecurity
Medium
Getting Started with Hashcat: Your Fast Track Into Password Cracking Basics
If you’re stepping into cybersecurity, you’ve probably heard someone casually say, “Just crack it with Hashcat.”
15 views
Daily Writeups
⤷ Title: Tải Hack Angry Birds 2 Mod Vô Hạn Tiền, Đá Quý, Năng Lượng
════════════════════════
𐀪 Author: TaiModApk
════════════════════════
ⴵ Time: Mon, 19 Jan 2026 02:42:32 GMT
════════════════════════
⌗ Tags: #angry_birds #hacking #android_mod_game
Medium
Tải Hack Angry Birds 2 Mod Vô Hạn Tiền, Đá Quý, Năng Lượng
Angry Birds 2 Hack không chỉ đơn thuần là một bản chỉnh sửa thông số. Đây là một phiên bản được tối ưu hóa sâu vào hệ thống, giúp người…
23 views