Daily Writeups
@Daily_Writeups
3.52K subscribers
2 photos
129K links
Daily Bug Bounty / Cybersecurity Writeups
Source Code : https://github.com/Spix0r/writeup-miner
Download Telegram
About
Blog
Apps
Platform
Join
Daily Writeups
3.52K subscribers
Daily Writeups
⤷ Title: What Is a YubiKey… and Why Did I Buy One?
════════════════════════
𐀪 Author: Akshay N
════════════════════════
ⴵ Time: Thu, 27 Feb 2025 17:25:10 GMT
════════════════════════
⌗ Tags: #infosec #mfa #fido2_security_key #cybersecurity #yubikey
Medium
What Is a YubiKey… and Why Did I Buy One?
How a Tiny USB Stick Became My Most Powerful Security Upgrade - Once I Figured Out What It Actually Does
15 views
Daily Writeups
⤷ Title: Configuring a FIDO2 Token2 Security Key for Authentication on macOS M1
════════════════════════
𐀪 Author: Tamir Suliman
════════════════════════
ⴵ Time: Tue, 11 Mar 2025 00:11:30 GMT
════════════════════════
⌗ Tags: #token2_security_key #cybersecurity #fido2_security_key #macos_authentication #passwordless_login_macos
Medium
Configuring a FIDO2 Token2 Security Key for Authentication on macOS M1
Security keys based on FIDO2/WebAuthn provide a passwordless authentication method, enhancing security against phishing and credential…
29 views
Daily Writeups
⤷ Title: DeviceCodePhishing: How a New Attack Bypasses FIDO and MFA Protections
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Mon, 28 Apr 2025 00:30:43 +0000
════════════════════════
⌗ Tags: #Cybercriminals #Azure Entra security #Cybersecurity Threats #DeviceCodePhishing #FIDO2 phishing #MFA Bypass #OAuth attacks
Daily CyberSecurity
DeviceCodePhishing: How a New Attack Bypasses FIDO and MFA Protections
DeviceCodePhishing exploits OAuth Device Code Flow to bypass MFA and FIDO protections, redirecting victims to real sites with no phishing signs.
18 views
Daily Writeups
⤷ Title: Trying to break a Yubikey
════════════════════════
𐀪 Author: Keir Finlow-Bates
════════════════════════
ⴵ Time: Wed, 30 Apr 2025 08:40:32 GMT
════════════════════════
⌗ Tags: #yubikey #fido2 #cybersecurity #hacking
Medium
Trying to break a Yubikey
This post is produced in collaboration with Resonance Security — cybersecurity for all.
15 views
Daily Writeups
⤷ Title: PoisonSeed Tricking Users Into Bypassing FIDO Keys With QR Codes
════════════════════════
𐀪 Author: Waqas
════════════════════════
ⴵ Time: Fri, 18 Jul 2025 17:21:15 +0000
════════════════════════
⌗ Tags: #Security #Phishing Scam #Cyber Attack #Cybersecurity #Expel #FIDO2 #Fraud #Phishing #Privacy #Scam #security
Hackread
PoisonSeed Tricking Users Into Bypassing FIDO Keys With QR Codes
Follow us on Bluesky, Twitter (X), Mastodon and Facebook at @Hackread
34 views
Daily Writeups
⤷ Title: FIDO2 Bypass Uncovered: Hackers Exploit Cross-Device Authentication with QR Code Phishing
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Tue, 22 Jul 2025 01:31:49 +0000
════════════════════════
⌗ Tags: #Cybercriminals #Authentication #Cross_Device Authentication #cybersecurity #FIDO2 #MFA Bypass #phishing #PoisonSeed #QR code #security key
Penetration Testing Tools
FIDO2 Bypass Uncovered: Hackers Exploit Cross-Device Authentication with QR Code Phishing
Cybercriminals from PoisonSeed are bypassing FIDO2 protection by tricking users into approving cross-device login requests via legitimate QR codes, exploiting a convenient feature.
14 views
Daily Writeups
⤷ Title: The Browser Puppeteer: New Vishing Kits Hijack Sessions in Real-Time
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Wed, 28 Jan 2026 08:03:56 +0000
════════════════════════
⌗ Tags: #Cybercriminals #FIDO2 #InfoSec 2026 #MFA Bypass #Okta #Okta FastPass #Phishing_as_a_Service #Session Orchestration #ShinyHunters #Social Engineering #Vishing
Penetration Testing Tools
The Browser Puppeteer: New Vishing Kits Hijack Sessions in Real-Time
Social engineering offensives are undergoing a sophisticated metamorphosis—adversaries now amalgamate telephonic directives with dynamic phishing kits that facilitate
11 views
Daily Writeups
⤷ Title: The Compliance Trap: How a 13,000-Org Phishing Wave Bypasses MFA via AiTM Proxying
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Tue, 05 May 2026 09:00:50 +0000
════════════════════════
⌗ Tags: #Cybercriminals #AiTM #Cloudflare CAPTCHA #Credential Theft #cybersecurity #FIDO2 #infosec #MFA Bypass #Microsoft Defender #Paubox Hijacking #phishing #threat intelligence
Daily CyberSecurity
The Compliance Trap: How a 13,000-Org Phishing Wave Bypasses MFA via AiTM Proxying
Microsoft warns of a massive AiTM phishing campaign targeting 13,000+ orgs. Using fake disciplinary lures, attackers bypass MFA to hijack active sessions.
22 views