Daily Writeups
@Daily_Writeups
3.56K subscribers
2 photos
130K links
Daily Bug Bounty / Cybersecurity Writeups
Source Code : https://github.com/Spix0r/writeup-miner
Download Telegram
About
Blog
Apps
Platform
Join
Daily Writeups
3.56K subscribers
Daily Writeups
⤷ Title: Op Bizarre Bazaar: New LLMjacking Campaign Targets Unprotected Models
════════════════════════
𐀪 Author: Deeba Ahmed
════════════════════════
ⴵ Time: Thu, 29 Jan 2026 17:37:45 +0000
════════════════════════
⌗ Tags: #Artificial Intelligence #Security #Bizarre Bazaar #Cyber Attack #Cybersecurity #LLMjacking #Pillar Security #Vulnerability
Hackread
Op Bizarre Bazaar: New LLMjacking Campaign Targets Unprotected Models
Follow us on Bluesky, Twitter (X), Mastodon and Facebook at @Hackread
11 views
Daily Writeups
⤷ Title: This startup aims to solve crypto’s broken key management problem
════════════════════════
𐀪 Author: Owais Sultan
════════════════════════
ⴵ Time: Thu, 29 Jan 2026 15:00:04 +0000
════════════════════════
⌗ Tags: #Blockchain #API #Crypto #Cybersecurity #Flow Traders #Sodot #Technology
Hackread
This startup aims to solve crypto’s broken key management problem
Follow us on Bluesky, Twitter (X), Mastodon and Facebook at @Hackread
12 views
Daily Writeups
⤷ Title: US Sentences Chinese National for Role in $36.9 Million Crypto Scam
════════════════════════
𐀪 Author: Deeba Ahmed
════════════════════════
ⴵ Time: Thu, 29 Jan 2026 14:08:57 +0000
════════════════════════
⌗ Tags: #Cryptocurrency #Cyber Crime #Security #Cambodia #China #Crypto #Cybersecurity #Fraud #Investment #Scam #USA
Hackread
US Sentences Chinese National for Role in $36.9 Million Crypto Scam
Follow us on Bluesky, Twitter (X), Mastodon and Facebook at @Hackread
13 views
Daily Writeups
⤷ Title: Malicious Google Ads Target Mac Users with Fake Mac Cleaner Pages
════════════════════════
𐀪 Author: Waqas
════════════════════════
ⴵ Time: Thu, 29 Jan 2026 12:17:00 +0000
════════════════════════
⌗ Tags: #Apple #Scams and Fraud #Security #Cyber Attack #Cyber Crime #Cybersecurity #Fraud #Google #Google Ads #Mac Cleaner #Macbook #MacKeeper #macOS #Malware #Scam
Hackread
Malicious Google Ads Target Mac Users with Fake Mac Cleaner Pages
Follow us on Bluesky, Twitter (X), Mastodon and Facebook at @Hackread
15 views
Daily Writeups
⤷ Title: Russian Cybercrime Platform RAMP Forum Seized by FBI
════════════════════════
𐀪 Author: Waqas
════════════════════════
ⴵ Time: Wed, 28 Jan 2026 16:57:30 +0000
════════════════════════
⌗ Tags: #Cyber Crime #Cybersecurity #dark web #FBI #RAMP #Russia
Hackread
Russian Cybercrime Platform RAMP Forum Seized by FBI
Follow us on Bluesky, Twitter (X), Mastodon and Facebook at @Hackread
15 views
Daily Writeups
⤷ Title: Why RAMS Software Is Becoming Essential for Construction Safety and Compliance
════════════════════════
𐀪 Author: Owais Sultan
════════════════════════
ⴵ Time: Wed, 28 Jan 2026 16:00:00 +0000
════════════════════════
⌗ Tags: #Technology
Hackread
Why RAMS Software Is Becoming Essential for Construction Safety and Compliance
Follow us on Bluesky, Twitter (X), Mastodon and Facebook at @Hackread
12 views
Daily Writeups
⤷ Title: Hackers Still Using Patched WinRAR Flaw for Malware Drops, Warns Google
════════════════════════
𐀪 Author: Deeba Ahmed
════════════════════════
ⴵ Time: Wed, 28 Jan 2026 15:49:23 +0000
════════════════════════
⌗ Tags: #Malware #Security #backdoor #Carpathian #Cybersecurity #Google #GTIG #Poison Ivy #RomCom #Russia #Stockstay #Vulnerability #WinRAR
Hackread
Hackers Still Using Patched WinRAR Flaw for Malware Drops, Warns Google
Follow us on Bluesky, Twitter (X), Mastodon and Facebook at @Hackread
14 views
Daily Writeups
⤷ Title: Hacking the Basics: A 17-Flag Guide to the MBPTL Pen Testing Lab
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Thu, 29 Jan 2026 04:21:46 +0000
════════════════════════
⌗ Tags: #Open Source Tool #Bayu Fedra #Binary Exploitation #CTF Walkthrough #Cybersecurity Lab #Docker #ethical hacking #InfoSec 2026 #MBPTL #Penetration Testing #privilege escalation
Penetration Testing Tools
Hacking the Basics: A 17-Flag Guide to the MBPTL Pen Testing Lab
Master the MBPTL (Most Basic Penetration Testing Lab) in 2026. Learn how to collect all 17 flags using real-world Recon, Exploitation, and Pivoting.
15 views
Daily Writeups
⤷ Title: The Persistence of WinRAR: Google Warns of Widespread CVE-2025-8088 Attacks
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Thu, 29 Jan 2026 04:15:22 +0000
════════════════════════
⌗ Tags: #Cybercriminals #Vulnerability #Ads #CVE_2025_8088 #Google Threat Intelligence #InfoSec 2026 #path traversal #phishing #RomCom #Sandworm #Startup Persistence #Winrar
Penetration Testing Tools
The Persistence of WinRAR: Google Warns of Widespread CVE-2025-8088 Attacks
The Google Threat Intelligence Group (GTIG) has disclosed the extensive exploitation of a critical vulnerability, designated CVE-2025-8088, residing
11 views
Daily Writeups
⤷ Title: Defending the Start-Up Nation: Israel Unveils First Permanent Cyber Law
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Thu, 29 Jan 2026 04:14:01 +0000
════════════════════════
⌗ Tags: #Cyber Security #Critical Infrastructure #Cyber Security 2026 #data privacy #INCD #Infosec #Israel #Knesset #National Cyber Defense Bill #National Resilience #Yossi Karadi
Penetration Testing Tools
Defending the Start-Up Nation: Israel Unveils First Permanent Cyber Law
Israel is poised to undergo one of the most profound transformations in its digital security landscape. Authorities have
10 views
Daily Writeups
⤷ Title: Memory Under Siege: OpenSSL Releases Urgent Patches for Critical Buffer Overflows
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Thu, 29 Jan 2026 04:12:17 +0000
════════════════════════
⌗ Tags: #Vulnerability #AES_GCM #Buffer Overflow #cryptography #CVE_2025_15467 #InfoSec 2026 #openssl #PKCS#12 #Security Patch #Sysadmin #TLS 1.3
Penetration Testing Tools
Memory Under Siege: OpenSSL Releases Urgent Patches for Critical Buffer Overflows
The OpenSSL team has disseminated a comprehensive security advisory detailing a constellation of vulnerabilities afflicting the ubiquitous cryptographic
10 views
Daily Writeups
⤷ Title: Shadow Bankers of the Blockchain: The $16B Rise of Chinese Crypto-Laundering
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Thu, 29 Jan 2026 04:09:39 +0000
════════════════════════
⌗ Tags: #Cybercriminals #Black U #Blockchain Forensics #Chainalysis #cryptocurrency #cybercrime #Huione #InfoSec 2026 #Money Laundering #Shadow Banking #USDT #Xinbi
Penetration Testing Tools
Shadow Bankers of the Blockchain: The $16B Rise of Chinese Crypto-Laundering
The cryptocurrency realm has imperceptibly acquired new “shadow bankers,” with a substantial portion of illicit digital assets now
11 views
Daily Writeups
⤷ Title: The Heart of Downing Street: China’s Salt Typhoon Infiltrates UK PMs’ Phones
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Thu, 29 Jan 2026 04:08:22 +0000
════════════════════════
⌗ Tags: #Cyber Security #Boris Johnson #Chinese Hackers #Cyber Espionage #Downing Street #Five Eyes #GCHQ #InfoSec 2026 #MI5 #Rishi Sunak #Salt Typhoon
Penetration Testing Tools
The Heart of Downing Street: China’s Salt Typhoon Infiltrates UK PMs’ Phones
Chinese state-affiliated hackers maintained illicit access to mobile devices belonging to personnel within the British Prime Minister’s residence
7 views
Daily Writeups
⤷ Title: The Botnet Merger: Kimwolf Hijacks 10 Million Badbox 2.0 Devices
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Thu, 29 Jan 2026 04:05:49 +0000
════════════════════════
⌗ Tags: #Malware #ADB Exploit #Android TV #BadBox 2.0 #BOTNET #Brian Krebs #DDoS #InfoSec 2026 #IoT Security #Kimwolf #Residential Proxies
Penetration Testing Tools
The Botnet Merger: Kimwolf Hijacks 10 Million Badbox 2.0 Devices
The cybercriminals orchestrating the Kimwolf botnet appear intent on flaunting a truly monumental acquisition. A screenshot has surfaced
6 views
Daily Writeups
⤷ Title: WhatsApp’s Great Migration: New Lockdown Mode and Rust-Powered Media Security
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Thu, 29 Jan 2026 04:02:36 +0000
════════════════════════
⌗ Tags: #Technology #C++ #InfoSec 2026 #Lockdown Mode #Media Security #Memory Safety #Meta #Rust #Spyware Protection #Strict Account Settings #WhatsApp
Penetration Testing Tools
WhatsApp’s Great Migration: New Lockdown Mode and Rust-Powered Media Security
Meta has commenced the rollout of a novel WhatsApp feature designed to consolidate a suite of security settings
8 views
Daily Writeups
⤷ Title: Red Teaming at Scale: GHARF Automates the Attack Lifecycle via CI/CD
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Wed, 28 Jan 2026 08:08:16 +0000
════════════════════════
⌗ Tags: #Open Source Tool #Automation #CAI/CAD #CI/CD Security #DevSecOps #GHARF #GitHub Actions #InfoSec 2026 #Offensive Security #Pentesting #red teaming
Penetration Testing Tools
Red Teaming at Scale: GHARF Automates the Attack Lifecycle via CI/CD
Discover GHARF, the framework bringing CI/CD to Red Teaming. Learn how CAI/CAD automates attack cycles for rapid, high-fidelity security exercises.
11 views
Daily Writeups
⤷ Title: The Browser Puppeteer: New Vishing Kits Hijack Sessions in Real-Time
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Wed, 28 Jan 2026 08:03:56 +0000
════════════════════════
⌗ Tags: #Cybercriminals #FIDO2 #InfoSec 2026 #MFA Bypass #Okta #Okta FastPass #Phishing_as_a_Service #Session Orchestration #ShinyHunters #Social Engineering #Vishing
Penetration Testing Tools
The Browser Puppeteer: New Vishing Kits Hijack Sessions in Real-Time
Social engineering offensives are undergoing a sophisticated metamorphosis—adversaries now amalgamate telephonic directives with dynamic phishing kits that facilitate
12 views
Daily Writeups
⤷ Title: The Industrialized Scam: How Sinch and Microsoft Teams Power the Global Fraud Trade
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Wed, 28 Jan 2026 08:01:55 +0000
════════════════════════
⌗ Tags: #Cybercriminals #Callback Scheme #Demurrage Report #InfoSec 2026 #Inteliquent #KYC #Microsoft Teams #Sinch #Telecom Security #Tom Walker #VoIP Fraud
Penetration Testing Tools
The Industrialized Scam: How Sinch and Microsoft Teams Power the Global Fraud Trade
When the facade of a PayPal, Microsoft, or banking “support” number graces a smartphone screen, few perceive the
10 views
Daily Writeups
⤷ Title: The ERP Breach: North Korea’s Andariel Group Strikes Europe with New Malware
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Wed, 28 Jan 2026 08:00:03 +0000
════════════════════════
⌗ Tags: #Malware #Andariel #BYOVD #ERP Hack #GopherRAT #InfoSec 2026 #JelusRAT #North Korea #StarshellRAT #supply chain attack #TigerRAT #WithSecure
Penetration Testing Tools
The ERP Breach: North Korea’s Andariel Group Strikes Europe with New Malware
The North Korean-aligned cyber-espionage syndicate Andariel has reasserted its presence through a sophisticated offensive targeting entities across Europe
11 views
Daily Writeups
⤷ Title: MFA Under Siege: Microsoft Unveils Stealthy AiTM Attacks Striking the Energy Sector
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Wed, 28 Jan 2026 07:58:44 +0000
════════════════════════
⌗ Tags: #Cybercriminals #AiTM #BEC #Energy Sector #InfoSec 2026 #MFA Bypass #Microsoft #Microsoft Defender #phishing #Session Hijacking #SharePoint
Penetration Testing Tools
MFA Under Siege: Microsoft Unveils Stealthy AiTM Attacks Striking the Energy Sector
Microsoft has disclosed a sophisticated sequence of multi-stage incursions leveraging Adversary-in-the-Middle (AiTM) session hijacking in tandem with Business
9 views
Daily Writeups
⤷ Title: The Developer’s Trap: EmEditor Supply Chain Attack Drains Credentials
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Wed, 28 Jan 2026 07:57:05 +0000
════════════════════════
⌗ Tags: #Malware #Developer Security #EmEditor #Emurasoft #Google Drive Caching #InfoSec 2026 #Infostealer #PowerShell #supply chain attack #Trend Micro #Watering Hole
Penetration Testing Tools
The Developer’s Trap: EmEditor Supply Chain Attack Drains Credentials
In late December 2025, the architects of the renowned text editor EmEditor issued a formal advisory regarding the
10 views