Daily Writeups
@Daily_Writeups
3.87K subscribers
4 photos
134K links
Daily Bug Bounty / Cybersecurity Writeups
Source Code : https://github.com/Spix0r/writeup-miner
Download Telegram
About
Blog
Apps
Platform
Join
Daily Writeups
3.87K subscribers
Daily Writeups
⤷ Title: Hackers Still Using Patched WinRAR Flaw for Malware Drops, Warns Google
════════════════════════
𐀪 Author: Deeba Ahmed
════════════════════════
ⴵ Time: Wed, 28 Jan 2026 15:49:23 +0000
════════════════════════
⌗ Tags: #Malware #Security #backdoor #Carpathian #Cybersecurity #Google #GTIG #Poison Ivy #RomCom #Russia #Stockstay #Vulnerability #WinRAR
Hackread
Hackers Still Using Patched WinRAR Flaw for Malware Drops, Warns Google
Follow us on Bluesky, Twitter (X), Mastodon and Facebook at @Hackread
14 views
Daily Writeups
⤷ Title: Hacking the Basics: A 17-Flag Guide to the MBPTL Pen Testing Lab
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Thu, 29 Jan 2026 04:21:46 +0000
════════════════════════
⌗ Tags: #Open Source Tool #Bayu Fedra #Binary Exploitation #CTF Walkthrough #Cybersecurity Lab #Docker #ethical hacking #InfoSec 2026 #MBPTL #Penetration Testing #privilege escalation
Penetration Testing Tools
Hacking the Basics: A 17-Flag Guide to the MBPTL Pen Testing Lab
Master the MBPTL (Most Basic Penetration Testing Lab) in 2026. Learn how to collect all 17 flags using real-world Recon, Exploitation, and Pivoting.
15 views
Daily Writeups
⤷ Title: The Persistence of WinRAR: Google Warns of Widespread CVE-2025-8088 Attacks
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Thu, 29 Jan 2026 04:15:22 +0000
════════════════════════
⌗ Tags: #Cybercriminals #Vulnerability #Ads #CVE_2025_8088 #Google Threat Intelligence #InfoSec 2026 #path traversal #phishing #RomCom #Sandworm #Startup Persistence #Winrar
Penetration Testing Tools
The Persistence of WinRAR: Google Warns of Widespread CVE-2025-8088 Attacks
The Google Threat Intelligence Group (GTIG) has disclosed the extensive exploitation of a critical vulnerability, designated CVE-2025-8088, residing
11 views
Daily Writeups
⤷ Title: Defending the Start-Up Nation: Israel Unveils First Permanent Cyber Law
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Thu, 29 Jan 2026 04:14:01 +0000
════════════════════════
⌗ Tags: #Cyber Security #Critical Infrastructure #Cyber Security 2026 #data privacy #INCD #Infosec #Israel #Knesset #National Cyber Defense Bill #National Resilience #Yossi Karadi
Penetration Testing Tools
Defending the Start-Up Nation: Israel Unveils First Permanent Cyber Law
Israel is poised to undergo one of the most profound transformations in its digital security landscape. Authorities have
10 views
Daily Writeups
⤷ Title: Memory Under Siege: OpenSSL Releases Urgent Patches for Critical Buffer Overflows
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Thu, 29 Jan 2026 04:12:17 +0000
════════════════════════
⌗ Tags: #Vulnerability #AES_GCM #Buffer Overflow #cryptography #CVE_2025_15467 #InfoSec 2026 #openssl #PKCS#12 #Security Patch #Sysadmin #TLS 1.3
Penetration Testing Tools
Memory Under Siege: OpenSSL Releases Urgent Patches for Critical Buffer Overflows
The OpenSSL team has disseminated a comprehensive security advisory detailing a constellation of vulnerabilities afflicting the ubiquitous cryptographic
10 views
Daily Writeups
⤷ Title: Shadow Bankers of the Blockchain: The $16B Rise of Chinese Crypto-Laundering
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Thu, 29 Jan 2026 04:09:39 +0000
════════════════════════
⌗ Tags: #Cybercriminals #Black U #Blockchain Forensics #Chainalysis #cryptocurrency #cybercrime #Huione #InfoSec 2026 #Money Laundering #Shadow Banking #USDT #Xinbi
Penetration Testing Tools
Shadow Bankers of the Blockchain: The $16B Rise of Chinese Crypto-Laundering
The cryptocurrency realm has imperceptibly acquired new “shadow bankers,” with a substantial portion of illicit digital assets now
11 views
Daily Writeups
⤷ Title: The Heart of Downing Street: China’s Salt Typhoon Infiltrates UK PMs’ Phones
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Thu, 29 Jan 2026 04:08:22 +0000
════════════════════════
⌗ Tags: #Cyber Security #Boris Johnson #Chinese Hackers #Cyber Espionage #Downing Street #Five Eyes #GCHQ #InfoSec 2026 #MI5 #Rishi Sunak #Salt Typhoon
Penetration Testing Tools
The Heart of Downing Street: China’s Salt Typhoon Infiltrates UK PMs’ Phones
Chinese state-affiliated hackers maintained illicit access to mobile devices belonging to personnel within the British Prime Minister’s residence
7 views
Daily Writeups
⤷ Title: The Botnet Merger: Kimwolf Hijacks 10 Million Badbox 2.0 Devices
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Thu, 29 Jan 2026 04:05:49 +0000
════════════════════════
⌗ Tags: #Malware #ADB Exploit #Android TV #BadBox 2.0 #BOTNET #Brian Krebs #DDoS #InfoSec 2026 #IoT Security #Kimwolf #Residential Proxies
Penetration Testing Tools
The Botnet Merger: Kimwolf Hijacks 10 Million Badbox 2.0 Devices
The cybercriminals orchestrating the Kimwolf botnet appear intent on flaunting a truly monumental acquisition. A screenshot has surfaced
6 views
Daily Writeups
⤷ Title: WhatsApp’s Great Migration: New Lockdown Mode and Rust-Powered Media Security
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Thu, 29 Jan 2026 04:02:36 +0000
════════════════════════
⌗ Tags: #Technology #C++ #InfoSec 2026 #Lockdown Mode #Media Security #Memory Safety #Meta #Rust #Spyware Protection #Strict Account Settings #WhatsApp
Penetration Testing Tools
WhatsApp’s Great Migration: New Lockdown Mode and Rust-Powered Media Security
Meta has commenced the rollout of a novel WhatsApp feature designed to consolidate a suite of security settings
8 views
Daily Writeups
⤷ Title: Red Teaming at Scale: GHARF Automates the Attack Lifecycle via CI/CD
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Wed, 28 Jan 2026 08:08:16 +0000
════════════════════════
⌗ Tags: #Open Source Tool #Automation #CAI/CAD #CI/CD Security #DevSecOps #GHARF #GitHub Actions #InfoSec 2026 #Offensive Security #Pentesting #red teaming
Penetration Testing Tools
Red Teaming at Scale: GHARF Automates the Attack Lifecycle via CI/CD
Discover GHARF, the framework bringing CI/CD to Red Teaming. Learn how CAI/CAD automates attack cycles for rapid, high-fidelity security exercises.
11 views
Daily Writeups
⤷ Title: The Browser Puppeteer: New Vishing Kits Hijack Sessions in Real-Time
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Wed, 28 Jan 2026 08:03:56 +0000
════════════════════════
⌗ Tags: #Cybercriminals #FIDO2 #InfoSec 2026 #MFA Bypass #Okta #Okta FastPass #Phishing_as_a_Service #Session Orchestration #ShinyHunters #Social Engineering #Vishing
Penetration Testing Tools
The Browser Puppeteer: New Vishing Kits Hijack Sessions in Real-Time
Social engineering offensives are undergoing a sophisticated metamorphosis—adversaries now amalgamate telephonic directives with dynamic phishing kits that facilitate
12 views
Daily Writeups
⤷ Title: The Industrialized Scam: How Sinch and Microsoft Teams Power the Global Fraud Trade
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Wed, 28 Jan 2026 08:01:55 +0000
════════════════════════
⌗ Tags: #Cybercriminals #Callback Scheme #Demurrage Report #InfoSec 2026 #Inteliquent #KYC #Microsoft Teams #Sinch #Telecom Security #Tom Walker #VoIP Fraud
Penetration Testing Tools
The Industrialized Scam: How Sinch and Microsoft Teams Power the Global Fraud Trade
When the facade of a PayPal, Microsoft, or banking “support” number graces a smartphone screen, few perceive the
10 views
Daily Writeups
⤷ Title: The ERP Breach: North Korea’s Andariel Group Strikes Europe with New Malware
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Wed, 28 Jan 2026 08:00:03 +0000
════════════════════════
⌗ Tags: #Malware #Andariel #BYOVD #ERP Hack #GopherRAT #InfoSec 2026 #JelusRAT #North Korea #StarshellRAT #supply chain attack #TigerRAT #WithSecure
Penetration Testing Tools
The ERP Breach: North Korea’s Andariel Group Strikes Europe with New Malware
The North Korean-aligned cyber-espionage syndicate Andariel has reasserted its presence through a sophisticated offensive targeting entities across Europe
11 views
Daily Writeups
⤷ Title: MFA Under Siege: Microsoft Unveils Stealthy AiTM Attacks Striking the Energy Sector
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Wed, 28 Jan 2026 07:58:44 +0000
════════════════════════
⌗ Tags: #Cybercriminals #AiTM #BEC #Energy Sector #InfoSec 2026 #MFA Bypass #Microsoft #Microsoft Defender #phishing #Session Hijacking #SharePoint
Penetration Testing Tools
MFA Under Siege: Microsoft Unveils Stealthy AiTM Attacks Striking the Energy Sector
Microsoft has disclosed a sophisticated sequence of multi-stage incursions leveraging Adversary-in-the-Middle (AiTM) session hijacking in tandem with Business
9 views
Daily Writeups
⤷ Title: The Developer’s Trap: EmEditor Supply Chain Attack Drains Credentials
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Wed, 28 Jan 2026 07:57:05 +0000
════════════════════════
⌗ Tags: #Malware #Developer Security #EmEditor #Emurasoft #Google Drive Caching #InfoSec 2026 #Infostealer #PowerShell #supply chain attack #Trend Micro #Watering Hole
Penetration Testing Tools
The Developer’s Trap: EmEditor Supply Chain Attack Drains Credentials
In late December 2025, the architects of the renowned text editor EmEditor issued a formal advisory regarding the
10 views
Daily Writeups
⤷ Title: The Year the Web Faltered: Cloudflare’s 2025 Report Unveils a Fragile Digital World
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Wed, 28 Jan 2026 07:52:42 +0000
════════════════════════
⌗ Tags: #Technology #Cloudflare Radar #Digital Blackout #InfoSec 2026 #Infrastructure Security #Internet Outage #Network Resilience #Submarine Cables #Tanzania Election #WACS
Penetration Testing Tools
The Year the Web Faltered: Cloudflare’s 2025 Report Unveils a Fragile Digital World
The internet appears as a steadfast and nearly imperceptible presence in our daily lives, until the abrupt moment
8 views
Daily Writeups
⤷ Title: Office Under Siege: Microsoft Rushes Emergency Fix for Active Zero-Day
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Wed, 28 Jan 2026 07:51:07 +0000
════════════════════════
⌗ Tags: #Vulnerability #CISA #CVE_2026_21509 #Cyber Security #InfoSec 2026 #Microsoft 365 #Microsoft Office #OLE Bypass #Patch Management #Social Engineering #zero_day
Penetration Testing Tools
Office Under Siege: Microsoft Rushes Emergency Fix for Active Zero-Day
Microsoft has issued an urgent, out-of-band security update for Microsoft Office to mitigate a high-stakes zero-day vulnerability that
9 views
Daily Writeups
⤷ Title: VPNs & Fake Updates: Google Dismantles Massive IPIDEA Proxy Network
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Sat, 31 Jan 2026 00:32:16 +0000
════════════════════════
⌗ Tags: #Cybercriminals #Android security #botnet #Galleon VPN #Google Threat Intelligence #IPIDEA #Malicious SDK #Proxy Hijacking #Radish VPN #residential proxy #Windows malware
Daily CyberSecurity
VPNs & Fake Updates: Google Dismantles Massive IPIDEA Proxy Network
Google disrupts IPIDEA proxy network. Fake VPNs and hijacked apps turned millions of devices into unwitting exit nodes. Play Protect is removing them.
8 views
Daily Writeups
⤷ Title: From User to SYSTEM: PoC Released for Zabbix Privilege Escalation
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Fri, 30 Jan 2026 02:52:48 +0000
════════════════════════
⌗ Tags: #Vulnerability #Patch Alert #PoC #privilege escalation #SYSTEM privileges #Windows Security #Zabbix #Zabbix Agent
Daily CyberSecurity
From User to SYSTEM: PoC Released for Zabbix Privilege Escalation
Exploit code released for Zabbix flaw CVE-2025-27237. Low-level users can gain SYSTEM privileges on Windows via OpenSSL config. Update now.
10 views
Daily Writeups
⤷ Title: “Update” to Nightmare: eScan Antivirus Hacked to Distribute Malware
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Fri, 30 Jan 2026 02:15:55 +0000
════════════════════════
⌗ Tags: #Malware #Antivirus Compromise #cyber attack #eScan #infosec #malware #Manual Patch #MicroWorld Technologies #Morphisec #Reload.exe #supply chain attack
Daily CyberSecurity
"Update" to Nightmare: eScan Antivirus Hacked to Distribute Malware
Critical supply chain attack hits eScan antivirus. Hackers hijacked updates to install malware and disable the AV. Manual patch required.
7 views
Daily Writeups
⤷ Title: Smart Buildings at Risk: Critical Johnson Controls Flaw (CVSS 10) Allows Remote SQL Injection
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Fri, 30 Jan 2026 01:59:19 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #building automation #CISA #Critical Vulnerability #CVE_2025_26385 #ICS security #Johnson Controls #Metasys #Smart Building #sql injection #TCP 1433
Daily CyberSecurity
Smart Buildings at Risk: Critical Johnson Controls Flaw (CVSS 10) Allows Remote SQL Injection
CISA warns of CVSS 10 flaw CVE-2025-26385 in Johnson Controls Metasys. Remote SQL execution possible. Patch now or close TCP port 1433.
6 views