Daily Writeups
@Daily_Writeups
3.5K subscribers
2 photos
129K links
Daily Bug Bounty / Cybersecurity Writeups
Source Code : https://github.com/Spix0r/writeup-miner
Download Telegram
About
Blog
Apps
Platform
Join
Daily Writeups
3.5K subscribers
Daily Writeups
⤷ Title: 2nm Power Shift: Samsung’s Exynos 2600 Rivals Snapdragon in New Galaxy S26 Leaks
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Tue, 03 Feb 2026 03:52:33 +0000
════════════════════════
⌗ Tags: #Technology #2nm GAA process #Android 16 #Exynos 2600 #Geekbench 6 scores #mobile gaming performance #Samsung Foundry SF2 #Samsung Galaxy S26 #Samsung Xclipse 960 #Snapdragon 8 Elite Gen 5 #Tech News
Daily CyberSecurity
2nm Power Shift: Samsung’s Exynos 2600 Rivals Snapdragon in New Galaxy S26 Leaks
Samsung’s 2nm Exynos 2600 hits Geekbench, showing a 39% performance jump and narrowing the gap with Qualcomm. Is the "Exynos Curse" finally over for 2026?
21 views
Daily Writeups
⤷ Title: Grid Sabotage: “Static Tundra” Hits Poland’s Energy Sector with DynoWiper
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Tue, 03 Feb 2026 03:47:22 +0000
════════════════════════
⌗ Tags: #Cyber Security #Malware #Berserk Bear #CERT Polska #Critical Infrastructure #Cyber Sabotage #DynoWiper #energy sector #LazyWiper #Mikronika #Moxa NPort #OT Security #Poland #Static Tundra
Daily CyberSecurity
Grid Sabotage: "Static Tundra" Hits Poland's Energy Sector with DynoWiper
CERT Polska reveals destructive attacks on energy infrastructure. "Static Tundra" used DynoWiper and LazyWiper to brick OT devices. Read more.
14 views
Daily Writeups
⤷ Title: ASUS Kills “File Shredder” Feature to Fix Critical Flaw
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Tue, 03 Feb 2026 03:21:46 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #Arbitrary File Creation #ASUS #ASUS Business Manager #Commercial PC #CVE_2025_13348 #File Shredder #infosec #Patch Alert #Secure Delete #Vulnerability
Daily CyberSecurity
ASUS Kills "File Shredder" Feature to Fix Critical Flaw
ASUS removes "File Shredder" from Business Manager due to CVE-2025-13348 (CVSS 8.5). The feature is gone in V3.0.37.0. Check your commercial PCs.
17 views
Daily Writeups
⤷ Title: Trojan AI: OpenClaw “Skills” Marketplace Flooded with Malware
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Tue, 03 Feb 2026 02:56:12 +0000
════════════════════════
⌗ Tags: #Malware #AI Agents #AI security #AMOS #Atomic Stealer #Clawdbot #ClawHub #malware #OpenClaw #supply chain attack #VirusTotal
Daily CyberSecurity
Trojan AI: OpenClaw "Skills" Marketplace Flooded with Malware
VirusTotal warns of massive supply chain attack on OpenClaw. Hackers use fake "skills" to deploy malware like Atomic Stealer. Verify your agents.
20 views
Daily Writeups
⤷ Title: Hydra Tactics: North Korea’s LABYRINTH CHOLLIMA Splits to Hunt Crypto & Secrets
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Tue, 03 Feb 2026 02:46:31 +0000
════════════════════════
⌗ Tags: #Cyber Security #APT #CrowdStrike #Cryptocurrency Theft #cyber_espionage #FudModule #GOLDEN CHOLLIMA #LABYRINTH CHOLLIMA #North Korea #PRESSURE CHOLLIMA #WannaCry
Daily CyberSecurity
Hydra Tactics: North Korea's LABYRINTH CHOLLIMA Splits to Hunt Crypto & Secrets
North Korea's LABYRINTH CHOLLIMA splits into 3 units: GOLDEN, PRESSURE, & Core. CrowdStrike reveals new strategy targeting crypto & defense.
18 views
Daily Writeups
⤷ Title: Fancy Bear Returns: APT28 Exploits Office Flaw in “Operation Neusploit”
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Tue, 03 Feb 2026 02:18:33 +0000
════════════════════════
⌗ Tags: #Cyber Security #Malware #APT28 #CVE_2026_21509 #cyber_espionage #Fancy Bear #MiniDoor #Operation Neusploit #PixyNetLoader #RTF Exploit #russia #Zscaler ThreatLabz
Daily CyberSecurity
Fancy Bear Returns: APT28 Exploits Office Flaw in "Operation Neusploit"
APT28 launches "Operation Neusploit" targeting Europe. Hackers exploit CVE-2026-21509 to deploy MiniDoor malware via RTF files. Patch Office now.
9 views
Daily Writeups
⤷ Title: WiFi Hijack: Hikvision Patches Command Injection in DS-3WAP Access Points
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Tue, 03 Feb 2026 02:10:40 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #access point #Command Injection #CVE_2026_0709 #DS_3WAP #firmware update #Hikvision #IoT security #network_security #rce #Wireless Security
Daily CyberSecurity
WiFi Hijack: Hikvision Patches Command Injection in DS-3WAP Access Points
Hikvision patches high-severity command injection (CVE-2026-0709) in DS-3WAP access points. Authenticated attackers can execute code. Update now.
25 views
Daily Writeups
⤷ Title: Broadcast Hijack: Critical KiloView Flaw (CVSS 9.8) Grants Full Control
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Tue, 03 Feb 2026 02:05:23 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #Admin Takeover #Broadcast Security #CISA alert #CVE_2026_1453 #firmware update #IoT security #KiloView #Streaming Security #Video Encoder Security
Daily CyberSecurity
Broadcast Hijack: Critical KiloView Flaw (CVSS 9.8) Grants Full Control
Critical KiloView flaw CVE-2026-1453 (CVSS 9.8) allows unauthenticated admin takeover. Broadcast feeds at risk. Check affected E1/E2 versions immediately.
20 views
Daily Writeups
⤷ Title: AI-Coded Oppression: “RedKitten” Malware Targets Iranian Protesters
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Tue, 03 Feb 2026 01:59:35 +0000
════════════════════════
⌗ Tags: #Cyber Security #AI Malware #cyber_espionage #HarfangLab #Human Rights #Iran Protests #LLM Security #RedKitten #SloppyMIO #surveillance #Telegram C2
Daily CyberSecurity
AI-Coded Oppression: "RedKitten" Malware Targets Iranian Protesters
"RedKitten" spies on Iranian protesters using AI-written malware. Attackers use fake death lists to deploy SloppyMIO surveillance tools.
13 views
Daily Writeups
⤷ Title: The “IClickFix” Trap: 3,800+ WordPress Sites Poisoned by Fake CAPTCHAs
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Tue, 03 Feb 2026 01:49:29 +0000
════════════════════════
⌗ Tags: #Malware #ClickFix #fake CAPTCHA #IClickFix #malware #NetSupport RAT #powershell #Sekoia TDR #social engineering #watering hole attack #wordpress security
Daily CyberSecurity
The "IClickFix" Trap: 3,800+ WordPress Sites Poisoned by Fake CAPTCHAs
IClickFix malware hijacks 3,800+ WordPress sites with fake Cloudflare CAPTCHAs. This watering hole attack tricks users into running malicious PowerShell.
14 views
Daily Writeups
⤷ Title: Identity at Risk: Apache Syncope Patches Critical Login XSS & XXE Flaws
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Tue, 03 Feb 2026 01:41:41 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #Apache Syncope #CVE_2026_23794 #CVE_2026_23795 #IAM Security #Identity Management #Open Source Security #Patch Alert #Session Hijacking #XSS #xxe
Daily CyberSecurity
Identity at Risk: Apache Syncope Patches Critical Login XSS & XXE Flaws
Apache patches XSS (CVE-2026-23794) & XXE flaws in Syncope. Vulnerability allows session hijacking via login page. Update to v3.0.16 or v4.0.4 now.
18 views
Daily Writeups
⤷ Title: AI in Cybersecurity: The Hype, the Help, and the Hard Truth
════════════════════════
𐀪 Author: Paritosh
════════════════════════
ⴵ Time: Tue, 03 Feb 2026 02:59:47 GMT
════════════════════════
⌗ Tags: #ai #cybersecurity #bug_bounty #information_technology #hacking
Medium
AI in Cybersecurity: The Hype, the Help, and the Hard Truth
For the last few years, “AI in cybersecurity” has been marketed like a magic shield. Slide in some machine learning, sprinkle a bit of…
15 views
Daily Writeups
⤷ Title: Android WebView Exploitation: From Deep Link to Account Takeover
════════════════════════
𐀪 Author: BaymaxPop23
════════════════════════
ⴵ Time: Tue, 03 Feb 2026 02:28:15 GMT
════════════════════════
⌗ Tags: #bug_bounty #penetration_testing #application_security #webview #android_security
Medium
Android WebView Exploitation: From Deep Link to Account Takeover
How a malicious deep link can exfiltrate session cookies and compromise user accounts with a single click
24 views
Daily Writeups
⤷ Title: How I got a $$$$ by discovring a critical Sql Injecation vulnerability In a Public Bug Bounty…
════════════════════════
𐀪 Author: Ahmad Yussef
════════════════════════
ⴵ Time: Tue, 03 Feb 2026 03:58:51 GMT
════════════════════════
⌗ Tags: #technology #bug_bounty_writeup #hacking #cybersecurity #bug_bounty
Medium
How I got a $$$$ by discovring a critical Sql Injecation vulnerability In a Public Bug Bounty program.
Hi Hackers, welcome all to this write up, After a long time for sharing write up in medium, here is the new write up, about new tecnic, for…
25 views
Daily Writeups
⤷ Title: TryHackMe — Introduction to SIEM (Walkthrough)
════════════════════════
𐀪 Author: Hudson Lois Marcus
════════════════════════
ⴵ Time: Tue, 03 Feb 2026 03:48:54 GMT
════════════════════════
⌗ Tags: #introduction_to_siem #tryhackme_walkthrough #tryhackme_writeup #tryhackme #siem
Medium
TryHackMe — Introduction to SIEM (Walkthrough)
In this room, we will learn how different devices in a network generate logs and why it is essential to have a centralized solution to…
39 views
Daily Writeups
⤷ Title: Insomnia HTB Web Challenge — Walkthrough
════════════════════════
𐀪 Author: Sooraj Mohan
════════════════════════
ⴵ Time: Tue, 03 Feb 2026 03:31:01 GMT
════════════════════════
⌗ Tags: #hackthebox #ctf_writeup #source_code_review #webchallenge #hackthebox_writeup
Medium
Insomnia HTB Web Challenge — Walkthrough
Insomnia HTB Web Challenge — Walkthrough Insomnia is a web challenge from Hack The Box website. The challenge is to find the flag from the Insomnia website. It’s an Easy web challenge focusing on …
40 views
Daily Writeups
⤷ Title: Notepad++ Hosting Breach Attributed to China-Linked Lotus Blossom Hacking Group
════════════════════════
𐀪 Author: Unknown
════════════════════════
ⴵ Time: Tue, 03 Feb 2026 10:25:00 +0530
════════════════════════
⌗ Tags: No_Tags
29 views
Daily Writeups
⤷ Title: Agent of Chaos: Why Cybersecurity Experts Are Terrified of the “Viral” Moltbot AI Assistant
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Tue, 03 Feb 2026 04:57:17 +0000
════════════════════════
⌗ Tags: #Malware #AI Agent security #Clawdbot #ClawdHub #Credential Theft #info_stealing malware #Jamieson O’Reilly #Mac Mini server #Moltbot #OpenClaw #personal AI assistant #Prompt Injection #supply chain attack
Penetration Testing Tools
Agent of Chaos: Why Cybersecurity Experts Are Terrified of the "Viral" Moltbot AI Assistant
The burgeoning popularity of the AI assistant Moltbot—formerly known as Clawdbot, a nomenclature abandoned following trademark disputes with
29 views
Daily Writeups
⤷ Title: Beyond Blackouts: The ELECTRUM Strike on Poland and the New Era of “Digital Arson”
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Tue, 03 Feb 2026 04:55:47 +0000
════════════════════════
⌗ Tags: #Cyber Security #CERT Polska #Distributed Energy Resources (DER) #Dragos #DynoWiper #ELECTRUM #grid stability #Industrial Control Systems #Operational Technology (OT) #Polish power grid #Sandworm #Tech News
Penetration Testing Tools
Beyond Blackouts: The ELECTRUM Strike on Poland and the New Era of "Digital Arson"
A cyberattack that initially garnered scant attention in Poland has since emerged as a pivotal signal for the
14 views
Daily Writeups
⤷ Title: Surgical Silence: The New Fortinet Zero-Day That Hijacks Firewalls in Seconds
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Tue, 03 Feb 2026 04:54:51 +0000
════════════════════════
⌗ Tags: #Vulnerability #Arctic Wolf #authentication bypass #cloud_init@mail.io #CVE_2026_24858 #FortiCloud SSO #FortiGate #Fortinet #SAML exploit #secadmin #zero_day 2026
Penetration Testing Tools
Surgical Silence: The New Fortinet Zero-Day That Hijacks Firewalls in Seconds
Cybersecurity specialists at Arctic Wolf have identified a nascent wave of incursions targeting Fortinet FortiGate firewalls. Adversaries are
12 views
Daily Writeups
⤷ Title: The Invisible Mosaic: How Tycoon’s HTML QR Codes and Teams Scams Are Blinding Modern Defenses
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Tue, 03 Feb 2026 04:53:44 +0000
════════════════════════
⌗ Tags: #Cybercriminals #Barracuda research #callback phishing #email security 2026 #Facebook copyright scam #Homoglyph Attack #HTML table QR #Microsoft Teams scam #Phishing_as_a_Service #QR Code Phishing #Tycoon toolkit
Penetration Testing Tools
The Invisible Mosaic: How Tycoon’s HTML QR Codes and Teams Scams Are Blinding Modern Defenses
In the preceding month, analysts at Barracuda have identified a flurry of sophisticated email-borne incursions targeting corporations and
19 views