Daily Writeups
@Daily_Writeups
3.5K subscribers
2 photos
129K links
Daily Bug Bounty / Cybersecurity Writeups
Source Code : https://github.com/Spix0r/writeup-miner
Download Telegram
About
Blog
Apps
Platform
Join
Daily Writeups
3.5K subscribers
Daily Writeups
⤷ Title: Hydra Tactics: North Korea’s LABYRINTH CHOLLIMA Splits to Hunt Crypto & Secrets
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Tue, 03 Feb 2026 02:46:31 +0000
════════════════════════
⌗ Tags: #Cyber Security #APT #CrowdStrike #Cryptocurrency Theft #cyber_espionage #FudModule #GOLDEN CHOLLIMA #LABYRINTH CHOLLIMA #North Korea #PRESSURE CHOLLIMA #WannaCry
Daily CyberSecurity
Hydra Tactics: North Korea's LABYRINTH CHOLLIMA Splits to Hunt Crypto & Secrets
North Korea's LABYRINTH CHOLLIMA splits into 3 units: GOLDEN, PRESSURE, & Core. CrowdStrike reveals new strategy targeting crypto & defense.
18 views
Daily Writeups
⤷ Title: Fancy Bear Returns: APT28 Exploits Office Flaw in “Operation Neusploit”
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Tue, 03 Feb 2026 02:18:33 +0000
════════════════════════
⌗ Tags: #Cyber Security #Malware #APT28 #CVE_2026_21509 #cyber_espionage #Fancy Bear #MiniDoor #Operation Neusploit #PixyNetLoader #RTF Exploit #russia #Zscaler ThreatLabz
Daily CyberSecurity
Fancy Bear Returns: APT28 Exploits Office Flaw in "Operation Neusploit"
APT28 launches "Operation Neusploit" targeting Europe. Hackers exploit CVE-2026-21509 to deploy MiniDoor malware via RTF files. Patch Office now.
9 views
Daily Writeups
⤷ Title: WiFi Hijack: Hikvision Patches Command Injection in DS-3WAP Access Points
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Tue, 03 Feb 2026 02:10:40 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #access point #Command Injection #CVE_2026_0709 #DS_3WAP #firmware update #Hikvision #IoT security #network_security #rce #Wireless Security
Daily CyberSecurity
WiFi Hijack: Hikvision Patches Command Injection in DS-3WAP Access Points
Hikvision patches high-severity command injection (CVE-2026-0709) in DS-3WAP access points. Authenticated attackers can execute code. Update now.
25 views
Daily Writeups
⤷ Title: Broadcast Hijack: Critical KiloView Flaw (CVSS 9.8) Grants Full Control
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Tue, 03 Feb 2026 02:05:23 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #Admin Takeover #Broadcast Security #CISA alert #CVE_2026_1453 #firmware update #IoT security #KiloView #Streaming Security #Video Encoder Security
Daily CyberSecurity
Broadcast Hijack: Critical KiloView Flaw (CVSS 9.8) Grants Full Control
Critical KiloView flaw CVE-2026-1453 (CVSS 9.8) allows unauthenticated admin takeover. Broadcast feeds at risk. Check affected E1/E2 versions immediately.
20 views
Daily Writeups
⤷ Title: AI-Coded Oppression: “RedKitten” Malware Targets Iranian Protesters
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Tue, 03 Feb 2026 01:59:35 +0000
════════════════════════
⌗ Tags: #Cyber Security #AI Malware #cyber_espionage #HarfangLab #Human Rights #Iran Protests #LLM Security #RedKitten #SloppyMIO #surveillance #Telegram C2
Daily CyberSecurity
AI-Coded Oppression: "RedKitten" Malware Targets Iranian Protesters
"RedKitten" spies on Iranian protesters using AI-written malware. Attackers use fake death lists to deploy SloppyMIO surveillance tools.
13 views
Daily Writeups
⤷ Title: The “IClickFix” Trap: 3,800+ WordPress Sites Poisoned by Fake CAPTCHAs
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Tue, 03 Feb 2026 01:49:29 +0000
════════════════════════
⌗ Tags: #Malware #ClickFix #fake CAPTCHA #IClickFix #malware #NetSupport RAT #powershell #Sekoia TDR #social engineering #watering hole attack #wordpress security
Daily CyberSecurity
The "IClickFix" Trap: 3,800+ WordPress Sites Poisoned by Fake CAPTCHAs
IClickFix malware hijacks 3,800+ WordPress sites with fake Cloudflare CAPTCHAs. This watering hole attack tricks users into running malicious PowerShell.
14 views
Daily Writeups
⤷ Title: Identity at Risk: Apache Syncope Patches Critical Login XSS & XXE Flaws
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Tue, 03 Feb 2026 01:41:41 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #Apache Syncope #CVE_2026_23794 #CVE_2026_23795 #IAM Security #Identity Management #Open Source Security #Patch Alert #Session Hijacking #XSS #xxe
Daily CyberSecurity
Identity at Risk: Apache Syncope Patches Critical Login XSS & XXE Flaws
Apache patches XSS (CVE-2026-23794) & XXE flaws in Syncope. Vulnerability allows session hijacking via login page. Update to v3.0.16 or v4.0.4 now.
18 views
Daily Writeups
⤷ Title: AI in Cybersecurity: The Hype, the Help, and the Hard Truth
════════════════════════
𐀪 Author: Paritosh
════════════════════════
ⴵ Time: Tue, 03 Feb 2026 02:59:47 GMT
════════════════════════
⌗ Tags: #ai #cybersecurity #bug_bounty #information_technology #hacking
Medium
AI in Cybersecurity: The Hype, the Help, and the Hard Truth
For the last few years, “AI in cybersecurity” has been marketed like a magic shield. Slide in some machine learning, sprinkle a bit of…
15 views
Daily Writeups
⤷ Title: Android WebView Exploitation: From Deep Link to Account Takeover
════════════════════════
𐀪 Author: BaymaxPop23
════════════════════════
ⴵ Time: Tue, 03 Feb 2026 02:28:15 GMT
════════════════════════
⌗ Tags: #bug_bounty #penetration_testing #application_security #webview #android_security
Medium
Android WebView Exploitation: From Deep Link to Account Takeover
How a malicious deep link can exfiltrate session cookies and compromise user accounts with a single click
24 views
Daily Writeups
⤷ Title: How I got a $$$$ by discovring a critical Sql Injecation vulnerability In a Public Bug Bounty…
════════════════════════
𐀪 Author: Ahmad Yussef
════════════════════════
ⴵ Time: Tue, 03 Feb 2026 03:58:51 GMT
════════════════════════
⌗ Tags: #technology #bug_bounty_writeup #hacking #cybersecurity #bug_bounty
Medium
How I got a $$$$ by discovring a critical Sql Injecation vulnerability In a Public Bug Bounty program.
Hi Hackers, welcome all to this write up, After a long time for sharing write up in medium, here is the new write up, about new tecnic, for…
25 views
Daily Writeups
⤷ Title: TryHackMe — Introduction to SIEM (Walkthrough)
════════════════════════
𐀪 Author: Hudson Lois Marcus
════════════════════════
ⴵ Time: Tue, 03 Feb 2026 03:48:54 GMT
════════════════════════
⌗ Tags: #introduction_to_siem #tryhackme_walkthrough #tryhackme_writeup #tryhackme #siem
Medium
TryHackMe — Introduction to SIEM (Walkthrough)
In this room, we will learn how different devices in a network generate logs and why it is essential to have a centralized solution to…
39 views
Daily Writeups
⤷ Title: Insomnia HTB Web Challenge — Walkthrough
════════════════════════
𐀪 Author: Sooraj Mohan
════════════════════════
ⴵ Time: Tue, 03 Feb 2026 03:31:01 GMT
════════════════════════
⌗ Tags: #hackthebox #ctf_writeup #source_code_review #webchallenge #hackthebox_writeup
Medium
Insomnia HTB Web Challenge — Walkthrough
Insomnia HTB Web Challenge — Walkthrough Insomnia is a web challenge from Hack The Box website. The challenge is to find the flag from the Insomnia website. It’s an Easy web challenge focusing on …
40 views
Daily Writeups
⤷ Title: Notepad++ Hosting Breach Attributed to China-Linked Lotus Blossom Hacking Group
════════════════════════
𐀪 Author: Unknown
════════════════════════
ⴵ Time: Tue, 03 Feb 2026 10:25:00 +0530
════════════════════════
⌗ Tags: No_Tags
29 views
Daily Writeups
⤷ Title: Agent of Chaos: Why Cybersecurity Experts Are Terrified of the “Viral” Moltbot AI Assistant
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Tue, 03 Feb 2026 04:57:17 +0000
════════════════════════
⌗ Tags: #Malware #AI Agent security #Clawdbot #ClawdHub #Credential Theft #info_stealing malware #Jamieson O’Reilly #Mac Mini server #Moltbot #OpenClaw #personal AI assistant #Prompt Injection #supply chain attack
Penetration Testing Tools
Agent of Chaos: Why Cybersecurity Experts Are Terrified of the "Viral" Moltbot AI Assistant
The burgeoning popularity of the AI assistant Moltbot—formerly known as Clawdbot, a nomenclature abandoned following trademark disputes with
29 views
Daily Writeups
⤷ Title: Beyond Blackouts: The ELECTRUM Strike on Poland and the New Era of “Digital Arson”
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Tue, 03 Feb 2026 04:55:47 +0000
════════════════════════
⌗ Tags: #Cyber Security #CERT Polska #Distributed Energy Resources (DER) #Dragos #DynoWiper #ELECTRUM #grid stability #Industrial Control Systems #Operational Technology (OT) #Polish power grid #Sandworm #Tech News
Penetration Testing Tools
Beyond Blackouts: The ELECTRUM Strike on Poland and the New Era of "Digital Arson"
A cyberattack that initially garnered scant attention in Poland has since emerged as a pivotal signal for the
14 views
Daily Writeups
⤷ Title: Surgical Silence: The New Fortinet Zero-Day That Hijacks Firewalls in Seconds
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Tue, 03 Feb 2026 04:54:51 +0000
════════════════════════
⌗ Tags: #Vulnerability #Arctic Wolf #authentication bypass #cloud_init@mail.io #CVE_2026_24858 #FortiCloud SSO #FortiGate #Fortinet #SAML exploit #secadmin #zero_day 2026
Penetration Testing Tools
Surgical Silence: The New Fortinet Zero-Day That Hijacks Firewalls in Seconds
Cybersecurity specialists at Arctic Wolf have identified a nascent wave of incursions targeting Fortinet FortiGate firewalls. Adversaries are
12 views
Daily Writeups
⤷ Title: The Invisible Mosaic: How Tycoon’s HTML QR Codes and Teams Scams Are Blinding Modern Defenses
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Tue, 03 Feb 2026 04:53:44 +0000
════════════════════════
⌗ Tags: #Cybercriminals #Barracuda research #callback phishing #email security 2026 #Facebook copyright scam #Homoglyph Attack #HTML table QR #Microsoft Teams scam #Phishing_as_a_Service #QR Code Phishing #Tycoon toolkit
Penetration Testing Tools
The Invisible Mosaic: How Tycoon’s HTML QR Codes and Teams Scams Are Blinding Modern Defenses
In the preceding month, analysts at Barracuda have identified a flurry of sophisticated email-borne incursions targeting corporations and
19 views
Daily Writeups
⤷ Title: The Final Countdown: OpenAI to Retire GPT-4o—But There’s a Catch for Enterprise Users
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Tue, 03 Feb 2026 04:33:33 +0000
════════════════════════
⌗ Tags: #Technology #AI model retirement #ChatGPT Education #ChatGPT Enterprise #GPT_4.5 #GPT_4o #GPT_5 #legacy models #OpenAI #Tech News #workspace settings
Daily CyberSecurity
The Final Countdown: OpenAI to Retire GPT-4o—But There’s a Catch for Enterprise Users
OpenAI retires GPT-4o on Feb 13, 2026. While Free and Plus users lose access, Enterprise and Education accounts can keep it. Learn how to toggle legacy mode.
18 views
Daily Writeups
⤷ Title: PC-Powered Android: Google’s “Aluminium OS” Leaks Reveal a New Rival for Windows
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Tue, 03 Feb 2026 04:29:32 +0000
════════════════════════
⌗ Tags: #Android #Aluminium OS #Android 16 #Android Desktop #ChromeOS merger #Gemini AI #Google Desktop Camera #Google leaks #PC operating systems #Tech News #x86 Android
Daily CyberSecurity
PC-Powered Android: Google’s "Aluminium OS" Leaks Reveal a New Rival for Windows
Google’s "Aluminium OS" and a new Desktop Camera app have leaked. Discover how the unified Android-ChromeOS platform plans to bring Android 16 to your PC.
13 views
Daily Writeups
⤷ Title: Root via Telnet: Why You Must Patch Your Synology NAS Against This Decade-Old Ghost
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Tue, 03 Feb 2026 04:26:44 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #CVE_2026_24061 #DiskStation #DSM 7.2.2 #firmware update #GNU Inetutils #NAS security #privilege escalation #Root Exploit #Synology #Telnet vulnerability
Daily CyberSecurity
Root via Telnet: Why You Must Patch Your Synology NAS Against This Decade-Old Ghost
10 views
Daily Writeups
⤷ Title: The “Unstoppable” PC: Why Microsoft’s Latest Security Update is Refusing to Let Windows 10 Die
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Tue, 03 Feb 2026 04:23:17 +0000
════════════════════════
⌗ Tags: #Windows #Credential Guard #KB5073724 #KB5078131 #LTSC 2021 #reboot loop #shutdown bug #Tech News #VBS #Virtual Secure Mode #VSM #Windows 10
Daily CyberSecurity
The "Unstoppable" PC: Why Microsoft’s Latest Security Update is Refusing to Let Windows 10 Die
Microsoft confirms Windows 10 updates KB5078131 and KB5073724 are causing shutdown failures on VSM-enabled PCs. Use the "shutdown /s /t 0" fix to power off.
7 views