Daily Writeups
@Daily_Writeups
3.56K subscribers
2 photos
130K links
Daily Bug Bounty / Cybersecurity Writeups
Source Code : https://github.com/Spix0r/writeup-miner
Download Telegram
About
Blog
Apps
Platform
Join
Daily Writeups
3.56K subscribers
Daily Writeups
⤷ Title: The “Update” Trap: How State-Sponsored Hackers Hijacked Notepad++ Infrastructure for 6 Months
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Wed, 04 Feb 2026 03:17:51 +0000
════════════════════════
⌗ Tags: #Cyber Security #Malware #Chinese APT #Chrysalis backdoor #Don Ho #Lotus Blossom #malware #Notepad++ #supply chain attack #Supply Chain Security #update hijack #Violet Typhoon #WinGUp #Zirconium
Penetration Testing Tools
The "Update" Trap: How State-Sponsored Hackers Hijacked Notepad++ Infrastructure for 6 Months
For nearly half a year, the ubiquitous text editor Notepad++ inadvertently disseminated malicious payloads rather than legitimate refinements.
11 views
Daily Writeups
⤷ Title: Sabotaged Strings: The “Malicious” Vandalism Behind Tor Browser’s Emergency 15.0.5 Patch
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Wed, 04 Feb 2026 03:14:58 +0000
════════════════════════
⌗ Tags: #Technology #Android Security #localization attack #NoScript #OpenSSL 3.5.5 #software vandalism #Supply Chain Security #Tech News #Tor Browser 15.0.5 #Tor Project #Vietnamese translation
Penetration Testing Tools
Sabotaged Strings: The "Malicious" Vandalism Behind Tor Browser’s Emergency 15.0.5 Patch
The architects of Tor Browser have inaugurated a nascent iteration, Tor Browser 15.0.5. This unscheduled refinement was catalyzed
8 views
Daily Writeups
⤷ Title: Native Sysmon Arrives in the Latest Windows 11 Insider Build 26300
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Wed, 04 Feb 2026 03:08:19 +0000
════════════════════════
⌗ Tags: #Windows #Build 26300.7733 #Dev Channel #forensic analysis #KB5074178 #Microsoft Sysinternals #Sysmon #Tech News #Threat Detection #Windows 11 #Windows 26H2 #Windows Insider
Daily CyberSecurity
Native Sysmon Arrives in the Latest Windows 11 Insider Build 26300
Microsoft integrates native Sysmon into Windows 11 Build 26300.7733 (KB5074178). Track process creation and network links with this built-in forensic "dashcam."
10 views
Daily Writeups
⤷ Title: Breaking the AI Silo: How Google’s New “Import AI Chats” Feature Ends Context Lock-In
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Wed, 04 Feb 2026 03:00:35 +0000
════════════════════════
⌗ Tags: #Technology #AI chat history #AI data portability #ChatGPT #Claude #context lock_in #Data Migration #Gemini Beta features #Google Gemini #Import AI Chats #Tech News 2026
Daily CyberSecurity
Breaking the AI Silo: How Google’s New "Import AI Chats" Feature Ends Context Lock-In
Google Gemini is testing an "Import AI Chats" tool to let users migrate histories from ChatGPT and Claude. Say goodbye to starting over with every new AI.
10 views
Daily Writeups
⤷ Title: The Vanishing Taskbar: Windows 11’s Optional KB5074105 Update Rescues Users from “Explorer” Hell
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Wed, 04 Feb 2026 02:56:01 +0000
════════════════════════
⌗ Tags: #Windows #24H2 #25H2 #desktop icons #KB5074105 #laptop camera bug #optional update #taskbar bug #Tech News #Windows 11 #Windows Explorer crash
Daily CyberSecurity
The Vanishing Taskbar: Windows 11’s Optional KB5074105 Update Rescues Users from “Explorer” Hell
On January 29, Microsoft disseminated the preview update KB5074105 for Windows 11 versions 24H2 and 25H2. While this release encompasses a vast array of remedial fixes and functional refinements, …
10 views
Daily Writeups
⤷ Title: Silent Intrusion: “Metro4Shell” Exploited in the Wild Since December
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Wed, 04 Feb 2026 02:27:37 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #CVE_2025_11953 #DevSecOps #Exploitation in the Wild #Metro Development Server #Metro4Shell #React Native #VulnCheck #vulnerability management #zero_day
Daily CyberSecurity
Silent Intrusion: “Metro4Shell” Exploited in the Wild Since December
A new report from VulnCheck reveals that CVE-2025-11953, a critical flaw in the Metro development server dubbed “Metro4Shell,” was being actively weaponized in the wild as early as lat…
12 views
Daily Writeups
⤷ Title: Urgent Django Update: Patches 3 Critical SQL Injections & DoS Risks
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Wed, 04 Feb 2026 02:19:21 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #Backend Development #CVE_2026_1207 #CVE_2026_1287 #Django #dos #FilteredRelation #PostGIS #Python #software update #sql injection #Web Security
Daily CyberSecurity
Urgent Django Update: Patches 3 Critical SQL Injections & DoS Risks
Django patches 3 critical SQL injection flaws & DoS risks in versions 6.0.2, 5.2.11, & 4.2.28. Update immediately to secure your database.
8 views
Daily Writeups
⤷ Title: React Under Siege: Two IPs Drive 56% of Critical CVE-2025-55182 Attacks
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Wed, 04 Feb 2026 02:12:30 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #cryptomining #CVE_2025_55182 #DevSecOps #GreyNoise #Patch Alert #React #React Server Components #Remote Code Execution #reverse shell #Web Security
Daily CyberSecurity
React Under Siege: Two IPs Drive 56% of Critical CVE-2025-55182 Attacks
Critical React flaw CVE-2025-55182 (CVSS 10.0) under mass exploitation. Two IPs drive 56% of attacks deploying miners & shells. Upgrade to v19.0.1+ now.
14 views
Daily Writeups
⤷ Title: Chrome 144 Security Alert: V8 & Libvpx Flaws Expose Systems to Hacks
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Wed, 04 Feb 2026 02:05:22 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #browser security #Chrome Update #CVE_2026_1861 #CVE_2026_1862 #google chrome #Heap Buffer Overflow #libvpx #Patch Alert #Type Confusion #V8 JavaScript engine
Daily CyberSecurity
Chrome 144 Security Alert: V8 & Libvpx Flaws Expose Systems to Hacks
Google Chrome patches high-severity V8 (CVE-2026-1862) and libvpx (CVE-2026-1861) flaws. Update to version 144.0.7559.132 immediately.
14 views
Daily Writeups
⤷ Title: When Encryption Replaced Authorization — and the IDOR Didn’t Go Away
════════════════════════
𐀪 Author: Xp10it
════════════════════════
ⴵ Time: Wed, 04 Feb 2026 03:46:01 GMT
════════════════════════
⌗ Tags: #cybersecurity #application_security #web_security #bug_bounty #software_engineering
Medium
When Encryption Replaced Authorization — and the IDOR Didn’t Go Away
A real-world example of why cryptography cannot substitute object-level authorization.
28 views
Daily Writeups
⤷ Title: The Hidden Danger in XML: A Deep Dive into XXE Injection for Modern Pentesters
════════════════════════
𐀪 Author: Fuzzyy Duck
════════════════════════
ⴵ Time: Wed, 04 Feb 2026 03:32:54 GMT
════════════════════════
⌗ Tags: #security #bug_bounty #web_development #bug_bounty_writeup #bug_bounty_tips
Medium
The Hidden Danger in XML: A Deep Dive into XXE Injection for Modern Pentesters
If you have spent any time testing APIs, legacy enterprise systems, or authentication workflows, you have probably seen XML quietly sitting…
11 views
Daily Writeups
⤷ Title: How to Analyze a Suspicious URL Without Clicking It
════════════════════════
𐀪 Author: Paritosh
════════════════════════
ⴵ Time: Wed, 04 Feb 2026 02:06:26 GMT
════════════════════════
⌗ Tags: #cybersecurity #ai #phishing #hacking #bug_bounty
Medium
How to Analyze a Suspicious URL Without Clicking It
Because curiosity is good. Clicking random links is not. 😅
15 views
Daily Writeups
⤷ Title: From Theory to Blue Team Reality: What Completing TryHackMe’s SOC Level 1 Path Taught Me
════════════════════════
𐀪 Author: sree
════════════════════════
ⴵ Time: Wed, 04 Feb 2026 03:18:06 GMT
════════════════════════
⌗ Tags: #cybersecurity #security #application_security
Medium
From Theory to Blue Team Reality: What Completing TryHackMe’s SOC Level 1 Path Taught Me
After building a solid foundation in cybersecurity and web application security, I realized the next step was to see security from a…
26 views
Daily Writeups
⤷ Title: If I Were Attacking Your Company in 2026, I Wouldn’t Start With Code
════════════════════════
𐀪 Author: Faizan Ahmad Wani
════════════════════════
ⴵ Time: Wed, 04 Feb 2026 03:10:59 GMT
════════════════════════
⌗ Tags: #socialengineeringattack #hacking #cyber_security_awareness #redteam_tool #cybersecurity
Medium
If I Were Attacking Your Company in 2026, I Wouldn’t Start With Code
Everyone wants to talk about AI exploits, zero-days, and automated attack chains. That’s not where I’d start.
20 views
Daily Writeups
⤷ Title: From SDR to Exploit
════════════════════════
𐀪 Author: Michael Preston
════════════════════════
ⴵ Time: Wed, 04 Feb 2026 02:44:21 GMT
════════════════════════
⌗ Tags: #hacking #sdr #penetration_testing #coding #pentesting
Medium
From SDR to Exploit
How I Used Cheap Hardware to Start Pentesting Wireless Devices
19 views
Daily Writeups
⤷ Title: Nully Cybersecurity CTF — Flag 1: Mail Server Root
════════════════════════
𐀪 Author: IO
════════════════════════
ⴵ Time: Wed, 04 Feb 2026 03:47:57 GMT
════════════════════════
⌗ Tags: #cybersecurity #ctf_writeup #ethical_hacking #vulnhub
Medium
Nully Cybersecurity CTF — Flag 1: Mail Server Root
⚠️ Disclaimer: This lab was performed in a controlled environment for educational purposes only. This is a publicly available CTF from…
22 views
Daily Writeups
⤷ Title: My approach for passing the CPSA Exam
════════════════════════
𐀪 Author: Rahul Singh Chauhan
════════════════════════
ⴵ Time: Wed, 04 Feb 2026 03:32:35 GMT
════════════════════════
⌗ Tags: #ethical_hacking #crest #cpsa_exam #certification #offensive_security
Medium
My approach for passing the CPSA Exam
Hi everyone, in this article, I’ll be discussing the approach I took to passing the CPSA exam.
22 views
Daily Writeups
⤷ Title: Docker Fixes a Critical AI Flaw That Turned Image Metadata into Executable Code
════════════════════════
𐀪 Author: Er Raj Aryan
════════════════════════
ⴵ Time: Wed, 04 Feb 2026 02:43:46 GMT
════════════════════════
⌗ Tags: #data_science #kubernetes #docker #ethical_hacking #ai
Medium
Docker Fixes a Critical AI Flaw That Turned Image Metadata into Executable Code
Modern developer tools are quietly becoming autonomous actors. And as Docker just learned the hard way, autonomy without trust boundaries…
34 views
Daily Writeups
⤷ Title: Sliver C2 Framework Lab — Setup and Basic Operations
════════════════════════
𐀪 Author: IO
════════════════════════
ⴵ Time: Wed, 04 Feb 2026 02:15:05 GMT
════════════════════════
⌗ Tags: #cybersecurity #framework #red_team #command_and_control #ethical_hacking
Medium
Sliver C2 Framework Lab — Setup and Basic Operations
⚠️ Disclaimer: This lab was performed in a controlled environment for educational purposes only. Do not use these techniques on systems…
43 views
Daily Writeups
⤷ Title: One Identity Appoints Gihan Munasinghe as Chief Technology Officer
════════════════════════
𐀪 Author: CyberNewswire
════════════════════════
ⴵ Time: Wed, 04 Feb 2026 05:32:44 +0000
════════════════════════
⌗ Tags: #Press Release
34 views
Daily Writeups
⤷ Title: One Identity Appoints Gihan Munasinghe as Chief Technology Officer
════════════════════════
𐀪 Author: cybernewswire
════════════════════════
ⴵ Time: Wed, 04 Feb 2026 05:33:06 +0000
════════════════════════
⌗ Tags: #Press Release
Daily CyberSecurity
One Identity Appoints Gihan Munasinghe as Chief Technology Officer
Alisa Viejo, United States, 4th February 2026, CyberNewsWire
45 views