Daily Writeups
@Daily_Writeups
3.53K subscribers
2 photos
130K links
Daily Bug Bounty / Cybersecurity Writeups
Source Code : https://github.com/Spix0r/writeup-miner
Download Telegram
About
Blog
Apps
Platform
Join
Daily Writeups
3.53K subscribers
Daily Writeups
⤷ Title: What does a cybersecurity researcher do and how do you get started?
════════════════════════
𐀪 Author: Nancy Gariché
════════════════════════
ⴵ Time: Wed, 29 Jan 2025 17:00:31 +0000
════════════════════════
⌗ Tags: #Security #Vulnerability research #application security #Career in Cybersecurity #cybersecurity #GitHub Security Lab #security research #Vulnerability Detection
The GitHub Blog
What does a cybersecurity researcher do and how do you get started?
Discover the exciting world of cybersecurity research: what researchers do, essential skills, and actionable steps to begin your journey toward protecting the digital world.
19 views
Daily Writeups
⤷ Title: Introduction to API Pen-Testing: My CyberSafe Training Experience (Week 9)
════════════════════════
𐀪 Author: Stella Obatoye
════════════════════════
ⴵ Time: Wed, 04 Feb 2026 22:13:50 GMT
════════════════════════
⌗ Tags: #vulnerability_management #application_security #owasp_api_security_top_10 #api #api_penetration_testing
Medium
Introduction to API Pen-Testing: My CyberSafe Training Experience (Week 9)
18 views
Daily Writeups
⤷ Title: HacktheBox or TryHackme? My experiences with both
════════════════════════
𐀪 Author: Michael Harms
════════════════════════
ⴵ Time: Wed, 04 Feb 2026 22:46:28 GMT
════════════════════════
⌗ Tags: #tryhackme #hackthebox #cybersecurity
Medium
HacktheBox or TryHackme? My experiences with both
I tried both cyber security training platforms. Both are have their unique ways to teach cyber security.
28 views
Daily Writeups
⤷ Title: Advanced Network Reconnaissance: Masscan & THC-IPv6
════════════════════════
𐀪 Author: mohandika
════════════════════════
ⴵ Time: Wed, 04 Feb 2026 23:16:53 GMT
════════════════════════
⌗ Tags: #cybersecurity #reconnaissance #masscan #ethical_hacking #toolkit
Medium
Advanced Network Reconnaissance: Masscan & THC-IPv6
The Cybersecurity Toolkit: Masscan for Speed, THC-IPv6 for Security testing
38 views
Daily Writeups
⤷ Title: Top AI Tools for Red Teaming in 2026
════════════════════════
𐀪 Author: Owais Sultan
════════════════════════
ⴵ Time: Thu, 05 Feb 2026 00:36:44 +0000
════════════════════════
⌗ Tags: #Artificial Intelligence #Security #AI #Cybersecurity #Garak #Giskard #HiddenLayer #Novee #Promptfoo #Red Team
Hackread
Top AI Tools for Red Teaming in 2026
AI red teaming pairs human insight with adaptive AI to test model behavior, expose hidden failure modes, and run continuous adversarial checks at scale.
38 views
Daily Writeups
⤷ Title: CVE-2026-24735: Apache Answer Flaw Leaks Private Post History
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Thu, 05 Feb 2026 01:53:21 +0000
════════════════════════
⌗ Tags: #Vulnerability Report
Daily CyberSecurity
CVE-2026-24735: Apache Answer Flaw Leaks Private Post History
Apache Answer flaw CVE-2026-24735 exposes deleted post history to unauthenticated users via API. Upgrade to v2.0.0 to stop data leaks.
19 views
Daily Writeups
⤷ Title: WatchGuard Patches VPN PrivEsc & Firebox LDAP Injection
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Thu, 05 Feb 2026 00:40:55 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #CVE_2026_1498 #firewall #Fireware OS #LDAP injection #NCPVE_2025_0626 #network_security #Patch Alert #privilege escalation #VPN security #WatchGuard
Daily CyberSecurity
WatchGuard Patches VPN PrivEsc & Firebox LDAP Injection
WatchGuard patches two flaws: a VPN privilege escalation (NCPVE-2025-0626) and Fireware LDAP injection (CVE-2026-1498). Update Firebox and VPN clients now.
15 views
Daily Writeups
⤷ Title: Video of Death: Critical vLLM Flaw (CVSS 9.8) Grants Remote Code Execution
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Thu, 05 Feb 2026 00:37:00 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #AI security #CVE_2026_22778 #FFmpeg #heap overflow #LLM Inference #Machine Learning Security #OpenCV #Python Imaging Library #Remote Code Execution #vLLM
Daily CyberSecurity
Video of Death: Critical vLLM Flaw (CVSS 9.8) Grants Remote Code Execution
Critical vLLM bug CVE-2026-22778 (CVSS 9.8) lets attackers hijack servers using malicious videos. Affects video model deployments. Patch to v0.14.1 now.
13 views
Daily Writeups
⤷ Title: Supply Chain Poison: Lotus Blossom Hits Notepad++ to Deploy “Chrysalis”
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Thu, 05 Feb 2026 00:32:43 +0000
════════════════════════
⌗ Tags: #Cyber Security #Malware #APT #Chrysalis #DLL side_loading #Elise #Lotus Blossom #Malware Analysis #Microsoft Warbird #notepad++ #Rapid7 #Spring Dragon #supply chain attack
Daily CyberSecurity
Supply Chain Poison: Lotus Blossom Hits Notepad++ to Deploy "Chrysalis"
Lotus Blossom compromises Notepad++ infrastructure to deploy "Chrysalis" malware. Rapid7 reveals the group using Microsoft Warbird to evade detection.
26 views
Daily Writeups
⤷ Title: CISA Warns of Unpatched Avation & RISS Critical Flaws
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Thu, 05 Feb 2026 00:27:19 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #Avation #CISA #Critical Infrastructure #CVE_2026_1341 #CVE_2026_1632 #Light Engine Pro #MOMA Seismic Station #OT Security #RISS SRL #Unresponsive Vendor
Daily CyberSecurity
CISA Warns of Unpatched Avation & RISS Critical Flaws
CISA warns Avation & RISS SRL are unresponsive to critical flaws (CVSS 9.8). Devices lack authentication. Isolate these unpatched systems now.
12 views
Daily Writeups
⤷ Title: “Can You Hear Me?” BlueNoroff Hackers Use Fake Audio Glitch to Breach macOS
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Thu, 05 Feb 2026 00:20:32 +0000
════════════════════════
⌗ Tags: #Cyber Security #Malware #BlueNoroff #Crypto Heist #Daylight Security #GhostCall #Keychain Theft #Lazarus Group #macOS security #malware #Microsoft Teams #social engineering
Daily CyberSecurity
"Can You Hear Me?" BlueNoroff Hackers Use Fake Audio Glitch to Breach macOS
BlueNoroff hackers use fake "audio issues" on Teams calls to trick macOS users. The "fix" runs terminal commands that steal Keychains. Watch out.
14 views
Daily Writeups
⤷ Title: Signage Hijack: Samsung MagicInfo9 Flaws (CVSS 9.8) Expose Servers
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Thu, 05 Feb 2026 00:16:00 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #CVE_2026_25200 #CVE_2026_25201 #CVE_2026_25202 #Digital Signage #hardcoded credentials #MagicInfo9 #Patch Alert #rce #samsung #Stored XSS
Daily CyberSecurity
Signage Hijack: Samsung MagicInfo9 Flaws (CVSS 9.8) Expose Servers
Samsung MagicInfo9 has critical flaws (CVSS 9.8) including hardcoded passwords and RCE. Update to v21.1090.1 immediately to secure your digital signage.
16 views
Daily Writeups
⤷ Title: Ghost Folders: “Directory Shadowing” Hack Hijacks WordPress SEO
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Thu, 05 Feb 2026 00:11:09 +0000
════════════════════════
⌗ Tags: #Cybercriminals #apache #Directory Shadowing #Gambling Spam #Googlebot Cloaking #malware #nginx #SEO Spam #Sucuri #Web Server Security #wordpress
Daily CyberSecurity
Ghost Folders: "Directory Shadowing" Hack Hijacks WordPress SEO
New "directory shadowing" malware creates physical folders to hijack WordPress URLs. It feeds gambling spam to Googlebots while staying invisible.
11 views
Daily Writeups
⤷ Title: Open VSX Hijacked: “GlassWorm” Malware Poisons VS Code Extensions
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Thu, 05 Feb 2026 00:06:26 +0000
════════════════════════
⌗ Tags: #Malware #GlassWorm #Infostealer #macOS security #malware #oorzc #Open VSX #Socket Research #Solana C2 #supply chain attack #VS Code Extensions
Daily CyberSecurity
Open VSX Hijacked: "GlassWorm" Malware Poisons VS Code Extensions
GlassWorm malware found in Open VSX extensions. Hackers stole AWS & SSH keys from macOS devs using Solana C2. 22k+ downloads affected. Check your tools.
16 views
Daily Writeups
⤷ Title: Industrial Alert: Critical Auth Bypass (CVSS 9.2) Hits Moxa Switches
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Thu, 05 Feb 2026 00:01:04 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #Authentication Bypass #Critical Vulnerability #CVE_2024_12297 #ICS security #industrial Ethernet switch #Moxa #OT Security #Patch Alert #TN_A Series #TN_G Series
Daily CyberSecurity
Industrial Alert: Critical Auth Bypass (CVSS 9.2) Hits Moxa Switches
Moxa warns of critical auth bypass (CVE-2024-12297, CVSS 9.2) in industrial switches. Flaw allows brute-force attacks. Patch TN-series devices now.
15 views
Daily Writeups
⤷ Title: Why Penetration Testing Is No Longer Optional for Singapore Businesses
════════════════════════
𐀪 Author: Dianna
════════════════════════
ⴵ Time: Thu, 05 Feb 2026 01:42:34 GMT
════════════════════════
⌗ Tags: #cybersecurity #penetration_testing #cyber_security_awareness
Medium
Why Penetration Testing Is No Longer Optional for Singapore Businesses
Choosing the right penetration testing company in Singapore has become a critical decision for businesses operating in an increasingly…
23 views
Daily Writeups
⤷ Title: How Hackers Control Any System with Linux Processes
════════════════════════
𐀪 Author: Shahzaib
════════════════════════
ⴵ Time: Thu, 05 Feb 2026 01:16:33 GMT
════════════════════════
⌗ Tags: #ethical_hacking #hacking_tools #data_science #technology #cybersecurity
Medium
How Hackers Control Any System with Linux Processes
It’s Not Magic it’s Mastery of the System
25 views
Daily Writeups
⤷ Title: Screaming at the Kernel: How GhostKatz Uses “Vulnerable Drivers” to Dump Credentials via Physical Memory
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Thu, 05 Feb 2026 04:00:10 +0000
════════════════════════
⌗ Tags: #Open Source Tool #Aggressor Script #BYOVD #Cobalt Strike #credential exfiltration #Erik Esquivel #GhostKatz #Julian Peña #kernel exploitation #LSASS dump #MmMapIoSpace #red team tools #Tech News 2026
Information Security News
Screaming at the Kernel: How GhostKatz Uses “Vulnerable Drivers” to Dump Credentials via Physical Memory
Security researcher Julian Peña has unveiled GhostKatz, a formidable new utility engineered to exfiltrate credentials from the LSASS process by directly accessing a computer’s physical memor…
19 views
Daily Writeups
⤷ Title: Pipe Dreams Turned Nightmare: Remote Code Execution via Quest KACE Desktop Authority
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Thu, 05 Feb 2026 03:56:42 +0000
════════════════════════
⌗ Tags: #Vulnerability #CVE_2025_67813 #Desktop Authority #Named Pipe #NetSPI #privilege escalation #Quest KACE #RCE #remote code execution #ScriptLogic #SMB #Tech News 2026 #Windows Security
Penetration Testing Tools
Pipe Dreams Turned Nightmare: Remote Code Execution via Quest KACE Desktop Authority
A critical Remote Code Execution (RCE) vulnerability has been unearthed within the enterprise solution Quest KACE Desktop Authority,
23 views
Daily Writeups
⤷ Title: Surgical Espionage: The “Chrysalis” Backdoor and the 6-Month Hijack of Notepad++
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Thu, 05 Feb 2026 03:54:20 +0000
════════════════════════
⌗ Tags: #Cyber Security #Malware #Billbug #Bitdefender Submission Wizard #Chrysalis backdoor #Cyber Espionage #DLL side_loading #Lotus Blossom #Notepad++ #NSIS installer #Rapid7 #supply chain attack #Tech News 2026
Penetration Testing Tools
Surgical Espionage: The "Chrysalis" Backdoor and the 6-Month Hijack of Notepad++
Cybersecurity researchers persist in their investigation of a sophisticated incursion targeting the ubiquitous text editor Notepad++, which remained
16 views
Daily Writeups
⤷ Title: Shattering the Trust: The “GlassWorm” Supply Chain Attack Hijacking Open VSX Extensions
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Thu, 05 Feb 2026 03:53:08 +0000
════════════════════════
⌗ Tags: #Malware #Credential Theft #Developer Security #GlassWorm #Infostealer #macOS Malware #oorzc #Open VSX #Socket Security #Solana blockchain #supply chain attack #VS Code extensions
Penetration Testing Tools
Shattering the Trust: The "GlassWorm" Supply Chain Attack Hijacking Open VSX Extensions
A sophisticated supply chain incursion has been documented within the Open VSX extension registry, precipitated by the illicit
14 views