Daily Writeups
@Daily_Writeups
3.55K subscribers
2 photos
130K links
Daily Bug Bounty / Cybersecurity Writeups
Source Code : https://github.com/Spix0r/writeup-miner
Download Telegram
About
Blog
Apps
Platform
Join
Daily Writeups
3.55K subscribers
Daily Writeups
⤷ Title: CVE-2026-24735: Apache Answer Flaw Leaks Private Post History
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Thu, 05 Feb 2026 01:53:21 +0000
════════════════════════
⌗ Tags: #Vulnerability Report
Daily CyberSecurity
CVE-2026-24735: Apache Answer Flaw Leaks Private Post History
Apache Answer flaw CVE-2026-24735 exposes deleted post history to unauthenticated users via API. Upgrade to v2.0.0 to stop data leaks.
19 views
Daily Writeups
⤷ Title: WatchGuard Patches VPN PrivEsc & Firebox LDAP Injection
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Thu, 05 Feb 2026 00:40:55 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #CVE_2026_1498 #firewall #Fireware OS #LDAP injection #NCPVE_2025_0626 #network_security #Patch Alert #privilege escalation #VPN security #WatchGuard
Daily CyberSecurity
WatchGuard Patches VPN PrivEsc & Firebox LDAP Injection
WatchGuard patches two flaws: a VPN privilege escalation (NCPVE-2025-0626) and Fireware LDAP injection (CVE-2026-1498). Update Firebox and VPN clients now.
15 views
Daily Writeups
⤷ Title: Video of Death: Critical vLLM Flaw (CVSS 9.8) Grants Remote Code Execution
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Thu, 05 Feb 2026 00:37:00 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #AI security #CVE_2026_22778 #FFmpeg #heap overflow #LLM Inference #Machine Learning Security #OpenCV #Python Imaging Library #Remote Code Execution #vLLM
Daily CyberSecurity
Video of Death: Critical vLLM Flaw (CVSS 9.8) Grants Remote Code Execution
Critical vLLM bug CVE-2026-22778 (CVSS 9.8) lets attackers hijack servers using malicious videos. Affects video model deployments. Patch to v0.14.1 now.
13 views
Daily Writeups
⤷ Title: Supply Chain Poison: Lotus Blossom Hits Notepad++ to Deploy “Chrysalis”
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Thu, 05 Feb 2026 00:32:43 +0000
════════════════════════
⌗ Tags: #Cyber Security #Malware #APT #Chrysalis #DLL side_loading #Elise #Lotus Blossom #Malware Analysis #Microsoft Warbird #notepad++ #Rapid7 #Spring Dragon #supply chain attack
Daily CyberSecurity
Supply Chain Poison: Lotus Blossom Hits Notepad++ to Deploy "Chrysalis"
Lotus Blossom compromises Notepad++ infrastructure to deploy "Chrysalis" malware. Rapid7 reveals the group using Microsoft Warbird to evade detection.
26 views
Daily Writeups
⤷ Title: CISA Warns of Unpatched Avation & RISS Critical Flaws
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Thu, 05 Feb 2026 00:27:19 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #Avation #CISA #Critical Infrastructure #CVE_2026_1341 #CVE_2026_1632 #Light Engine Pro #MOMA Seismic Station #OT Security #RISS SRL #Unresponsive Vendor
Daily CyberSecurity
CISA Warns of Unpatched Avation & RISS Critical Flaws
CISA warns Avation & RISS SRL are unresponsive to critical flaws (CVSS 9.8). Devices lack authentication. Isolate these unpatched systems now.
12 views
Daily Writeups
⤷ Title: “Can You Hear Me?” BlueNoroff Hackers Use Fake Audio Glitch to Breach macOS
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Thu, 05 Feb 2026 00:20:32 +0000
════════════════════════
⌗ Tags: #Cyber Security #Malware #BlueNoroff #Crypto Heist #Daylight Security #GhostCall #Keychain Theft #Lazarus Group #macOS security #malware #Microsoft Teams #social engineering
Daily CyberSecurity
"Can You Hear Me?" BlueNoroff Hackers Use Fake Audio Glitch to Breach macOS
BlueNoroff hackers use fake "audio issues" on Teams calls to trick macOS users. The "fix" runs terminal commands that steal Keychains. Watch out.
14 views
Daily Writeups
⤷ Title: Signage Hijack: Samsung MagicInfo9 Flaws (CVSS 9.8) Expose Servers
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Thu, 05 Feb 2026 00:16:00 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #CVE_2026_25200 #CVE_2026_25201 #CVE_2026_25202 #Digital Signage #hardcoded credentials #MagicInfo9 #Patch Alert #rce #samsung #Stored XSS
Daily CyberSecurity
Signage Hijack: Samsung MagicInfo9 Flaws (CVSS 9.8) Expose Servers
Samsung MagicInfo9 has critical flaws (CVSS 9.8) including hardcoded passwords and RCE. Update to v21.1090.1 immediately to secure your digital signage.
16 views
Daily Writeups
⤷ Title: Ghost Folders: “Directory Shadowing” Hack Hijacks WordPress SEO
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Thu, 05 Feb 2026 00:11:09 +0000
════════════════════════
⌗ Tags: #Cybercriminals #apache #Directory Shadowing #Gambling Spam #Googlebot Cloaking #malware #nginx #SEO Spam #Sucuri #Web Server Security #wordpress
Daily CyberSecurity
Ghost Folders: "Directory Shadowing" Hack Hijacks WordPress SEO
New "directory shadowing" malware creates physical folders to hijack WordPress URLs. It feeds gambling spam to Googlebots while staying invisible.
11 views
Daily Writeups
⤷ Title: Open VSX Hijacked: “GlassWorm” Malware Poisons VS Code Extensions
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Thu, 05 Feb 2026 00:06:26 +0000
════════════════════════
⌗ Tags: #Malware #GlassWorm #Infostealer #macOS security #malware #oorzc #Open VSX #Socket Research #Solana C2 #supply chain attack #VS Code Extensions
Daily CyberSecurity
Open VSX Hijacked: "GlassWorm" Malware Poisons VS Code Extensions
GlassWorm malware found in Open VSX extensions. Hackers stole AWS & SSH keys from macOS devs using Solana C2. 22k+ downloads affected. Check your tools.
16 views
Daily Writeups
⤷ Title: Industrial Alert: Critical Auth Bypass (CVSS 9.2) Hits Moxa Switches
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Thu, 05 Feb 2026 00:01:04 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #Authentication Bypass #Critical Vulnerability #CVE_2024_12297 #ICS security #industrial Ethernet switch #Moxa #OT Security #Patch Alert #TN_A Series #TN_G Series
Daily CyberSecurity
Industrial Alert: Critical Auth Bypass (CVSS 9.2) Hits Moxa Switches
Moxa warns of critical auth bypass (CVE-2024-12297, CVSS 9.2) in industrial switches. Flaw allows brute-force attacks. Patch TN-series devices now.
15 views
Daily Writeups
⤷ Title: Why Penetration Testing Is No Longer Optional for Singapore Businesses
════════════════════════
𐀪 Author: Dianna
════════════════════════
ⴵ Time: Thu, 05 Feb 2026 01:42:34 GMT
════════════════════════
⌗ Tags: #cybersecurity #penetration_testing #cyber_security_awareness
Medium
Why Penetration Testing Is No Longer Optional for Singapore Businesses
Choosing the right penetration testing company in Singapore has become a critical decision for businesses operating in an increasingly…
23 views
Daily Writeups
⤷ Title: How Hackers Control Any System with Linux Processes
════════════════════════
𐀪 Author: Shahzaib
════════════════════════
ⴵ Time: Thu, 05 Feb 2026 01:16:33 GMT
════════════════════════
⌗ Tags: #ethical_hacking #hacking_tools #data_science #technology #cybersecurity
Medium
How Hackers Control Any System with Linux Processes
It’s Not Magic it’s Mastery of the System
25 views
Daily Writeups
⤷ Title: Screaming at the Kernel: How GhostKatz Uses “Vulnerable Drivers” to Dump Credentials via Physical Memory
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Thu, 05 Feb 2026 04:00:10 +0000
════════════════════════
⌗ Tags: #Open Source Tool #Aggressor Script #BYOVD #Cobalt Strike #credential exfiltration #Erik Esquivel #GhostKatz #Julian Peña #kernel exploitation #LSASS dump #MmMapIoSpace #red team tools #Tech News 2026
Information Security News
Screaming at the Kernel: How GhostKatz Uses “Vulnerable Drivers” to Dump Credentials via Physical Memory
Security researcher Julian Peña has unveiled GhostKatz, a formidable new utility engineered to exfiltrate credentials from the LSASS process by directly accessing a computer’s physical memor…
19 views
Daily Writeups
⤷ Title: Pipe Dreams Turned Nightmare: Remote Code Execution via Quest KACE Desktop Authority
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Thu, 05 Feb 2026 03:56:42 +0000
════════════════════════
⌗ Tags: #Vulnerability #CVE_2025_67813 #Desktop Authority #Named Pipe #NetSPI #privilege escalation #Quest KACE #RCE #remote code execution #ScriptLogic #SMB #Tech News 2026 #Windows Security
Penetration Testing Tools
Pipe Dreams Turned Nightmare: Remote Code Execution via Quest KACE Desktop Authority
A critical Remote Code Execution (RCE) vulnerability has been unearthed within the enterprise solution Quest KACE Desktop Authority,
23 views
Daily Writeups
⤷ Title: Surgical Espionage: The “Chrysalis” Backdoor and the 6-Month Hijack of Notepad++
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Thu, 05 Feb 2026 03:54:20 +0000
════════════════════════
⌗ Tags: #Cyber Security #Malware #Billbug #Bitdefender Submission Wizard #Chrysalis backdoor #Cyber Espionage #DLL side_loading #Lotus Blossom #Notepad++ #NSIS installer #Rapid7 #supply chain attack #Tech News 2026
Penetration Testing Tools
Surgical Espionage: The "Chrysalis" Backdoor and the 6-Month Hijack of Notepad++
Cybersecurity researchers persist in their investigation of a sophisticated incursion targeting the ubiquitous text editor Notepad++, which remained
16 views
Daily Writeups
⤷ Title: Shattering the Trust: The “GlassWorm” Supply Chain Attack Hijacking Open VSX Extensions
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Thu, 05 Feb 2026 03:53:08 +0000
════════════════════════
⌗ Tags: #Malware #Credential Theft #Developer Security #GlassWorm #Infostealer #macOS Malware #oorzc #Open VSX #Socket Security #Solana blockchain #supply chain attack #VS Code extensions
Penetration Testing Tools
Shattering the Trust: The "GlassWorm" Supply Chain Attack Hijacking Open VSX Extensions
A sophisticated supply chain incursion has been documented within the Open VSX extension registry, precipitated by the illicit
14 views
Daily Writeups
⤷ Title: Targeting the Grid: ESET Unmasks “DynoWiper” After Destructive Strike on Polish Energy Sector
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Thu, 05 Feb 2026 03:50:20 +0000
════════════════════════
⌗ Tags: #Cyber Security #Active Directory GPO #Critical Infrastructure #cyber sabotage #data wiper #DynoWiper #ESET research #LSASS memory dump #Poland energy sector #rsocx #Rubeus #Sandworm #Tech News 2026 #ZOV wiper
Penetration Testing Tools
Targeting the Grid: ESET Unmasks "DynoWiper" After Destructive Strike on Polish Energy Sector
ESET has disclosed the intricate technical specifications of an incursion involving a nascent data-obliteration utility designated as DynoWiper.
26 views
Daily Writeups
⤷ Title: The “Phantom” Resurrection: How Intrinsec Unmasked the Mandark-Powered Malware Loader Evading Global Defense
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Thu, 05 Feb 2026 03:48:37 +0000
════════════════════════
⌗ Tags: #Malware #AsyncRAT #cybersecurity news #DarkCloud #Intrinsec #IoCs 2026 #Mandark utility #PhantomVAI #Process Hollowing #Remcos #RunPE framework #Threat Hunting #XWorm #YARA rules
Penetration Testing Tools
The "Phantom" Resurrection: How Intrinsec Unmasked the Mandark-Powered Malware Loader Evading Global Defense
Analysts at Intrinsec have documented a surge in offensives leveraging the PhantomVAI loader, a utility architected upon the
18 views
Daily Writeups
⤷ Title: The Sanctuary of Thought: Why Anthropic is Betting on an “Ad-Free” Claude to Topple ChatGPT
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Thu, 05 Feb 2026 03:42:43 +0000
════════════════════════
⌗ Tags: #Technology #ad_free AI #Agentic AI #AI Ethics #AI Monetization #Anthropic #ChatGPT Ads #Claude #Claude Constitution #OpenAI #professional AI #Tech News 2026
Daily CyberSecurity
The Sanctuary of Thought: Why Anthropic is Betting on an "Ad-Free" Claude to Topple ChatGPT
Anthropic pledges Claude will stay ad-free, mocking rivals with a 2026 Super Bowl spot. Discover their "Agentic AI" plan to monetize without selling your data.
20 views
Daily Writeups
⤷ Title: More in Store: Google Officially Teases the Pixel 10a for a February 18 Debut
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Thu, 05 Feb 2026 03:38:06 +0000
════════════════════════
⌗ Tags: #Android #February 18 #Google AI #Google Pixel 10a #Made by Google #mid_range smartphone #Pixel 10a pre_order #Pixel 10a rumors #Pixel A_series #Tech News 2026 #Tensor G5
Daily CyberSecurity
More in Store: Google Officially Teases the Pixel 10a for a February 18 Debut
Google teases the Pixel 10a! Pre-orders open Feb 18. Discover the "More in Store" upgrades, including the Tensor G5 chip and flagship-grade AI features.
14 views
Daily Writeups
⤷ Title: Beyond the Wall: Intel and SoftBank’s ZAM Aims to Dethrone HBM by 2030
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Thu, 05 Feb 2026 03:33:30 +0000
════════════════════════
⌗ Tags: #Technology #3D DRAM stacking #Advanced Memory Technology #AI Memory #AMT #HBM #High Bandwidth Memory #intel #Next Generation DRAM Bonding #NGDB #SAIMEMORY #SoftBank #Tech News 2026 #Z_Angle Memory #ZAM
Daily CyberSecurity
Beyond the Wall: Intel and SoftBank’s ZAM Aims to Dethrone HBM by 2030
Intel and SoftBank subsidiary SAIMEMORY join forces to develop Z-Angle Memory (ZAM), a next-gen stacked DRAM aiming to slash power and double AI memory capacity.
16 views