Daily Writeups
@Daily_Writeups
3.55K subscribers
2 photos
130K links
Daily Bug Bounty / Cybersecurity Writeups
Source Code : https://github.com/Spix0r/writeup-miner
Download Telegram
About
Blog
Apps
Platform
Join
Daily Writeups
3.55K subscribers
Daily Writeups
⤷ Title: Open VSX Hijacked: “GlassWorm” Malware Poisons VS Code Extensions
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Thu, 05 Feb 2026 00:06:26 +0000
════════════════════════
⌗ Tags: #Malware #GlassWorm #Infostealer #macOS security #malware #oorzc #Open VSX #Socket Research #Solana C2 #supply chain attack #VS Code Extensions
Daily CyberSecurity
Open VSX Hijacked: "GlassWorm" Malware Poisons VS Code Extensions
GlassWorm malware found in Open VSX extensions. Hackers stole AWS & SSH keys from macOS devs using Solana C2. 22k+ downloads affected. Check your tools.
16 views
Daily Writeups
⤷ Title: Industrial Alert: Critical Auth Bypass (CVSS 9.2) Hits Moxa Switches
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Thu, 05 Feb 2026 00:01:04 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #Authentication Bypass #Critical Vulnerability #CVE_2024_12297 #ICS security #industrial Ethernet switch #Moxa #OT Security #Patch Alert #TN_A Series #TN_G Series
Daily CyberSecurity
Industrial Alert: Critical Auth Bypass (CVSS 9.2) Hits Moxa Switches
Moxa warns of critical auth bypass (CVE-2024-12297, CVSS 9.2) in industrial switches. Flaw allows brute-force attacks. Patch TN-series devices now.
15 views
Daily Writeups
⤷ Title: Why Penetration Testing Is No Longer Optional for Singapore Businesses
════════════════════════
𐀪 Author: Dianna
════════════════════════
ⴵ Time: Thu, 05 Feb 2026 01:42:34 GMT
════════════════════════
⌗ Tags: #cybersecurity #penetration_testing #cyber_security_awareness
Medium
Why Penetration Testing Is No Longer Optional for Singapore Businesses
Choosing the right penetration testing company in Singapore has become a critical decision for businesses operating in an increasingly…
23 views
Daily Writeups
⤷ Title: How Hackers Control Any System with Linux Processes
════════════════════════
𐀪 Author: Shahzaib
════════════════════════
ⴵ Time: Thu, 05 Feb 2026 01:16:33 GMT
════════════════════════
⌗ Tags: #ethical_hacking #hacking_tools #data_science #technology #cybersecurity
Medium
How Hackers Control Any System with Linux Processes
It’s Not Magic it’s Mastery of the System
25 views
Daily Writeups
⤷ Title: Screaming at the Kernel: How GhostKatz Uses “Vulnerable Drivers” to Dump Credentials via Physical Memory
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Thu, 05 Feb 2026 04:00:10 +0000
════════════════════════
⌗ Tags: #Open Source Tool #Aggressor Script #BYOVD #Cobalt Strike #credential exfiltration #Erik Esquivel #GhostKatz #Julian Peña #kernel exploitation #LSASS dump #MmMapIoSpace #red team tools #Tech News 2026
Information Security News
Screaming at the Kernel: How GhostKatz Uses “Vulnerable Drivers” to Dump Credentials via Physical Memory
Security researcher Julian Peña has unveiled GhostKatz, a formidable new utility engineered to exfiltrate credentials from the LSASS process by directly accessing a computer’s physical memor…
19 views
Daily Writeups
⤷ Title: Pipe Dreams Turned Nightmare: Remote Code Execution via Quest KACE Desktop Authority
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Thu, 05 Feb 2026 03:56:42 +0000
════════════════════════
⌗ Tags: #Vulnerability #CVE_2025_67813 #Desktop Authority #Named Pipe #NetSPI #privilege escalation #Quest KACE #RCE #remote code execution #ScriptLogic #SMB #Tech News 2026 #Windows Security
Penetration Testing Tools
Pipe Dreams Turned Nightmare: Remote Code Execution via Quest KACE Desktop Authority
A critical Remote Code Execution (RCE) vulnerability has been unearthed within the enterprise solution Quest KACE Desktop Authority,
23 views
Daily Writeups
⤷ Title: Surgical Espionage: The “Chrysalis” Backdoor and the 6-Month Hijack of Notepad++
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Thu, 05 Feb 2026 03:54:20 +0000
════════════════════════
⌗ Tags: #Cyber Security #Malware #Billbug #Bitdefender Submission Wizard #Chrysalis backdoor #Cyber Espionage #DLL side_loading #Lotus Blossom #Notepad++ #NSIS installer #Rapid7 #supply chain attack #Tech News 2026
Penetration Testing Tools
Surgical Espionage: The "Chrysalis" Backdoor and the 6-Month Hijack of Notepad++
Cybersecurity researchers persist in their investigation of a sophisticated incursion targeting the ubiquitous text editor Notepad++, which remained
16 views
Daily Writeups
⤷ Title: Shattering the Trust: The “GlassWorm” Supply Chain Attack Hijacking Open VSX Extensions
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Thu, 05 Feb 2026 03:53:08 +0000
════════════════════════
⌗ Tags: #Malware #Credential Theft #Developer Security #GlassWorm #Infostealer #macOS Malware #oorzc #Open VSX #Socket Security #Solana blockchain #supply chain attack #VS Code extensions
Penetration Testing Tools
Shattering the Trust: The "GlassWorm" Supply Chain Attack Hijacking Open VSX Extensions
A sophisticated supply chain incursion has been documented within the Open VSX extension registry, precipitated by the illicit
14 views
Daily Writeups
⤷ Title: Targeting the Grid: ESET Unmasks “DynoWiper” After Destructive Strike on Polish Energy Sector
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Thu, 05 Feb 2026 03:50:20 +0000
════════════════════════
⌗ Tags: #Cyber Security #Active Directory GPO #Critical Infrastructure #cyber sabotage #data wiper #DynoWiper #ESET research #LSASS memory dump #Poland energy sector #rsocx #Rubeus #Sandworm #Tech News 2026 #ZOV wiper
Penetration Testing Tools
Targeting the Grid: ESET Unmasks "DynoWiper" After Destructive Strike on Polish Energy Sector
ESET has disclosed the intricate technical specifications of an incursion involving a nascent data-obliteration utility designated as DynoWiper.
26 views
Daily Writeups
⤷ Title: The “Phantom” Resurrection: How Intrinsec Unmasked the Mandark-Powered Malware Loader Evading Global Defense
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Thu, 05 Feb 2026 03:48:37 +0000
════════════════════════
⌗ Tags: #Malware #AsyncRAT #cybersecurity news #DarkCloud #Intrinsec #IoCs 2026 #Mandark utility #PhantomVAI #Process Hollowing #Remcos #RunPE framework #Threat Hunting #XWorm #YARA rules
Penetration Testing Tools
The "Phantom" Resurrection: How Intrinsec Unmasked the Mandark-Powered Malware Loader Evading Global Defense
Analysts at Intrinsec have documented a surge in offensives leveraging the PhantomVAI loader, a utility architected upon the
18 views
Daily Writeups
⤷ Title: The Sanctuary of Thought: Why Anthropic is Betting on an “Ad-Free” Claude to Topple ChatGPT
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Thu, 05 Feb 2026 03:42:43 +0000
════════════════════════
⌗ Tags: #Technology #ad_free AI #Agentic AI #AI Ethics #AI Monetization #Anthropic #ChatGPT Ads #Claude #Claude Constitution #OpenAI #professional AI #Tech News 2026
Daily CyberSecurity
The Sanctuary of Thought: Why Anthropic is Betting on an "Ad-Free" Claude to Topple ChatGPT
Anthropic pledges Claude will stay ad-free, mocking rivals with a 2026 Super Bowl spot. Discover their "Agentic AI" plan to monetize without selling your data.
20 views
Daily Writeups
⤷ Title: More in Store: Google Officially Teases the Pixel 10a for a February 18 Debut
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Thu, 05 Feb 2026 03:38:06 +0000
════════════════════════
⌗ Tags: #Android #February 18 #Google AI #Google Pixel 10a #Made by Google #mid_range smartphone #Pixel 10a pre_order #Pixel 10a rumors #Pixel A_series #Tech News 2026 #Tensor G5
Daily CyberSecurity
More in Store: Google Officially Teases the Pixel 10a for a February 18 Debut
Google teases the Pixel 10a! Pre-orders open Feb 18. Discover the "More in Store" upgrades, including the Tensor G5 chip and flagship-grade AI features.
14 views
Daily Writeups
⤷ Title: Beyond the Wall: Intel and SoftBank’s ZAM Aims to Dethrone HBM by 2030
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Thu, 05 Feb 2026 03:33:30 +0000
════════════════════════
⌗ Tags: #Technology #3D DRAM stacking #Advanced Memory Technology #AI Memory #AMT #HBM #High Bandwidth Memory #intel #Next Generation DRAM Bonding #NGDB #SAIMEMORY #SoftBank #Tech News 2026 #Z_Angle Memory #ZAM
Daily CyberSecurity
Beyond the Wall: Intel and SoftBank’s ZAM Aims to Dethrone HBM by 2030
Intel and SoftBank subsidiary SAIMEMORY join forces to develop Z-Angle Memory (ZAM), a next-gen stacked DRAM aiming to slash power and double AI memory capacity.
16 views
Daily Writeups
⤷ Title: Intel’s “Do-or-Die” GPU Push: CEO Lip-Bu Tan Recruits Eric Demers to Topple NVIDIA’s Hegemony
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Thu, 05 Feb 2026 03:29:16 +0000
════════════════════════
⌗ Tags: #Technology #14A process #AI inferencing #Chief GPU Architect #Cisco AI Summit #data center GPU #Eric Demers #Eric Demmers #Huawei #intel #Intel Foundry #Lip_Bu Tan #nvidia
Daily CyberSecurity
Intel’s "Do-or-Die" GPU Push: CEO Lip-Bu Tan Recruits Eric Demers to Topple NVIDIA’s Hegemony
Intel CEO Lip-Bu Tan recruits Eric Demers as Chief GPU Architect to challenge NVIDIA. Plus, a warning on Huawei’s "poor man's" leap in chip design.
13 views
Daily Writeups
⤷ Title: The Chrome Divorce: DOJ and 38 States File Cross-Appeal to Force Google’s Breakup
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Thu, 05 Feb 2026 03:24:54 +0000
════════════════════════
⌗ Tags: #Technology #Alphabet Inc #Apple Google deal #Big Tech Regulation #Chrome divestiture #cross_appeal #Department of Justice #Google Antitrust #Judge Amit Mehta #search monopoly #Tech News 2026
Daily CyberSecurity
The Chrome Divorce: DOJ and 38 States File Cross-Appeal to Force Google’s Breakup
The DOJ and 38 states have filed a cross-appeal to force Google to sell Chrome, arguing that current "modest" search monopoly sanctions are not enough.
14 views
Daily Writeups
⤷ Title: Aluminum OS Unleashed: Google’s Secret Roadmap to Sunset ChromeOS for an Android Desktop
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Thu, 05 Feb 2026 03:20:06 +0000
════════════════════════
⌗ Tags: #Android #2034 roadmap #Aluminum OS #Android 16 #Android Desktop #ChromeOS sunset #google #Google Antitrust #laptop OS #Project Aluminum #Snapdragon Summit #Tech News 2026
Daily CyberSecurity
Aluminum OS Unleashed: Google’s Secret Roadmap to Sunset ChromeOS for an Android Desktop
Unsealed court files reveal Google’s "Aluminum OS" will pilot in 2026, bridging Android and PC. Discover why ChromeOS is officially slated for a 2034 sunset.
18 views
Daily Writeups
⤷ Title: Musk’s “Orbital Brain”: xAI Recruits Elite Crypto Traders as SpaceX Eyes a $1.25 Trillion IPO
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Thu, 05 Feb 2026 03:13:18 +0000
════════════════════════
⌗ Tags: #Technology #blockchain analysis #crypto trading #DeFi #Elon Musk #Grok AI #orbital data centers #quantitative trading #SpaceX IPO #Starlink #Tech News 2026 #xAI
Daily CyberSecurity
Musk’s "Orbital Brain": xAI Recruits Elite Crypto Traders as SpaceX Eyes a $1.25 Trillion IPO
Elon Musk’s xAI is hiring crypto experts to train Grok in market reasoning, just as SpaceX moves toward a massive $1.25 trillion June IPO.
15 views
Daily Writeups
⤷ Title: 10 Days to Exploit: Amaranth-Dragon Weaponizes WinRAR Flaw to Spy on SE Asia
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Thu, 05 Feb 2026 02:36:20 +0000
════════════════════════
⌗ Tags: #Cyber Security #Vulnerability Report #Amaranth_Dragon #APT_41 #CVE_2025_8088 #Havoc C2 #Malware Analysis #Southeast Asia Cyber Espionage #Telegram RAT #WinRAR Vulnerability
Daily CyberSecurity
10 Days to Exploit: Amaranth-Dragon Weaponizes WinRAR Flaw to Spy on SE Asia
Amaranth-Dragon (APT-41 nexus) weaponized WinRAR flaw CVE-2025-8088 in just 10 days. Southeast Asian govts targeted with malicious RAR archives.
14 views
Daily Writeups
⤷ Title: Toxic Invites & Root Access: Cisco Patches Critical Meeting Flaws
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Thu, 05 Feb 2026 02:07:23 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #cisco #Cisco Meeting Management #CVE_2026_20098 #CVE_2026_20119 #Denial of Service #Patch Alert #RoomOS #Root Privilege Escalation #TelePresence #Video Conferencing Security
Daily CyberSecurity
Toxic Invites & Root Access: Cisco Patches Critical Meeting Flaws
Cisco patches critical flaws: CVE-2026-20098 allows root access in Meeting Management, while malicious invites crash TelePresence units. Update now.
23 views
Daily Writeups
⤷ Title: How I Exploited a Secondary Context Bug to Trigger SSRF & Path Traversal in Backend API Calls
════════════════════════
𐀪 Author: Bryan Matthew
════════════════════════
ⴵ Time: Thu, 05 Feb 2026 03:41:00 GMT
════════════════════════
⌗ Tags: #bug_bounty #pentesting #ssrf #path_traversal #red_team
Medium
How I Exploited a Secondary Context Bug to Trigger SSRF & Path Traversal in Backend API Calls
Modern Website Architecture
23 views
Daily Writeups
⤷ Title: Intermediate Nmap Walkthrough (TryHackMe)
════════════════════════
𐀪 Author: Crystalcascade14
════════════════════════
ⴵ Time: Thu, 05 Feb 2026 02:41:01 GMT
════════════════════════
⌗ Tags: #tryhackme #tryhackme_writeup #penetration_testing #nmap #tryhackme_walkthrough
Medium
Intermediate Nmap Walkthrough (TryHackMe)
TryHackMe room for beginners
28 views