Daily Writeups
@Daily_Writeups
3.49K subscribers
2 photos
128K links
Daily Bug Bounty / Cybersecurity Writeups
Source Code : https://github.com/Spix0r/writeup-miner
Download Telegram
About
Blog
Apps
Platform
Join
Daily Writeups
3.49K subscribers
Daily Writeups
⤷ Title: Do AI Company's Even Have a Hold on Their Product
════════════════════════
𐀪 Author: Jerimiah Jackson
════════════════════════
ⴵ Time: Thu, 05 Feb 2026 22:12:50 GMT
════════════════════════
⌗ Tags: #ai #206 #xs #news #elon_musk
Medium
Do AI Company's Even Have a Hold on Their Product
Yesterday February 3, 2026 a news story came out from APN & NBC news reporting on the infamous Elon musk. This story captured the events…
30 views
Daily Writeups
⤷ Title: The Invisible Landlord: ShadowSyndicate Rotates Keys to Hide Infrastructure
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Fri, 06 Feb 2026 00:42:35 +0000
════════════════════════
⌗ Tags: #Cybercriminals #bulletproof hosting #C2 Servers #Cobalt Strike #Cybercrime #Group_IB #initial access broker #Ransomware Infrastructure #ShadowSyndicate #SSH Key Rotation
Daily CyberSecurity
The Invisible Landlord: ShadowSyndicate Rotates Keys to Hide Infrastructure
Group-IB reveals ShadowSyndicate is evolving. The cybercrime cluster now rotates SSH keys to hide its infrastructure. Is it a BPH or IAB?
22 views
Daily Writeups
⤷ Title: Popular n8n Platform Hit by Triple Threat of RCE Flaws
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Fri, 06 Feb 2026 00:39:22 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #CVE_2026_25049 #CVE_2026_25053 #CVE_2026_25056 #Git Node #Low Code Security #Merge Node #n8n #Patch Alert #Remote Code Execution #Workflow Automation
Daily CyberSecurity
Popular n8n Platform Hit by Triple Threat of RCE Flaws
Critical n8n flaws (CVE-2026-25053, 25056) allow attackers to hijack servers via Git & Merge nodes. Update to v2.5.0 now to prevent RCE.
20 views
Daily Writeups
⤷ Title: The Invisible Proxy: NGINX Hijacked for Silent SEO Poisoning
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Fri, 06 Feb 2026 00:33:06 +0000
════════════════════════
⌗ Tags: #Cybercriminals #Baota Panel #Datadog #Gambling Spam #Malicious Configuration #nginx #Proxy Pass #SEO Poisoning #SysAdmin #Traffic Hijacking #Web Server Security
Daily CyberSecurity
The Invisible Proxy: NGINX Hijacked for Silent SEO Poisoning
Hackers are hijacking NGINX servers via malicious config injections. Datadog warns of silent traffic redirection for SEO poisoning. Check your proxy_pass.
15 views
Daily Writeups
⤷ Title: Phantom in the Machine: Inside Salt Typhoon’s “SnappyBee” Backdoor
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Fri, 06 Feb 2026 00:27:36 +0000
════════════════════════
⌗ Tags: #Malware #Advanced Persistent Threat #Cobalt Strike #Darktrace #Deed RAT #Demodex #DLL side_loading #Earth Estries #Malware Analysis #Salt Typhoon #SNAPPYBEE
Daily CyberSecurity
Phantom in the Machine: Inside Salt Typhoon’s "SnappyBee" Backdoor
Darktrace dissects SnappyBee (Deed RAT), a stealthy Salt Typhoon backdoor. Learn how it uses DLL side-loading & memory hooking to evade modern AV.
12 views
Daily Writeups
⤷ Title: 4 Million Downloads at Risk: Critical Unstructured Flaw (CVSS 9.8) Allows RCE
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Fri, 06 Feb 2026 00:23:34 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #AI supply chain #CVE_2025_64712 #CVSS 9.8 #LLM Data #Malicious MSG #Patch Alert #Path Traversal #Python Security #rce #Unstructured Library
Daily CyberSecurity
4 Million Downloads at Risk: Critical Unstructured Flaw (CVSS 9.8) Allows RCE
Critical Unstructured library flaw CVE-2025-64712 (CVSS 9.8) allows RCE via malicious .msg files. 4M+ downloads affected. Update to v0.18.18 now.
21 views
Daily Writeups
⤷ Title: Stealth Injection: Silver Fox APT Upgrades “ValleyRat” with Rare PoolParty Tech
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Fri, 06 Feb 2026 00:17:36 +0000
════════════════════════
⌗ Tags: #Malware #cyber_espionage #Cybereason #Explorer.exe #Fake Installer #Malware Analysis #PoolParty Variant 7 #Process injection #Silver Fox APT #ValleyRAT #Winos 4.0
Daily CyberSecurity
Stealth Injection: Silver Fox APT Upgrades "ValleyRat" with Rare PoolParty Tech
Silver Fox APT targets users with fake LINE installers delivering ValleyRat. New campaign uses rare "PoolParty" injection to evade detection.
13 views
Daily Writeups
⤷ Title: Cloud-Hosted Trap: Phishers Use Vercel & Telegram to Bypass Filters
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Fri, 06 Feb 2026 00:11:49 +0000
════════════════════════
⌗ Tags: #Cybercriminals #Cloud Security #Credential Harvesting #Dropbox Impersonation #Email Security #PDF Phishing #phishing #social engineering #Telegram bot #Vercel Blob #X_Labs
Daily CyberSecurity
Cloud-Hosted Trap: Phishers Use Vercel & Telegram to Bypass Filters
Sophisticated phishing abuses Vercel Blob & PDFs to bypass filters. Stolen credentials are exfiltrated via Telegram bots. Learn how to spot this attack.
14 views
Daily Writeups
⤷ Title: “PDF” Poison: Popular JavaScript Library Patches Critical Injection and Crash Flaws
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Fri, 06 Feb 2026 00:07:28 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #AcroForm #BMPDecoder #CVE_2026_24133 #CVE_2026_24737 #Denial of Service #Front_end Development #JavaScript Library #jsPDF #PDF Generation #Web Security #XSS
Daily CyberSecurity
"PDF" Poison: Popular JavaScript Library Patches Critical Injection and Crash Flaws
Critical jsPDF flaws (CVE-2026-24133) allow XSS & DoS via malicious BMPs. Update to v4.1.0 immediately to prevent browser crashes and code injection.
26 views
Daily Writeups
⤷ Title: Macs Under Siege: New Infostealers Spread via WhatsApp & Fake Apps
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Fri, 06 Feb 2026 00:01:18 +0000
════════════════════════
⌗ Tags: #Malware #AMOS #Credential Theft #Crystal PDF #Cyber Security #Eternidade Stealer #Infostealer #macOS Malware #Microsoft Defender #Python Malware #WhatsApp Worm
Daily CyberSecurity
Macs Under Siege: New Infostealers Spread via WhatsApp & Fake Apps
Microsoft warns: Infostealers now target macOS & use WhatsApp worms. "Eternidade" & "Crystal PDF" steal credentials via cross-platform attacks.
24 views
Daily Writeups
⤷ Title: Guía Avanzada de Curl para Bug Hunting: Técnicas de Reconocimiento y Explotación
════════════════════════
𐀪 Author: JPablo13
════════════════════════
ⴵ Time: Fri, 06 Feb 2026 00:01:01 GMT
════════════════════════
⌗ Tags: #bug_bounty #hacking #infosec #cybersecurity #technology
Medium
Guía Avanzada de Curl para Bug Hunting: Técnicas de Reconocimiento y Explotación
Domina curl para auditorías de seguridad: bypass de WAF, explotación de Race Conditions y automatización de reconocimiento.
20 views
Daily Writeups
⤷ Title: 280+ Leaky Skills: How OpenClaw & ClawHub Are Exposing API Keys and PII
════════════════════════
𐀪 Author: Snyk
════════════════════════
ⴵ Time: Fri, 06 Feb 2026 02:00:27 GMT
════════════════════════
⌗ Tags: #ai #vulnerabilityinsights #application_security
Medium
280+ Leaky Skills: How OpenClaw & ClawHub Are Exposing API Keys and PII
On Monday, February 3rd, Snyk Staff Senior Engineer Luca Beurer-Kellner and Senior Incubation Engineer Hemang Sarkar uncovered a massive systemic vulnerability in the ClawHub ecosystem (clawhub.ai) …
39 views
Daily Writeups
⤷ Title: AWS Enumeration Using Pacu: Cybr’s IAM Lab
════════════════════════
𐀪 Author: Amanuel
════════════════════════
ⴵ Time: Fri, 06 Feb 2026 00:13:50 GMT
════════════════════════
⌗ Tags: #cybersecurity #application_security #cloud_security #penetration_testing #aws_security
Medium
AWS Enumeration Using Pacu: Cybr’s IAM Lab
If you’re getting into AWS pentesting, one of the first superpowers you need is solid IAM enumeration. It’s the “recon phase” of cloud…
32 views
Daily Writeups
⤷ Title: Dragon in the Archives: How “Amaranth-Dragon” Weaponized a WinRAR Zero-Day to Spy on Southeast Asia
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Fri, 06 Feb 2026 02:47:01 +0000
════════════════════════
⌗ Tags: #Cyber Security #Vulnerability #Amaranth_Dragon #APT41 #CVE_2025_8088 #Cyber Espionage #DLL side_loading #Havoc framework #Southeast Asia #Spear Phishing #Tech News 2026 #TGAmaranth RAT #Winrar
Penetration Testing Tools
Dragon in the Archives: How "Amaranth-Dragon" Weaponized a WinRAR Zero-Day to Spy on Southeast Asia
In 2025, Southeast Asia witnessed a pronounced escalation in cyber-espionage operations, meticulously cloaked in missives pertaining to regional
27 views
Daily Writeups
⤷ Title: Sandbox Shattered: New n8n Critical Flaw CVE-2026-25049 Exposes AI Workflows to Full Takeover
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Fri, 06 Feb 2026 02:45:05 +0000
════════════════════════
⌗ Tags: #Vulnerability #AI Automation #CVE_2026_25049 #Endor Labs #expression evaluation #n8n #Pillar Security #RCE #remote code execution #Sandbox Escape #SecureLayer7 #Tech News 2026 #webhook exploit
Penetration Testing Tools
Sandbox Shattered: New n8n Critical Flaw CVE-2026-25049 Exposes AI Workflows to Full Takeover
The n8n workflow automation platform is once again embroiled in a significant security crisis. In a recently disseminated
18 views
Daily Writeups
⤷ Title: The Nested Forgery: How a Hidden Flaw in Teleport’s SSH Logic Grants Total Server Ingress
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Fri, 06 Feb 2026 02:44:15 +0000
════════════════════════
⌗ Tags: #Vulnerability #authentication bypass #CVE_2025_49825 #cybersecurity news 2026 #exploit analysis #Infrastructure Security #RCE #server hardening #SSH certificates #Teleport #Zero Trust
Penetration Testing Tools
The Nested Forgery: How a Hidden Flaw in Teleport's SSH Logic Grants Total Server Ingress
A critical vulnerability within the Teleport remote access framework has been unearthed and meticulously deconstructed, revealing a methodology
17 views
Daily Writeups
⤷ Title: The Forensic Backfire: How Hackers Weaponized a Legacy EnCase Driver to Decapitate Modern EDR
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Fri, 06 Feb 2026 02:41:00 +0000
════════════════════════
⌗ Tags: #Cybercriminals #BYOVD #Cyberattack 2026 #driver blocklist #EDR killer #EnCase driver #Huntress #HVCI #kernel_mode #MFA Bypass #process termination #SonicWall #SSL VPN
Penetration Testing Tools
The Forensic Backfire: How Hackers Weaponized a Legacy EnCase Driver to Decapitate Modern EDR
Adversaries are increasingly inaugurating their offensives not with conventional malware, but by subverting legitimate remote access credentials. A
15 views
Daily Writeups
⤷ Title: The Silent Pivot: Global SystemBC Botnet Ensnares 10,000+ IPs, Including Government Portals
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Fri, 06 Feb 2026 02:39:15 +0000
════════════════════════
⌗ Tags: #Malware #BOTNET #C2 Infrastructure #Cyber Espionage #Linux Perl variant #Operation Endgame #proxy malware #ransomware precursor #Silent Push #SOCKS5 #SystemBC #Tech News 2026
Penetration Testing Tools
The Silent Pivot: Global SystemBC Botnet Ensnares 10,000+ IPs, Including Government Portals
Security specialists at Silent Push have unearthed a pervasive wave of SystemBC infections, a malware strain that surreptitiously
14 views
Daily Writeups
⤷ Title: The Invisible Proxy: How Hackers Are Weaponizing NGINX and Baota Panels to Hijack Web Traffic
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Fri, 06 Feb 2026 02:37:37 +0000
════════════════════════
⌗ Tags: #Cybercriminals #Asia top_level domains #Baota Panel #CVE_2025_55182 #Cyber Espionage #Datadog #man_in_the_middle #MITM #Nginx #React2Shell #Tech News 2026 #traffic hijacking #web server security
Penetration Testing Tools
The Invisible Proxy: How Hackers Are Weaponizing NGINX and Baota Panels to Hijack Web Traffic
Security analysts at Datadog have unmasked an ongoing traffic interception campaign targeting NGINX servers and hosting management interfaces,
21 views
Daily Writeups
⤷ Title: Blinding the Watchmen: How “GhostLocker” Weaponizes Windows AppLocker to Paralyze EDR
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Fri, 06 Feb 2026 02:35:42 +0000
════════════════════════
⌗ Tags: #Vulnerability #application control #AppLocker bypass #AppLocker event logs #defensive evasion #EDR neutralization #endpoint detection #GhostLocker #GhostLocker PoC #Tech News 2026 #Windows Security
Penetration Testing Tools
Blinding the Watchmen: How "GhostLocker" Weaponizes Windows AppLocker to Paralyze EDR
A critical subversion of the Windows application control mechanism has been unearthed, involving the exploitation of AppLocker configurations
18 views
Daily Writeups
⤷ Title: Shadows Vanish: The “Global Man” Exit Scam Leaves Malware Operators in the Dark
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Fri, 06 Feb 2026 02:34:11 +0000
════════════════════════
⌗ Tags: #Cybercriminals #code_signing certificates #cybercrime forums #digital certificates #EV Certificates #Exit Scam #Global Man #kernel_mode drivers #malware obfuscation #security breach 2026 #Shadow Economy #threat intelligence
Penetration Testing Tools
Shadows Vanish: The "Global Man" Exit Scam Leaves Malware Operators in the Dark
In the clandestine digital underworld, a prominent purveyor of code-signing certificates has executed a high-profile disappearance. The Global
18 views