Daily Writeups
@Daily_Writeups
3.56K subscribers
2 photos
130K links
Daily Bug Bounty / Cybersecurity Writeups
Source Code : https://github.com/Spix0r/writeup-miner
Download Telegram
About
Blog
Apps
Platform
Join
Daily Writeups
3.56K subscribers
Daily Writeups
⤷ Title: Fortune Favors the AI: Crypto.com CEO Drops $70M on AI.com to Launch “Synthetic Secretaries” at Super Bowl LX
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Mon, 09 Feb 2026 00:50:07 +0000
════════════════════════
⌗ Tags: #Technology #$70M domain #AGI #AI Agents #AI.com #autonomous agents #Crypto.com #Decentralized AI #Kris Marszalek #Matt Damon #Super Bowl LX #Tech News 2026
Daily CyberSecurity
Fortune Favors the AI: Crypto.com CEO Drops $70M on AI.com to Launch "Synthetic Secretaries" at Super Bowl LX
Crypto.com’s Kris Marszalek spent $70M on AI.com to debut personal AI agents at Super Bowl LX. Transition from chat to agents that actually "get things done."
23 views
Daily Writeups
⤷ Title: Code Red: 4 Critical SandboxJS Flaws (CVSS 10.0) Allow Host Takeover
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Mon, 09 Feb 2026 00:46:57 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #Arbitrary Code Execution #CVE_2026_25520 #CVE_2026_25586 #CVSS 10.0 #Host Prototype Pollution #JavaScript Security #Patch Alert #Sandbox Escape #SandboxJS #Web Security
Daily CyberSecurity
Code Red: 4 Critical SandboxJS Flaws (CVSS 10.0) Allow Host Takeover
Critical SandboxJS flaws (CVSS 10.0) allow sandbox escape & host takeover via prototype pollution. Update to v0.8.29 immediately to stop code execution.
18 views
Daily Writeups
⤷ Title: Digital Detox Mandate: EU Charges TikTok Over “Autopilot” Design and Minor Safety Failures
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Mon, 09 Feb 2026 00:44:43 +0000
════════════════════════
⌗ Tags: #Technology #addictive design #autoplay #ByteDance #Digital Services Act #DSA #EU Commission #Henna Virkkunen #infinite scroll #Mental Health #minor safety #tech regulation 2026 #TikTok
Daily CyberSecurity
Digital Detox Mandate: EU Charges TikTok Over "Autopilot" Design and Minor Safety Failures
The EU Commission preliminarily finds TikTok's design addictive and in breach of the DSA. The app faces massive fines and a mandatory interface overhaul.
19 views
Daily Writeups
⤷ Title: The “Compatibility” Trap: New Mac Malware Tricks Users into Bypassing TCC
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Mon, 09 Feb 2026 00:41:43 +0000
════════════════════════
⌗ Tags: #Malware #AppleScript #Compatibility Wizard #cybersecurity #Darktrace #infosec #macOS Malware #Node.js Loader #phishing #social engineering #TCC Bypass
Daily CyberSecurity
The “Compatibility” Trap: New Mac Malware Tricks Users into Bypassing TCC
Mac users, often confident in the “walled garden” security of their devices, are facing a new threat that doesn’t rely on cracking code, but on cracking human trust. A new invest…
16 views
Daily Writeups
⤷ Title: Tearing Down the Walled Garden: How Google Quick Share Finally Bridged the AirDrop Chasm
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Mon, 09 Feb 2026 00:39:43 +0000
════════════════════════
⌗ Tags: #Android #Apple AirDrop #Cross_Platform #Erik Kay #File Transfer #Google Quick Share #Interoperability #Pixel 10 #Samsung Galaxy S26 #Snapdragon 8 Gen 5 #Tech News 2026
Daily CyberSecurity
Tearing Down the Walled Garden: How Google Quick Share Finally Bridged the AirDrop Chasm
Google’s Quick Share is ending the "green bubble" file barrier. Learn how the 2026 rollout brings AirDrop compatibility to Samsung and Snapdragon devices.
14 views
Daily Writeups
⤷ Title: The “All-in-One” Spy: DKnife Malware Hijacks Routers to Swap Downloads
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Mon, 09 Feb 2026 00:38:42 +0000
════════════════════════
⌗ Tags: #Cyber Security #Malware #AiTM #Chinese Threat Actors #Cisco Talos #DarkNimbus #DKnife #Edge Devices #Malware Analysis #router security #ShadowPad #Traffic Manipulation #yitiji
Daily CyberSecurity
The "All-in-One" Spy: DKnife Malware Hijacks Routers to Swap Downloads
Cisco Talos exposes DKnife, a router malware that inspects traffic and swaps legitimate downloads for ShadowPad backdoors. Active since 2019.
17 views
Daily Writeups
⤷ Title: Double the RAM, Half the Stress: Raspberry Pi 4’s Secret Design Overhaul to Combat the 2026 Memory Crisis
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Mon, 09 Feb 2026 00:35:34 +0000
════════════════════════
⌗ Tags: #Technology #AI Infrastructure #dual_memory #hardware revision #LPDDR4 #Memory Shortage #pieeprom_2026_01_09 #price hike 2026 #Raspberry Pi 4B #Rev 1.5 #single_board computer
Daily CyberSecurity
Double the RAM, Half the Stress: Raspberry Pi 4’s Secret Design Overhaul to Combat the 2026 Memory Crisis
13 views
Daily Writeups
⤷ Title: “JackMa” & ShadowGuard: TGR-STA-1030 Spies on 37 Nations via Linux Rootkit
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Mon, 09 Feb 2026 00:32:38 +0000
════════════════════════
⌗ Tags: #Cyber Security #Malware #Advanced Persistent Threat #cyber_espionage #Diaoyu Loader #eBPF #geopolitics #JackMa #Linux Rootkit #ShadowGuard #TGR_STA_1030 #UNC6619 #Unit 42
Daily CyberSecurity
"JackMa" & ShadowGuard: TGR-STA-1030 Spies on 37 Nations via Linux Rootkit
TGR-STA-1030 (UNC6619) hits 70+ orgs in 37 countries. The Asia-based group uses the new ShadowGuard eBPF rootkit to hide in Linux kernels.
15 views
Daily Writeups
⤷ Title: CVE-2026-1731: Critical BeyondTrust Flaw (CVSS 9.9) Allows Pre-Auth RCE
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Mon, 09 Feb 2026 00:28:00 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #BeyondTrust #CVE_2026_1731 #CVSS 9.9 #IT security #PAM #Patch Alert #Pre_Auth Vulnerability #Privileged Remote Access #Remote Code Execution #Remote Support
Daily CyberSecurity
CVE-2026-1731: Critical BeyondTrust Flaw (CVSS 9.9) Allows Pre-Auth RCE
Critical BeyondTrust flaw CVE-2026-1731 (CVSS 9.9) allows unauthenticated RCE on Remote Support & PRA appliances. Update to v25.3.2 immediately.
20 views
Daily Writeups
⤷ Title: Stan Ghouls Target Uzbekistan and Russia with NetSupport RAT
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Mon, 09 Feb 2026 00:27:34 +0000
════════════════════════
⌗ Tags: #Malware #Bloody Wolf #cyber_espionage #Java Loader #kaspersky #Mirai botnet #NetSupport RAT #phishing #rat #social engineering #Stan Ghouls #Uzbekistan
Daily CyberSecurity
Stan Ghouls Target Uzbekistan and Russia with NetSupport RAT
Stan Ghouls group targets Uzbekistan via fake court emails and malicious Java loaders. Learn how they deploy NetSupport RAT to spy on victims.
13 views
Daily Writeups
⤷ Title: CVE-2026-25526: Critical Jinjava Flaw (CVSS 9.8) Permits Remote Code Execution
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Mon, 09 Feb 2026 00:21:47 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #CVE_2026_25526 #ForTag Vulnerability #HubSpot CMS #Java Template Engine #Jinjava #ObjectMapper Deserialization #Patch Alert #Remote Code Execution #Sandbox Escape #Server Side Template Injection
Daily CyberSecurity
CVE-2026-25526: Critical Jinjava Flaw (CVSS 9.8) Permits Remote Code Execution
Critical Jinjava flaw CVE-2026-25526 (CVSS 9.8) breaks sandbox security. Attackers can execute Java code via template loops. Update to v2.8.3 now.
14 views
Daily Writeups
⤷ Title: “Hard Working” Thieves: Rublevka Team Steals $10M in Solana Scam-as-a-Service
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Mon, 09 Feb 2026 00:17:18 +0000
════════════════════════
⌗ Tags: #Cybercriminals #Crypto theft #Cybercrime #Insikt Group #Phantom Wallet #Rublevka Team #Scam_as_a_Service #social engineering #Solana #TON #Wallet drainer
Daily CyberSecurity
"Hard Working" Thieves: Rublevka Team Steals $10M in Solana Scam-as-a-Service
Rublevka Team's "scam-as-a-service" has stolen $10M+ in crypto. Their automated Solana drainers target Phantom & Solflare wallets. Don't be next.
16 views
Daily Writeups
⤷ Title: Critical RCE Flaws (CVSS 9.3) Exposed in Lexmark Printers
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Mon, 09 Feb 2026 00:13:29 +0000
════════════════════════
⌗ Tags: #Vulnerability #Embedded Solutions Framework #firmware update #IoT security #Lexmark #Office Security #printer security #Remote Code Execution #SysAdmin
Daily CyberSecurity
Critical RCE Flaws (CVSS 9.3) Exposed in Lexmark Printers
Critical Lexmark printer flaws CVE-2025-65078 (CVSS 9.3) & CVE-2025-65077 allow remote code execution. Update firmware immediately to protect your network.
18 views
Daily Writeups
⤷ Title: CVE-2025-62878: Critical 10.0 Vulnerability Found in Kubernetes Local Path Provisioner
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Mon, 09 Feb 2026 00:11:07 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #container security #CVE_2025_62878 #CVSS 10.0 #Host Escape #K8s #Kubernetes #Local Path Provisioner #Patch Alert #Path Traversal #Rancher
Daily CyberSecurity
CVE-2025-62878: Critical 10.0 Vulnerability Found in Kubernetes Local Path Provisioner
CVSS 10.0 Alert: Kubernetes Local Path Provisioner flaw (CVE-2025-62878) allows host file overwrites. Upgrade to v0.0.34 immediately.
17 views
Daily Writeups
⤷ Title: APT28 Weaponizes Office Flaw to Spy on NATO & Military
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Mon, 09 Feb 2026 00:06:35 +0000
════════════════════════
⌗ Tags: #Cyber Security #Malware #APT28 #BeardShell #CVE_2026_21509 #Fancy Bear #Filen.io #Military Espionage #NATO Targets #NotDoor #Trellix #WebDAV Exploit
Daily CyberSecurity
APT28 Weaponizes Office Flaw to Spy on NATO & Military
APT28 (Fancy Bear) weaponized CVE-2026-21509 in 24 hours to target NATO. New "BeardShell" and "NotDoor" malware steals emails. Patch Office now.
14 views
Daily Writeups
⤷ Title: Silent Army: SystemBC Botnet Infects 10,000+ IPs & Government Networks
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Mon, 09 Feb 2026 00:01:52 +0000
════════════════════════
⌗ Tags: #Malware #botnet #bulletproof hosting #Coroxy #cybersecurity #Government Security #malware #Perl Variant #ransomware #Silent Push #SOCKS5 Proxy #SystemBC
Daily CyberSecurity
Silent Army: SystemBC Botnet Infects 10,000+ IPs & Government Networks
Silent Push reveals a massive SystemBC botnet with 10,000+ infected IPs. The SOCKS5 proxy malware hit government domains and uses bulletproof hosting.
18 views
Daily Writeups
⤷ Title: How I got $600 bounty from a self hosted programme
════════════════════════
𐀪 Author: StvRoot
════════════════════════
ⴵ Time: Mon, 09 Feb 2026 01:09:58 GMT
════════════════════════
⌗ Tags: #bug_bounty #penetration_testing #technology #cybersecurity #programming
Medium
How I got $600 bounty from a self hosted programme
I submitted IDORs, PII leak, Response Manipulation, DoS, Unauthorised access to Admin panel…
21 views
Daily Writeups
⤷ Title: AI writes the code. AI hacks it. And human watches.
════════════════════════
𐀪 Author: Truong (Jack) Luu
════════════════════════
ⴵ Time: Mon, 09 Feb 2026 01:06:03 GMT
════════════════════════
⌗ Tags: #ai_agent #hacking #security #cyber_security_jobs
Medium
AI writes the code. AI hacks it. And human watches.
Software development is entering a new normal: AI writes the code, another AI tries to break it, and humans are increasingly just watching…
22 views
Daily Writeups
⤷ Title: Day 11 — Privilege escalation (Linux)
════════════════════════
𐀪 Author: Cybersecurity with Jojo
════════════════════════
ⴵ Time: Mon, 09 Feb 2026 01:06:07 GMT
════════════════════════
⌗ Tags: #tryhackme_writeup #cybersecurity #privilege_escalation #tryhackme
Medium
Day 11 — Privilege escalation (Linux)
Privilege escalation is a technique used by attackers to gain higher-level permissions on a system than those initially granted. In most…
27 views
Daily Writeups
⤷ Title: Verified or Vanished: Google Voice Now Requires Government ID to Stop “Gray Market” Scammers
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Mon, 09 Feb 2026 03:27:13 +0000
════════════════════════
⌗ Tags: #Technology #Anti_Spam #Digital Identity #Google Account safety #Google Voice #government ID #identity verification #KYC #Tech News 2026 #verification protocol #VoIP Security
Daily CyberSecurity
Verified or Vanished: Google Voice Now Requires Government ID to Stop "Gray Market" Scammers
Effective January 30, 2026, new Google Voice numbers remain inert until you pass a government ID check. Learn how to verify your identity and avoid permanent bans.
24 views
Daily Writeups
⤷ Title: Endpoint Exposed: Critical FortiClient EMS Flaw (CVSS 9.1) Allows Unauthenticated RCE
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Mon, 09 Feb 2026 02:21:37 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #CVE_2026_21643 #CVSS 9.1 #endpoint security #FortiClient EMS #Fortinet #Patch Alert #Remote Code Execution #sql injection #SysAdmin #vulnerability management
Daily CyberSecurity
Endpoint Exposed: Critical FortiClient EMS Flaw (CVSS 9.1) Allows Unauthenticated RCE
Fortinet warns of critical SQL injection CVE-2026-21643 in FortiClient EMS 7.4.4. Unauthenticated attackers can execute code. Update to v7.4.5 now.
19 views