Daily Writeups
@Daily_Writeups
3.53K subscribers
2 photos
130K links
Daily Bug Bounty / Cybersecurity Writeups
Source Code : https://github.com/Spix0r/writeup-miner
Download Telegram
About
Blog
Apps
Platform
Join
Daily Writeups
3.53K subscribers
Daily Writeups
⤷ Title: Tearing Down the Walled Garden: How Google Quick Share Finally Bridged the AirDrop Chasm
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Mon, 09 Feb 2026 00:39:43 +0000
════════════════════════
⌗ Tags: #Android #Apple AirDrop #Cross_Platform #Erik Kay #File Transfer #Google Quick Share #Interoperability #Pixel 10 #Samsung Galaxy S26 #Snapdragon 8 Gen 5 #Tech News 2026
Daily CyberSecurity
Tearing Down the Walled Garden: How Google Quick Share Finally Bridged the AirDrop Chasm
Google’s Quick Share is ending the "green bubble" file barrier. Learn how the 2026 rollout brings AirDrop compatibility to Samsung and Snapdragon devices.
14 views
Daily Writeups
⤷ Title: The “All-in-One” Spy: DKnife Malware Hijacks Routers to Swap Downloads
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Mon, 09 Feb 2026 00:38:42 +0000
════════════════════════
⌗ Tags: #Cyber Security #Malware #AiTM #Chinese Threat Actors #Cisco Talos #DarkNimbus #DKnife #Edge Devices #Malware Analysis #router security #ShadowPad #Traffic Manipulation #yitiji
Daily CyberSecurity
The "All-in-One" Spy: DKnife Malware Hijacks Routers to Swap Downloads
Cisco Talos exposes DKnife, a router malware that inspects traffic and swaps legitimate downloads for ShadowPad backdoors. Active since 2019.
17 views
Daily Writeups
⤷ Title: Double the RAM, Half the Stress: Raspberry Pi 4’s Secret Design Overhaul to Combat the 2026 Memory Crisis
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Mon, 09 Feb 2026 00:35:34 +0000
════════════════════════
⌗ Tags: #Technology #AI Infrastructure #dual_memory #hardware revision #LPDDR4 #Memory Shortage #pieeprom_2026_01_09 #price hike 2026 #Raspberry Pi 4B #Rev 1.5 #single_board computer
Daily CyberSecurity
Double the RAM, Half the Stress: Raspberry Pi 4’s Secret Design Overhaul to Combat the 2026 Memory Crisis
13 views
Daily Writeups
⤷ Title: “JackMa” & ShadowGuard: TGR-STA-1030 Spies on 37 Nations via Linux Rootkit
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Mon, 09 Feb 2026 00:32:38 +0000
════════════════════════
⌗ Tags: #Cyber Security #Malware #Advanced Persistent Threat #cyber_espionage #Diaoyu Loader #eBPF #geopolitics #JackMa #Linux Rootkit #ShadowGuard #TGR_STA_1030 #UNC6619 #Unit 42
Daily CyberSecurity
"JackMa" & ShadowGuard: TGR-STA-1030 Spies on 37 Nations via Linux Rootkit
TGR-STA-1030 (UNC6619) hits 70+ orgs in 37 countries. The Asia-based group uses the new ShadowGuard eBPF rootkit to hide in Linux kernels.
15 views
Daily Writeups
⤷ Title: CVE-2026-1731: Critical BeyondTrust Flaw (CVSS 9.9) Allows Pre-Auth RCE
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Mon, 09 Feb 2026 00:28:00 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #BeyondTrust #CVE_2026_1731 #CVSS 9.9 #IT security #PAM #Patch Alert #Pre_Auth Vulnerability #Privileged Remote Access #Remote Code Execution #Remote Support
Daily CyberSecurity
CVE-2026-1731: Critical BeyondTrust Flaw (CVSS 9.9) Allows Pre-Auth RCE
Critical BeyondTrust flaw CVE-2026-1731 (CVSS 9.9) allows unauthenticated RCE on Remote Support & PRA appliances. Update to v25.3.2 immediately.
19 views
Daily Writeups
⤷ Title: Stan Ghouls Target Uzbekistan and Russia with NetSupport RAT
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Mon, 09 Feb 2026 00:27:34 +0000
════════════════════════
⌗ Tags: #Malware #Bloody Wolf #cyber_espionage #Java Loader #kaspersky #Mirai botnet #NetSupport RAT #phishing #rat #social engineering #Stan Ghouls #Uzbekistan
Daily CyberSecurity
Stan Ghouls Target Uzbekistan and Russia with NetSupport RAT
Stan Ghouls group targets Uzbekistan via fake court emails and malicious Java loaders. Learn how they deploy NetSupport RAT to spy on victims.
13 views
Daily Writeups
⤷ Title: CVE-2026-25526: Critical Jinjava Flaw (CVSS 9.8) Permits Remote Code Execution
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Mon, 09 Feb 2026 00:21:47 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #CVE_2026_25526 #ForTag Vulnerability #HubSpot CMS #Java Template Engine #Jinjava #ObjectMapper Deserialization #Patch Alert #Remote Code Execution #Sandbox Escape #Server Side Template Injection
Daily CyberSecurity
CVE-2026-25526: Critical Jinjava Flaw (CVSS 9.8) Permits Remote Code Execution
Critical Jinjava flaw CVE-2026-25526 (CVSS 9.8) breaks sandbox security. Attackers can execute Java code via template loops. Update to v2.8.3 now.
14 views
Daily Writeups
⤷ Title: “Hard Working” Thieves: Rublevka Team Steals $10M in Solana Scam-as-a-Service
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Mon, 09 Feb 2026 00:17:18 +0000
════════════════════════
⌗ Tags: #Cybercriminals #Crypto theft #Cybercrime #Insikt Group #Phantom Wallet #Rublevka Team #Scam_as_a_Service #social engineering #Solana #TON #Wallet drainer
Daily CyberSecurity
"Hard Working" Thieves: Rublevka Team Steals $10M in Solana Scam-as-a-Service
Rublevka Team's "scam-as-a-service" has stolen $10M+ in crypto. Their automated Solana drainers target Phantom & Solflare wallets. Don't be next.
16 views
Daily Writeups
⤷ Title: Critical RCE Flaws (CVSS 9.3) Exposed in Lexmark Printers
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Mon, 09 Feb 2026 00:13:29 +0000
════════════════════════
⌗ Tags: #Vulnerability #Embedded Solutions Framework #firmware update #IoT security #Lexmark #Office Security #printer security #Remote Code Execution #SysAdmin
Daily CyberSecurity
Critical RCE Flaws (CVSS 9.3) Exposed in Lexmark Printers
Critical Lexmark printer flaws CVE-2025-65078 (CVSS 9.3) & CVE-2025-65077 allow remote code execution. Update firmware immediately to protect your network.
18 views
Daily Writeups
⤷ Title: CVE-2025-62878: Critical 10.0 Vulnerability Found in Kubernetes Local Path Provisioner
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Mon, 09 Feb 2026 00:11:07 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #container security #CVE_2025_62878 #CVSS 10.0 #Host Escape #K8s #Kubernetes #Local Path Provisioner #Patch Alert #Path Traversal #Rancher
Daily CyberSecurity
CVE-2025-62878: Critical 10.0 Vulnerability Found in Kubernetes Local Path Provisioner
CVSS 10.0 Alert: Kubernetes Local Path Provisioner flaw (CVE-2025-62878) allows host file overwrites. Upgrade to v0.0.34 immediately.
17 views
Daily Writeups
⤷ Title: APT28 Weaponizes Office Flaw to Spy on NATO & Military
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Mon, 09 Feb 2026 00:06:35 +0000
════════════════════════
⌗ Tags: #Cyber Security #Malware #APT28 #BeardShell #CVE_2026_21509 #Fancy Bear #Filen.io #Military Espionage #NATO Targets #NotDoor #Trellix #WebDAV Exploit
Daily CyberSecurity
APT28 Weaponizes Office Flaw to Spy on NATO & Military
APT28 (Fancy Bear) weaponized CVE-2026-21509 in 24 hours to target NATO. New "BeardShell" and "NotDoor" malware steals emails. Patch Office now.
14 views
Daily Writeups
⤷ Title: Silent Army: SystemBC Botnet Infects 10,000+ IPs & Government Networks
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Mon, 09 Feb 2026 00:01:52 +0000
════════════════════════
⌗ Tags: #Malware #botnet #bulletproof hosting #Coroxy #cybersecurity #Government Security #malware #Perl Variant #ransomware #Silent Push #SOCKS5 Proxy #SystemBC
Daily CyberSecurity
Silent Army: SystemBC Botnet Infects 10,000+ IPs & Government Networks
Silent Push reveals a massive SystemBC botnet with 10,000+ infected IPs. The SOCKS5 proxy malware hit government domains and uses bulletproof hosting.
17 views
Daily Writeups
⤷ Title: How I got $600 bounty from a self hosted programme
════════════════════════
𐀪 Author: StvRoot
════════════════════════
ⴵ Time: Mon, 09 Feb 2026 01:09:58 GMT
════════════════════════
⌗ Tags: #bug_bounty #penetration_testing #technology #cybersecurity #programming
Medium
How I got $600 bounty from a self hosted programme
I submitted IDORs, PII leak, Response Manipulation, DoS, Unauthorised access to Admin panel…
21 views
Daily Writeups
⤷ Title: AI writes the code. AI hacks it. And human watches.
════════════════════════
𐀪 Author: Truong (Jack) Luu
════════════════════════
ⴵ Time: Mon, 09 Feb 2026 01:06:03 GMT
════════════════════════
⌗ Tags: #ai_agent #hacking #security #cyber_security_jobs
Medium
AI writes the code. AI hacks it. And human watches.
Software development is entering a new normal: AI writes the code, another AI tries to break it, and humans are increasingly just watching…
22 views
Daily Writeups
⤷ Title: Day 11 — Privilege escalation (Linux)
════════════════════════
𐀪 Author: Cybersecurity with Jojo
════════════════════════
ⴵ Time: Mon, 09 Feb 2026 01:06:07 GMT
════════════════════════
⌗ Tags: #tryhackme_writeup #cybersecurity #privilege_escalation #tryhackme
Medium
Day 11 — Privilege escalation (Linux)
Privilege escalation is a technique used by attackers to gain higher-level permissions on a system than those initially granted. In most…
27 views
Daily Writeups
⤷ Title: Verified or Vanished: Google Voice Now Requires Government ID to Stop “Gray Market” Scammers
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Mon, 09 Feb 2026 03:27:13 +0000
════════════════════════
⌗ Tags: #Technology #Anti_Spam #Digital Identity #Google Account safety #Google Voice #government ID #identity verification #KYC #Tech News 2026 #verification protocol #VoIP Security
Daily CyberSecurity
Verified or Vanished: Google Voice Now Requires Government ID to Stop "Gray Market" Scammers
Effective January 30, 2026, new Google Voice numbers remain inert until you pass a government ID check. Learn how to verify your identity and avoid permanent bans.
24 views
Daily Writeups
⤷ Title: Endpoint Exposed: Critical FortiClient EMS Flaw (CVSS 9.1) Allows Unauthenticated RCE
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Mon, 09 Feb 2026 02:21:37 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #CVE_2026_21643 #CVSS 9.1 #endpoint security #FortiClient EMS #Fortinet #Patch Alert #Remote Code Execution #sql injection #SysAdmin #vulnerability management
Daily CyberSecurity
Endpoint Exposed: Critical FortiClient EMS Flaw (CVSS 9.1) Allows Unauthenticated RCE
Fortinet warns of critical SQL injection CVE-2026-21643 in FortiClient EMS 7.4.4. Unauthenticated attackers can execute code. Update to v7.4.5 now.
19 views
Daily Writeups
⤷ Title: Intent Redirection in a Samsung Dialer (Duplicate) SVE-2025–1217
════════════════════════
𐀪 Author: Happy Jester
════════════════════════
ⴵ Time: Mon, 09 Feb 2026 03:50:06 GMT
════════════════════════
⌗ Tags: #android_security #android_bug_bounty #bug_bounty #android_pentesting
Medium
Intent Redirection in a Samsung Dialer (Duplicate) SVE-2025–1217
بِسْمِ اللَّـهِ الرَّحْمَـٰنِ الرَّحِيمِ
16 views
Daily Writeups
⤷ Title: Pelican | PG | Walkthrough
════════════════════════
𐀪 Author: Vladimir Cuc
════════════════════════
ⴵ Time: Mon, 09 Feb 2026 02:28:36 GMT
════════════════════════
⌗ Tags: #provinggrounds #walkthrough #pelicans #penetration_testing #oscp
Medium
Pelican | PG | Walkthrough
Hi everyone. Today I will be solving the Pelican box from Proving Grounds. This machine is rated as Intermediate by both Offensive Security…
28 views
Daily Writeups
⤷ Title: TryHackMe — Vulnerability Scanner Overview (Walkthrough)
════════════════════════
𐀪 Author: Hudson Lois Marcus
════════════════════════
ⴵ Time: Mon, 09 Feb 2026 02:48:52 GMT
════════════════════════
⌗ Tags: #vulnerability #tryhackme_walkthrough #tryhackme_writeup #vulnerability_scanning #tryhackme
Medium
TryHackMe — Vulnerability Scanner Overview (Walkthrough)
In this room, we will learn how to hunt these vulnerabilities in digital devices, as well as some tools to automate this hunting and…
30 views
Daily Writeups
⤷ Title: Shattering the Edge: Cisco Talos Unmasks “DKnife,” the 7-Module Framework Hijacking Your Router
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Mon, 09 Feb 2026 04:19:48 +0000
════════════════════════
⌗ Tags: #Malware #AitM attack #China_nexus APT #Cisco Talos #DarkNimbus #DKnife #edge device security #Linux malware #network infrastructure #router malware #ShadowPad #Tech News 2026 #WizardNet
Penetration Testing Tools
Shattering the Edge: Cisco Talos Unmasks "DKnife," the 7-Module Framework Hijacking Your Router
Security analysts at Cisco Talos have unmasked a clandestine offensive platform that has operated surreptitiously within network infrastructure
23 views