Daily Writeups
@Daily_Writeups
3.52K subscribers
2 photos
129K links
Daily Bug Bounty / Cybersecurity Writeups
Source Code : https://github.com/Spix0r/writeup-miner
Download Telegram
About
Blog
Apps
Platform
Join
Daily Writeups
3.52K subscribers
Daily Writeups
⤷ Title: Critical RCE Flaws (CVSS 9.3) Exposed in Lexmark Printers
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Mon, 09 Feb 2026 00:13:29 +0000
════════════════════════
⌗ Tags: #Vulnerability #Embedded Solutions Framework #firmware update #IoT security #Lexmark #Office Security #printer security #Remote Code Execution #SysAdmin
Daily CyberSecurity
Critical RCE Flaws (CVSS 9.3) Exposed in Lexmark Printers
Critical Lexmark printer flaws CVE-2025-65078 (CVSS 9.3) & CVE-2025-65077 allow remote code execution. Update firmware immediately to protect your network.
18 views
Daily Writeups
⤷ Title: CVE-2025-62878: Critical 10.0 Vulnerability Found in Kubernetes Local Path Provisioner
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Mon, 09 Feb 2026 00:11:07 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #container security #CVE_2025_62878 #CVSS 10.0 #Host Escape #K8s #Kubernetes #Local Path Provisioner #Patch Alert #Path Traversal #Rancher
Daily CyberSecurity
CVE-2025-62878: Critical 10.0 Vulnerability Found in Kubernetes Local Path Provisioner
CVSS 10.0 Alert: Kubernetes Local Path Provisioner flaw (CVE-2025-62878) allows host file overwrites. Upgrade to v0.0.34 immediately.
17 views
Daily Writeups
⤷ Title: APT28 Weaponizes Office Flaw to Spy on NATO & Military
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Mon, 09 Feb 2026 00:06:35 +0000
════════════════════════
⌗ Tags: #Cyber Security #Malware #APT28 #BeardShell #CVE_2026_21509 #Fancy Bear #Filen.io #Military Espionage #NATO Targets #NotDoor #Trellix #WebDAV Exploit
Daily CyberSecurity
APT28 Weaponizes Office Flaw to Spy on NATO & Military
APT28 (Fancy Bear) weaponized CVE-2026-21509 in 24 hours to target NATO. New "BeardShell" and "NotDoor" malware steals emails. Patch Office now.
14 views
Daily Writeups
⤷ Title: Silent Army: SystemBC Botnet Infects 10,000+ IPs & Government Networks
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Mon, 09 Feb 2026 00:01:52 +0000
════════════════════════
⌗ Tags: #Malware #botnet #bulletproof hosting #Coroxy #cybersecurity #Government Security #malware #Perl Variant #ransomware #Silent Push #SOCKS5 Proxy #SystemBC
Daily CyberSecurity
Silent Army: SystemBC Botnet Infects 10,000+ IPs & Government Networks
Silent Push reveals a massive SystemBC botnet with 10,000+ infected IPs. The SOCKS5 proxy malware hit government domains and uses bulletproof hosting.
17 views
Daily Writeups
⤷ Title: How I got $600 bounty from a self hosted programme
════════════════════════
𐀪 Author: StvRoot
════════════════════════
ⴵ Time: Mon, 09 Feb 2026 01:09:58 GMT
════════════════════════
⌗ Tags: #bug_bounty #penetration_testing #technology #cybersecurity #programming
Medium
How I got $600 bounty from a self hosted programme
I submitted IDORs, PII leak, Response Manipulation, DoS, Unauthorised access to Admin panel…
21 views
Daily Writeups
⤷ Title: AI writes the code. AI hacks it. And human watches.
════════════════════════
𐀪 Author: Truong (Jack) Luu
════════════════════════
ⴵ Time: Mon, 09 Feb 2026 01:06:03 GMT
════════════════════════
⌗ Tags: #ai_agent #hacking #security #cyber_security_jobs
Medium
AI writes the code. AI hacks it. And human watches.
Software development is entering a new normal: AI writes the code, another AI tries to break it, and humans are increasingly just watching…
22 views
Daily Writeups
⤷ Title: Day 11 — Privilege escalation (Linux)
════════════════════════
𐀪 Author: Cybersecurity with Jojo
════════════════════════
ⴵ Time: Mon, 09 Feb 2026 01:06:07 GMT
════════════════════════
⌗ Tags: #tryhackme_writeup #cybersecurity #privilege_escalation #tryhackme
Medium
Day 11 — Privilege escalation (Linux)
Privilege escalation is a technique used by attackers to gain higher-level permissions on a system than those initially granted. In most…
27 views
Daily Writeups
⤷ Title: Verified or Vanished: Google Voice Now Requires Government ID to Stop “Gray Market” Scammers
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Mon, 09 Feb 2026 03:27:13 +0000
════════════════════════
⌗ Tags: #Technology #Anti_Spam #Digital Identity #Google Account safety #Google Voice #government ID #identity verification #KYC #Tech News 2026 #verification protocol #VoIP Security
Daily CyberSecurity
Verified or Vanished: Google Voice Now Requires Government ID to Stop "Gray Market" Scammers
Effective January 30, 2026, new Google Voice numbers remain inert until you pass a government ID check. Learn how to verify your identity and avoid permanent bans.
24 views
Daily Writeups
⤷ Title: Endpoint Exposed: Critical FortiClient EMS Flaw (CVSS 9.1) Allows Unauthenticated RCE
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Mon, 09 Feb 2026 02:21:37 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #CVE_2026_21643 #CVSS 9.1 #endpoint security #FortiClient EMS #Fortinet #Patch Alert #Remote Code Execution #sql injection #SysAdmin #vulnerability management
Daily CyberSecurity
Endpoint Exposed: Critical FortiClient EMS Flaw (CVSS 9.1) Allows Unauthenticated RCE
Fortinet warns of critical SQL injection CVE-2026-21643 in FortiClient EMS 7.4.4. Unauthenticated attackers can execute code. Update to v7.4.5 now.
19 views
Daily Writeups
⤷ Title: Intent Redirection in a Samsung Dialer (Duplicate) SVE-2025–1217
════════════════════════
𐀪 Author: Happy Jester
════════════════════════
ⴵ Time: Mon, 09 Feb 2026 03:50:06 GMT
════════════════════════
⌗ Tags: #android_security #android_bug_bounty #bug_bounty #android_pentesting
Medium
Intent Redirection in a Samsung Dialer (Duplicate) SVE-2025–1217
بِسْمِ اللَّـهِ الرَّحْمَـٰنِ الرَّحِيمِ
16 views
Daily Writeups
⤷ Title: Pelican | PG | Walkthrough
════════════════════════
𐀪 Author: Vladimir Cuc
════════════════════════
ⴵ Time: Mon, 09 Feb 2026 02:28:36 GMT
════════════════════════
⌗ Tags: #provinggrounds #walkthrough #pelicans #penetration_testing #oscp
Medium
Pelican | PG | Walkthrough
Hi everyone. Today I will be solving the Pelican box from Proving Grounds. This machine is rated as Intermediate by both Offensive Security…
28 views
Daily Writeups
⤷ Title: TryHackMe — Vulnerability Scanner Overview (Walkthrough)
════════════════════════
𐀪 Author: Hudson Lois Marcus
════════════════════════
ⴵ Time: Mon, 09 Feb 2026 02:48:52 GMT
════════════════════════
⌗ Tags: #vulnerability #tryhackme_walkthrough #tryhackme_writeup #vulnerability_scanning #tryhackme
Medium
TryHackMe — Vulnerability Scanner Overview (Walkthrough)
In this room, we will learn how to hunt these vulnerabilities in digital devices, as well as some tools to automate this hunting and…
30 views
Daily Writeups
⤷ Title: Shattering the Edge: Cisco Talos Unmasks “DKnife,” the 7-Module Framework Hijacking Your Router
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Mon, 09 Feb 2026 04:19:48 +0000
════════════════════════
⌗ Tags: #Malware #AitM attack #China_nexus APT #Cisco Talos #DarkNimbus #DKnife #edge device security #Linux malware #network infrastructure #router malware #ShadowPad #Tech News 2026 #WizardNet
Penetration Testing Tools
Shattering the Edge: Cisco Talos Unmasks "DKnife," the 7-Module Framework Hijacking Your Router
Security analysts at Cisco Talos have unmasked a clandestine offensive platform that has operated surreptitiously within network infrastructure
23 views
Daily Writeups
⤷ Title: Vault Lines vs. Fault Lines: Europe’s 2026 Mandate to Break Free from Big Tech Dependencies
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Mon, 09 Feb 2026 04:15:11 +0000
════════════════════════
⌗ Tags: #Technology #cloud dependence #critical third_party providers #cyber resilience #Digital Sovereignty #DORA #European Union #financial stability #fintech regulation #Maria Luís Albuquerque #Steven Maijoor #Tech News 2026
Penetration Testing Tools
Vault Lines vs. Fault Lines: Europe’s 2026 Mandate to Break Free from Big Tech Dependencies
The European Union is increasingly championing the doctrine of “digital sovereignty,” articulating a pressing necessity to attenuate its
17 views
Daily Writeups
⤷ Title: The 8-Minute Admin: How AI-Powered “LLMjacking” Crushed AWS Defenses in Record Time
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Mon, 09 Feb 2026 03:47:06 +0000
════════════════════════
⌗ Tags: #Cybercriminals #AI_assisted attack #Amazon Bedrock #AWS security #cloud breach 2026 #cybersecurity news #GPU resource abuse #IAM privilege escalation #LLMjacking #S3 bucket misconfiguration #Sysdig report
Penetration Testing Tools
The 8-Minute Admin: How AI-Powered "LLMjacking" Crushed AWS Defenses in Record Time
An adversary successfully infiltrated an Amazon Web Services cloud environment, escalating to full administrative privileges in a mere
27 views
Daily Writeups
⤷ Title: The Fatal Screensaver: ReliaQuest Unmasks Phishing That Uses .scr Files to Decapitate EDR
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Mon, 09 Feb 2026 03:39:45 +0000
════════════════════════
⌗ Tags: #Cybercriminals #.scr files #BYOVD #Initial Access #JWrapper #persistence #ReliaQuest #Remote Monitoring and Management #RMM tools #screensaver phishing #SpearPhishing #Tech News 2026
Penetration Testing Tools
The Fatal Screensaver: ReliaQuest Unmasks Phishing That Uses .scr Files to Decapitate EDR
Security analysts at ReliaQuest have unmasked a sophisticated phishing campaign wherein adversaries secrete remote access mechanisms within an
26 views
Daily Writeups
⤷ Title: Firefox Containers for IDOR & BAC Testing
════════════════════════
𐀪 Author: Abhirup Konwar
════════════════════════
ⴵ Time: Mon, 09 Feb 2026 04:52:31 GMT
════════════════════════
⌗ Tags: #bug_bounty #broken_access_control #ethical_hacking #bug_bounty_tips #idor
Medium
Firefox Containers for IDOR & BAC Testing
Guide for beginners in Broken Access Control testing
25 views
Daily Writeups
⤷ Title: Threat Analysis: MBC-20 AI Agent (Moltbook Network)
════════════════════════
𐀪 Author: JD
════════════════════════
ⴵ Time: Mon, 09 Feb 2026 04:20:46 GMT
════════════════════════
⌗ Tags: #ai #technology #llm #ai_agent #hacking
Medium
🔍 Threat Analysis: MBC-20 AI Agent (Moltbook Network)
🔍 Threat Analysis: MBC-20 AI Agent (Moltbook Network) This post provides a **clear, technical threat analysis** of the **MBC-20 AI Agent** to address security, trust, and risk concerns for users …
31 views
Daily Writeups
⤷ Title: Weekly Threat Intelligence Report 2 Feb 2026
════════════════════════
𐀪 Author: NSHC ThreatRecon Team
════════════════════════
ⴵ Time: Mon, 09 Feb 2026 05:48:55 GMT
════════════════════════
⌗ Tags: #threat_intelligence #hacking #infosec #cybersecurity #cyberattack
Medium
Weekly Threat Intelligence Report 2 Feb 2026
This document summarizes key cyber threats identified between January 26 and February 1, 2026, including related threat events
34 views
Daily Writeups
⤷ Title: The “Godfather” of Ransomware: Inside DragonForce’s Brutal Rise and the New Cyber-Cartel Era
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Mon, 09 Feb 2026 07:48:16 +0000
════════════════════════
⌗ Tags: #Malware #cartel model #Cybereason #data audit service #DragonForce ransomware #dual_extortion #RaaS #RansomHub #Ransomware_as_a_Service #Scattered Spider #Tech News 2026
Penetration Testing Tools
The "Godfather" of Ransomware: Inside DragonForce’s Brutal Rise and the New Cyber-Cartel Era
The DragonForce ransomware syndicate has, in a mere biennium, ascended from obscurity to become a preeminent predator within
35 views
Daily Writeups
⤷ Title: My First Month in Bug Bounty: Results, Numbers, and Lessons Learned
════════════════════════
𐀪 Author: Ramazan
════════════════════════
ⴵ Time: Mon, 09 Feb 2026 06:04:35 GMT
════════════════════════
⌗ Tags: #web_security #hacking #cybersecurity #bug_bounty #pentesting
Medium
My First Month in Bug Bounty: Results, Numbers, and Lessons Learned
My journey into Cybersecurity started from scratch. I had no prior IT background — no system administration experience, no coding skills…
24 views