Daily Writeups
@Daily_Writeups
3.53K subscribers
2 photos
129K links
Daily Bug Bounty / Cybersecurity Writeups
Source Code : https://github.com/Spix0r/writeup-miner
Download Telegram
About
Blog
Apps
Platform
Join
Daily Writeups
3.53K subscribers
Daily Writeups
⤷ Title: Logic Poisoning: How One Bad Review Broke Ratings
════════════════════════
𐀪 Author: Parth Narula
════════════════════════
ⴵ Time: Wed, 11 Feb 2026 02:52:13 GMT
════════════════════════
⌗ Tags: #bug_bounty #bug_bounty_tips #web_application_security #bug_bounty_writeup #vulnerability
Medium
Logic Poisoning: How One Bad Review Broke Ratings
Hey Hackers, I am Parth Narula. A penetration tester, bug hunter, red teamer and overall a security researcher. I live for those moments…
29 views
Daily Writeups
⤷ Title: How To Hack Part 3
════════════════════════
𐀪 Author: Red
════════════════════════
ⴵ Time: Wed, 11 Feb 2026 02:11:00 GMT
════════════════════════
⌗ Tags: #education #cybersecurity #infosec #linux #hacking
Medium
How To Hack Part 3
Linux Capture The Flag Bandit Levels 7 to 11
26 views
Daily Writeups
⤷ Title: CSRF Vulnerability Analysis in DVWA (Low to Impossible)
════════════════════════
𐀪 Author: Narathama Firmansyah Putra
════════════════════════
ⴵ Time: Wed, 11 Feb 2026 03:05:11 GMT
════════════════════════
⌗ Tags: #csrf_attack #web_penetration_testing #penetration_testing #dvwa #cybersecurity
Medium
CSRF Vulnerability Analysis in DVWA (Low to Impossible)
Introduction CSRF (Cross Site Request Forgery) adalah serangan yang memanfaatkan akun korban yang sedang login untuk menjalankan aksi tanpa…
48 views
Daily Writeups
⤷ Title: Sideloading Sidestepped: The UK’s “Light-Touch” Gamble on the Apple-Google Duopoly
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Wed, 11 Feb 2026 04:56:03 +0000
════════════════════════
⌗ Tags: #Technology #App Store #Apple #CMA #digital regulation #DMA vs UK policy #google #mobile duopoly #Sideloading #Strategic Market Status #tech monopoly #Tech News 2026
Daily CyberSecurity
Sideloading Sidestepped: The UK’s "Light-Touch" Gamble on the Apple-Google Duopoly
The UK's CMA breaks from the EU, opting for "voluntary commitments" over forced sideloading for Apple and Google. Is this pragmatism or a lack of teeth?
22 views
Daily Writeups
⤷ Title: Beyond the Screen: Samsung’s Galaxy S26 Ultra Debuts “Magic Flex” Privacy and Agentic AI
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Wed, 11 Feb 2026 04:51:56 +0000
════════════════════════
⌗ Tags: #Android #Technology #60W charging #Agentic AI #Galaxy S26 Ultra #Galaxy Unpacked 2026 #Magic Flex Pixel #One UI 8.5 #privacy display #samsung #Snapdragon 8 Elite Gen 5 #Tech News 2026
Daily CyberSecurity
Beyond the Screen: Samsung’s Galaxy S26 Ultra Debuts "Magic Flex" Privacy and Agentic AI
Galaxy Unpacked 2026 is officially set for Feb 25! Discover the Galaxy S26 Ultra's "Magic Flex" privacy screen and the autonomous power of Agentic AI.
17 views
Daily Writeups
⤷ Title: Digital Firewall: Google’s New AI Arsenal Targets Deepfake and SSN Leaks
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Wed, 11 Feb 2026 04:43:22 +0000
════════════════════════
⌗ Tags: #Technology #AI image filtering #data breach mitigation #deepfake removal #digital privacy 2026 #google search #non_consensual imagery #privacy tools #Results About You #Social Security Number monitoring #Tech News 2026
Daily CyberSecurity
Digital Firewall: Google’s New AI Arsenal Targets Deepfake and SSN Leaks
Google’s 2026 privacy update empowers victims to auto-filter deepfakes and monitor SSNs in real-time. Take control of your digital identity today.
13 views
Daily Writeups
⤷ Title: Billions at Risk: Critical Windows Notepad Flaw Allows Remote Code Execution
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Wed, 11 Feb 2026 04:01:30 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #Command Injection #CVE_2026_20841 #Markdown Exploit #Microsoft Security #Patch Tuesday #rce #Remote Code Execution #Windows 11 #Windows Notepad
Daily CyberSecurity
Billions at Risk: Critical Windows Notepad Flaw Allows Remote Code Execution
Microsoft patches critical Windows Notepad flaw CVE-2026-20841 (CVSS 8.8). Malicious Markdown links allow Remote Code Execution. Update now.
11 views
Daily Writeups
⤷ Title: Backup Breach: Critical Acronis Flaws (CVSS 10.0) Allow Data Manipulation
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Wed, 11 Feb 2026 03:36:58 +0000
════════════════════════
⌗ Tags: #Vulnerability #Acronis Cyber Protect #Authentication Bypass #Backup Security #Cloud Agent #CVSS 10.0 #Data Protection #Patch Alert
Daily CyberSecurity
Backup Breach: Critical Acronis Flaws (CVSS 10.0) Allow Data Manipulation
Acronis fixes 3 critical flaws (CVSS 10.0) in Cyber Protect. Attackers can manipulate backups without auth. Update to v16 Update 4 immediately.
11 views
Daily Writeups
⤷ Title: Patch Panic: Microsoft Fixes 6 Active Zero-Days in Feb 2026 Update
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Wed, 11 Feb 2026 03:10:25 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #CVE_2026_21510 #CVE_2026_21519 #Desktop Window Manager #Elevation of Privilege #infosec #Microsoft #Patch Tuesday #SysAdmin #Windows Security #zero_day
Daily CyberSecurity
Patch Panic: Microsoft Fixes 6 Active Zero-Days in Feb 2026 Update
Microsoft Feb 2026 update fixes 61 flaws, including critical DWM zero-day CVE-2026-21519 exploited in the wild. Patch now to stop SYSTEM takeover.
8 views
Daily Writeups
⤷ Title: Null Byte Nightmare: Critical WPvivid Backup Flaw (CVSS 9.8) Exposes 800K WordPress Sites
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Wed, 11 Feb 2026 02:47:26 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #Arbitrary File Upload #CVE_2026_1357 #Lucas Montes #Null Byte Key #Patch Alert #Plugin Vulnerability #Remote Code Execution #site takeover #wordpress security #WPvivid Backup
Daily CyberSecurity
Null Byte Nightmare: Critical WPvivid Backup Flaw (CVSS 9.8) Exposes 800K WordPress Sites
Critical WPvivid Backup flaw CVE-2026-1357 (CVSS 9.8) allows unauthenticated file upload via null byte key. Update to v0.9.124 to prevent RCE.
11 views
Daily Writeups
⤷ Title: Security Isn’t a Layer — It’s Architecture
════════════════════════
𐀪 Author: sachhsoft
════════════════════════
ⴵ Time: Wed, 11 Feb 2026 05:31:01 GMT
════════════════════════
⌗ Tags: #api_security #security_platform #security_by_design #cloud_security #application_security
Medium
Security Isn’t a Layer — It’s Architecture
For years, security has been treated as something you add to systems. A firewall here. An authentication layer there. A penetration test…
12 views
Daily Writeups
⤷ Title: Kick The Buddy Hack
════════════════════════
𐀪 Author: Game4u
════════════════════════
ⴵ Time: Wed, 11 Feb 2026 04:28:35 GMT
════════════════════════
⌗ Tags: #hacking #kickthebuddyhackapk #games #game4u #apk_mod
Medium
Kick The Buddy Hack
Kick The Buddy Hack APK mang đến trải nghiệm giải trí đúng nghĩa khi bạn có thể thoải mái “tương tác” với Buddy bằng hàng loạt công cụ sáng…
6 views
Daily Writeups
⤷ Title: BASIS DATA : INSTALASI MYSQL (frst time jadi hacker)
════════════════════════
𐀪 Author: Muhammad Sava Alfarisy
════════════════════════
ⴵ Time: Wed, 11 Feb 2026 04:12:20 GMT
════════════════════════
⌗ Tags: #programming #mysql #hacking
Medium
BASIS DATA : INSTALASI MYSQL (frst time jadi hacker)
بسم الله الرحمن الرحيم
6 views
Daily Writeups
⤷ Title: Linux CLI Basics | Tryhackme
════════════════════════
𐀪 Author: Aaron
════════════════════════
ⴵ Time: Wed, 11 Feb 2026 04:48:16 GMT
════════════════════════
⌗ Tags: #tryhackme_walkthrough #tryhackme_writeup #tryhackme #cybersecurity
Medium
Linux CLI Basics | Tryhackme
Get comfortable navigating through the Linux CLI.
12 views
Daily Writeups
⤷ Title: Why Reproducing the Bug Is Half the Fix
════════════════════════
𐀪 Author: Fateyaly
════════════════════════
ⴵ Time: Wed, 11 Feb 2026 05:55:10 GMT
════════════════════════
⌗ Tags: #ethical_hacking #coding #cybersecurity #programming #technology
Medium
Why Reproducing the Bug Is Half the Fix
The moment debugging stops feeling like guessing, and starts feeling like science
17 views
Daily Writeups
⤷ Title: Breaking JWT Authentication
════════════════════════
𐀪 Author: Odunlade Adeola
════════════════════════
ⴵ Time: Wed, 11 Feb 2026 06:01:01 GMT
════════════════════════
⌗ Tags: #cybersecurity #api_security_testing #jwt_token #jwt_authentication #api_security
Medium
Breaking JWT Authentication
How I Identified and Exploited Authentication Flaws in a Test API (Week 2)
30 views
Daily Writeups
⤷ Title: Refresh Tokens Explained: Secure Authentication Without Ruining UX
════════════════════════
𐀪 Author: Hasan Chinthaka
════════════════════════
ⴵ Time: Wed, 11 Feb 2026 04:31:02 GMT
════════════════════════
⌗ Tags: #developer_tips #api_security #refresh_token #web_security #authentication
Medium
Refresh Tokens Explained: Secure Authentication Without Ruining UX
Modern applications need to balance security and user experience.
 Access tokens that never expire are dangerous.
 Tokens that expire too…
41 views
Daily Writeups
⤷ Title: North Korea-Linked UNC1069 Uses AI Lures to Attack Cryptocurrency Organizations
════════════════════════
𐀪 Author: Unknown
════════════════════════
ⴵ Time: Wed, 11 Feb 2026 12:20:00 +0530
════════════════════════
⌗ Tags: No_Tags
30 views
Daily Writeups
⤷ Title: Locking the Locks: How “RansomWhen” Unmasks the Identities Hijacking Your AWS S3 Buckets
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Wed, 11 Feb 2026 07:59:18 +0000
════════════════════════
⌗ Tags: #Open Source Tool #AWS security #cloud defense #CloudTrail #Data Protection #IAM identities #KMS encryption #Permiso Security #RansomWhen #S3 ransomware #Tech News 2026 #Threat Hunting
Penetration Testing Tools
Locking the Locks: How "RansomWhen" Unmasks the Identities Hijacking Your AWS S3 Buckets
RansomWhen is the new open-source essential for AWS. Enumerate identities capable of locking S3 buckets with KMS and detect live ransomware events in minutes.
32 views
Daily Writeups
⤷ Title: The Hunter Becomes the Hunted: “Evil AI” WormGPT Suffers Massive Leak of 19,000 User Accounts
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Wed, 11 Feb 2026 07:53:15 +0000
════════════════════════
⌗ Tags: #Data Leak #AI safety #cybercrime #Cybernews #Dark Web #data breach #hacker database #LLM #PII exposure #Spear Phishing #Tech News 2026 #WormGPT
Penetration Testing Tools
The Hunter Becomes the Hunted: "Evil AI" WormGPT Suffers Massive Leak of 19,000 User Accounts
The WormGPT platform, notoriously recognized as an AI-augmented instrument for orchestrating cyber-offensives and infiltrations, has purportedly suffered a
28 views
Daily Writeups
⤷ Title: Under Siege: Microsoft Unveils “Valentine’s Day” Fixes for 6 Actively Exploited Zero-Days
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Wed, 11 Feb 2026 07:51:52 +0000
════════════════════════
⌗ Tags: #Vulnerability #CVE_2026_21510 #CVE_2026_21513 #CVE_2026_21514 #CVE_2026_21519 #CVE_2026_21525 #CVE_2026_21533 #February 2026 #Microsoft Patch Tuesday #MSHTML #phishing #Tech News 2026 #Windows Shell #zero_day
Penetration Testing Tools
Under Siege: Microsoft Unveils "Valentine's Day" Fixes for 6 Actively Exploited Zero-Days
Microsoft has disseminated its February Patch Tuesday security ensemble, a particularly dense release that addresses a staggering 58
17 views