Daily Writeups
@Daily_Writeups
3.56K subscribers
2 photos
130K links
Daily Bug Bounty / Cybersecurity Writeups
Source Code : https://github.com/Spix0r/writeup-miner
Download Telegram
About
Blog
Apps
Platform
Join
Daily Writeups
3.56K subscribers
Daily Writeups
⤷ Title: TryHackMe: Advent of Cyber 2025 — Day 19 Walkthrough
════════════════════════
𐀪 Author: Inyanji Lynnette
════════════════════════
ⴵ Time: Sat, 20 Dec 2025 02:43:45 GMT
════════════════════════
⌗ Tags: #advent_of_cyber_2025 #advent_of_cyber25_day19 #modbus #scada #tryhackme
Medium
TryHackMe: Advent of Cyber 2025 — Day 19 Walkthrough
ICS/Modbus — Claus for Concern
43 views
Daily Writeups
⤷ Title: CVE-2025-52694 (CVSS 10): Critical Advantech SQL Injection Exposes IoT Devices
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Tue, 13 Jan 2026 00:12:15 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #Advantech #Critical Vulnerability #CSA Singapore #CVE_2025_52694 #Industrial IoT #IoTSuite #SCADA Security #sql injection
Daily CyberSecurity
CVE-2025-52694 (CVSS 10): Critical Advantech SQL Injection Exposes IoT Devices
The Cyber Security Agency of Singapore (CSA) has issued a high-priority alert regarding a devastating vulnerability in Advantech’s IoT product line. The flaw, tracked as CVE-2025-52694, carr…
12 views
Daily Writeups
⤷ Title: Critical Alert: Moxa Switches Exposed to OpenSSH Remote Code Execution (CVSS 9.8)
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Tue, 13 Jan 2026 00:07:14 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #CVE_2023_38408 #ICS security #Industrial Ethernet Switches #Moxa #Network Infrastructure #OpenSSH #Remote Code Execution #SCADA Security
Daily CyberSecurity
Critical Alert: Moxa Switches Exposed to OpenSSH Remote Code Execution (CVSS 9.8)
A critical security vulnerability has been identified in Moxa’s industrial ethernet switches, threatening the integrity of operational technology (OT) networks. The vulnerability, tracked as…
9 views
Daily Writeups
⤷ Title: Siemens Issues Critical Alert for Maximum 10.0 Vulnerability in Industrial Systems
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Wed, 14 Jan 2026 01:44:10 +0000
════════════════════════
⌗ Tags: #Vulnerability #Critical Vulnerability #CVSS 10 #Factory Automation #ICS security #Industrial Edge #Industrial IoT #SCADA #Siemens #SIMATIC
Daily CyberSecurity
Siemens Issues Critical Alert for Maximum 10.0 Vulnerability in Industrial Systems
Urgent: Siemens Edge flaw CVE-2025-40805 (CVSS 10) allows remote account takeover. Update SIMATIC & IOT2050 devices immediately to secure ops.
22 views
Daily Writeups
⤷ Title: Critical ABB Alert: OPTIMAX Flaw Allows Full System Takeover
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Mon, 19 Jan 2026 00:09:28 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #ABB #Ability OPTIMAX #Authentication Bypass #Azure AD #Critical Infrastructure #CVE_2025_14510 #CVSS 9.2 #ICS #Industrial Security #SCADA
Daily CyberSecurity
Critical ABB Alert: OPTIMAX Flaw Allows Full System Takeover
Critical: ABB OPTIMAX flaw CVE-2025-14510 (CVSS 9.2) allows auth bypass via Azure AD. Attackers can shut down systems. Patch or disable SSO now.
23 views
Daily Writeups
⤷ Title: New Offensive OT Framework Targeting Energy Infrastructure Emerges on Dark Web
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Mon, 02 Feb 2026 00:32:12 +0000
════════════════════════
⌗ Tags: #Cybercriminals #APT IRAN #Critical Infrastructure #Cyber Warfare #ICS security #IEC 61850 #IRGC #Lab52 #OT Security #Power Grid Attacks #SCADA
Daily CyberSecurity
New Offensive OT Framework Targeting Energy Infrastructure Emerges on Dark Web
New "APT IRAN" framework targets energy grids & military networks. Lab52 links the tool to the IRGC. See the threat to critical infrastructure.
31 views
Daily Writeups
⤷ Title: Factory Flaw: Critical WAGO Switch Vulnerabilities (CVSS 9.8) Allow Remote Takeover
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Wed, 11 Feb 2026 00:27:08 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #buffer overflow #CERT@VDE #CVE_2026_22904 #CVE_2026_22906 #Hardcoded Encryption Key #ICS security #Industrial Managed Switch #OT Security #SCADA #WAGO 852 Series
Daily CyberSecurity
Factory Flaw: Critical WAGO Switch Vulnerabilities (CVSS 9.8) Allow Remote Takeover
Critical flaws in WAGO 852 switches (CVSS 9.8) allow remote takeover via hardcoded keys & buffer overflows. Update firmware 2.64 immediately.
11 views
Daily Writeups
⤷ Title: Digital Conflagration: How “Operation Epic Fury” Triggered a Global Hacktivist Surge Against Israel and its Allies
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Thu, 05 Mar 2026 07:30:30 +0000
════════════════════════
⌗ Tags: #Cyber Security #DDoS attacks #Handala Hack #Iran cyber war 2026 #Israeli energy breach #Operation Epic Fury #Operation Roaring Lion #RedAlert phishing #SCADA hacking #Tech News 2026 #Unit 42
Penetration Testing Tools
Digital Conflagration: How "Operation Epic Fury" Triggered a Global Hacktivist Surge Against Israel and its Allies
The joint military offensive mounted by the United States and Israel against Iran has precipitously inflamed hostilities within
19 views
Daily Writeups
⤷ Title: Digital Drought: Z-Pentest Alliance Claims Control Over Israeli Municipal Water Systems
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Tue, 10 Mar 2026 04:09:49 +0000
════════════════════════
⌗ Tags: #Cyber Security #Critical Infrastructure #cyber warfare 2026 #Hacktivism #HMI Breach #ICS Security #Industrial Control Systems #Israel #SCADA #Water Infrastructure #Z_Pentest Alliance
Penetration Testing Tools
Digital Drought: Z-Pentest Alliance Claims Control Over Israeli Municipal Water Systems
The hacktivist syndicate Z-Pentest Alliance has proclaimed the successful subjugation of a municipal water pump and distribution control
5 views
Daily Writeups
⤷ Title: Critical RCE Vulnerabilities Uncovered in Janitza and Weidmueller Energy Meters
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Wed, 11 Mar 2026 00:02:32 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #Command Injection #CVE_2025_41709 #cybersecurity #Energy Meters #firmware update #ICS security #Janitza #rce #SCADA #Weidmueller
Daily CyberSecurity
Critical RCE Vulnerabilities Uncovered in Janitza and Weidmueller Energy Meters
Critical flaws (CVE-2025-41709) in Janitza and Weidmueller energy meters allow remote code execution and full system takeover. Update to firmware 3.14 now.
16 views
Daily Writeups
⤷ Title: Industrial Alert: Critical Stored XSS Vulnerability Discovered in Siemens SIMATIC S7-1500
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Wed, 11 Mar 2026 02:05:40 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #Cross_Site Scripting #CVE_2025_40943 #ICS security #Industrial Automation Security #Manufacturing Security #Patch Alert #SCADA Security #Siemens SIMATIC #Vulnerability #XSS
Daily CyberSecurity
Industrial Alert: Critical Stored XSS Vulnerability Discovered in Siemens SIMATIC S7-1500
A critical 9.6 CVSS XSS vulnerability (CVE-2025-40943) in Siemens SIMATIC S7-1500 CPUs allows attackers to inject malicious code via trace files.
10 views
Daily Writeups
⤷ Title: Critical 9.8 CVSS Schneider Electric Flaw Exposes SCADA and Data Center Systems
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Wed, 18 Mar 2026 13:01:06 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #CVE_2025_13957 #CVE_2026_0667 #cybersecurity #EcoStruxure #ICS Vulnerability #infosec #Remote Code Execution #SCADA Security #SCADAPack #Schneider Electric
Daily CyberSecurity
Critical 9.8 CVSS Schneider Electric Flaw Exposes SCADA and Data Center Systems
Schneider Electric patches a critical 9.8 CVSS flaw (CVE-2026-0667) in SCADAPack RTUs and EcoStruxure Data Center Expert. Update to secure your systems.
24 views
Daily Writeups
⤷ Title: Critical Alert: Iranian-Affiliated Actors Target U.S. Infrastructure via Industrial Control Systems
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Wed, 08 Apr 2026 06:21:05 +0000
════════════════════════
⌗ Tags: #Cyber Security #CISA #Critical Infrastructure #CyberAv3ngers #fbi #HMI #ICS security #industrial cybersecurity #Iranian APT #OT Security #PLC Security #Rockwell Automation #SCADA
Daily CyberSecurity
Critical Alert: Iranian-Affiliated Actors Target U.S. Infrastructure via Industrial Control Systems
FBI and CISA warn of Iranian APTs hijacking internet-facing PLCs to disrupt U.S. energy and water systems. Learn the 2026 TTPs and how to defend your OT.
16 views
Daily Writeups
⤷ Title: Targeting the Grid: How Iranian Hackers are Exploiting Exposed U.S. Industrial Controllers
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Mon, 13 Apr 2026 08:36:17 +0000
════════════════════════
⌗ Tags: #Cyber Security #Allen_Bradley #Critical Infrastructure #cybersecurity #EtherNet/IP #ICS Security #Iranian APT #OT Security #PLC Security #Rockwell Automation #SCADA
Penetration Testing Tools
Targeting the Grid: How Iranian Hackers are Exploiting Exposed U.S. Industrial Controllers
State-sponsored Iranian hacking collectives have, in recent months, pivoted toward a singular and highly strategic objective within the
8 views
Daily Writeups
⤷ Title: Industrial Key Leak: Critical 9.3 CVSS Flaws Expose Mitsubishi’s GENESIS64 and ICONICS Suite
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Tue, 14 Apr 2026 01:46:46 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #Credential Disclosure #CVE_2025_14815 #CVE_2025_14816 #GENESIS64 #ICONICS Suite #ICS #Industrial Security #infosec #Mitsubishi Electric #SCADA #sql server
Daily CyberSecurity
Industrial Key Leak: Critical 9.3 CVSS Flaws Expose Mitsubishi’s GENESIS64 and ICONICS Suite
Mitsubishi Electric warns of 9.3 CVSS flaws in GENESIS64 & ICONICS. Attackers can leak SQL credentials to destroy or tamper with industrial data. Patch now!
13 views
Daily Writeups
⤷ Title: Critical 9.1 CVSS Flaw in Horner Automation PLCs Invites Industrial Takeovers
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Fri, 17 Apr 2026 13:05:50 +0000
════════════════════════
⌗ Tags: #Vulnerability #brute force attack #Cscape #CVE_2026_6284 #Horner Automation #ICS security #industrial control systems #PLC #SCADA Security #XL4 #XL7
Daily CyberSecurity
Critical 9.1 CVSS Flaw in Horner Automation PLCs Invites Industrial Takeovers
Critical 9.1 CVSS flaw in Horner Automation PLCs allows unauthenticated brute force attacks. Secure your industrial systems—patch XL4, XL7, and Cscape now!
22 views
Daily Writeups
⤷ Title: The Global Surge in Modbus/TCP Probes Targeting Our Physical World
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Fri, 24 Apr 2026 09:18:47 +0000
════════════════════════
⌗ Tags: #Cybercriminals #Cato Networks #Critical Infrastructure #Cyber Reconnaissance #ICS security #industrial control systems #infosec #Manufacturing Security #Modbus #OT Security #PLC #SCADA
Daily CyberSecurity
The Global Surge in Modbus/TCP Probes Targeting Our Physical World
Cato Networks reveals 235,500+ Modbus probes on PLCs across 70 countries. Learn how attackers fingerprint and hijack industrial control systems. Patch now.
18 views