Daily Writeups
@Daily_Writeups
3.56K subscribers
2 photos
130K links
Daily Bug Bounty / Cybersecurity Writeups
Source Code : https://github.com/Spix0r/writeup-miner
Download Telegram
About
Blog
Apps
Platform
Join
Daily Writeups
3.56K subscribers
Daily Writeups
⤷ Title: The Rise of Vibecoding: AI-Generated Malware Exploits React2Shell
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Thu, 12 Feb 2026 00:27:57 +0000
════════════════════════
⌗ Tags: #Malware #AI_generated malware #artificial intelligence #CloudyPots #CVE_2025_55182 #Darktrace #Docker Security #Monero mining #React2Shell #Vibecoding #XMRig
Daily CyberSecurity
The Rise of Vibecoding: AI-Generated Malware Exploits React2Shell
Darktrace detects AI-generated "vibecoding" malware exploiting React2Shell (CVE-2025-55182). Attackers use AI to deploy XMRig miners on Docker.
14 views
Daily Writeups
⤷ Title: CVE-2026-25993: Critical EverShop SQL Injection (CVSS 9.3) Exposes Stores
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Thu, 12 Feb 2026 00:23:57 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #CVE_2026_25993 #Database Takeover #e_commerce security #EverShop #graphql #Patch Alert #React Commerce #Second_Order Injection #sql injection #Web Security
Daily CyberSecurity
CVE-2026-25993: Critical EverShop SQL Injection (CVSS 9.3) Exposes Stores
Critical EverShop flaw CVE-2026-25993 (CVSS 9.3) allows Second-Order SQL Injection via URL keys. Update to v2.1.1 to prevent store takeover.
12 views
Daily Writeups
⤷ Title: VoidLink Rising: New “AI-Ready” Malware Framework Targets Linux & IoT
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Thu, 12 Feb 2026 00:19:11 +0000
════════════════════════
⌗ Tags: #Malware #Cisco Talos #Cloud Security #Cyber Warfare #IoT security #Kubernetes Security #Linux Malware #Malware Analysis #Modular Framework #UAT_9921 #VoidLink
Daily CyberSecurity
VoidLink Rising: New "AI-Ready" Malware Framework Targets Linux & IoT
Cisco Talos reveals VoidLink, a modular Linux malware framework by UAT-9921. Features "compile-on-demand" tools to target IoT & cloud infrastructure.
13 views
Daily Writeups
⤷ Title: Excel Trap: New Phishing Campaign Deploys Fileless XWorm RAT
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Thu, 12 Feb 2026 00:13:12 +0000
════════════════════════
⌗ Tags: #Malware #CVE_2018_0802 #cybersecurity #Excel Malware #Fileless Malware #FortiGuard Labs #phishing #powershell #Process Hollowing #rat #steganography #XWorm
Daily CyberSecurity
Excel Trap: New Phishing Campaign Deploys Fileless XWorm RAT
Phishing emails use malicious Excel files to deploy XWorm RAT. The fileless attack exploits CVE-2018-0802 to steal data & control systems.
16 views
Daily Writeups
⤷ Title: 5G Core Breach: Critical HPE Aruba Flaw Allows Unauthenticated Admin Takeover
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Thu, 12 Feb 2026 00:08:44 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #5G Core Security #Authentication Bypass #Critical Vulnerability #CSE #CVE_2026_23595 #CVE_2026_23596 #HPE Aruba Networking #network_security #Patch Alert #Private 5G
Daily CyberSecurity
5G Core Breach: Critical HPE Aruba Flaw Allows Unauthenticated Admin Takeover
HPE Aruba patches critical Private 5G Core flaws. CVE-2026-23595 allows unauthenticated admin creation. Update to v1.25.1.0 now to prevent takeover.
17 views
Daily Writeups
⤷ Title: Weaponized Code: LTX Stealer Abuses Node.js to Bypass Antivirus
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Thu, 12 Feb 2026 00:00:09 +0000
════════════════════════
⌗ Tags: #Malware #Chromium #Crypto theft #cybersecurity #Cyfirma #Infostealer #LTX Stealer #Malware Analysis #Node.js Malware #Obfuscation #Stealer_as_a_Service
Daily CyberSecurity
Weaponized Code: LTX Stealer Abuses Node.js to Bypass Antivirus
New LTX Stealer malware abuses Node.js & Inno Setup to bypass antivirus. This $10 tool steals browser passwords & crypto wallets. Stay alert.
19 views
Daily Writeups
⤷ Title: WPScan: A Practical Guide to WordPress Security Testing
════════════════════════
𐀪 Author: Neo Sec
════════════════════════
ⴵ Time: Thu, 12 Feb 2026 01:21:24 GMT
════════════════════════
⌗ Tags: #oscp #penetration_testing #hacking #cybersecurity #wordpress
Medium
WPScan: A Practical Guide to WordPress Security Testing
WPScan: A Practical Guide to WordPress Security Testing
28 views
Daily Writeups
⤷ Title: How I Saved $500/Year on Subscriptions using Notion (Free Template)
════════════════════════
𐀪 Author: Xiaomianyou
════════════════════════
ⴵ Time: Thu, 12 Feb 2026 01:08:23 GMT
════════════════════════
⌗ Tags: #notion #life #productivity #personal_finance #hacking
Medium
How I Saved $500/Year on Subscriptions using Notion (Free Template)
I used to lose so much money on forgotten Netflix trials and random AI tools. I needed a way to track them.
33 views
Daily Writeups
⤷ Title: Bounty Hacker | TryHackMe | CTF
════════════════════════
𐀪 Author: s1lja
════════════════════════
ⴵ Time: Thu, 12 Feb 2026 00:59:58 GMT
════════════════════════
⌗ Tags: #tryhackme_writeup #hacking
Medium
Bounty Hacker | TryHackMe | CTF
Hello World😶‍🌫️
38 views
Daily Writeups
⤷ Title: Mapping the Blast Radius: Visualize Attack Paths in AWS EKS with This New Go-Based Scanner
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Thu, 12 Feb 2026 03:43:18 +0000
════════════════════════
⌗ Tags: #Open Source Tool #attack path visualization #AWS EKS #cloud_native security #DevSecOps #eks_security_scanner #Go #IAM security #Kubernetes security #RBAC audit #Tech News 2026 #Threat Modeling
Penetration Testing Tools
Mapping the Blast Radius: Visualize Attack Paths in AWS EKS with This New Go-Based Scanner
Stop guessing your EKS security posture. Use eks-security-scanner to build threat graphs, detect privileged pods, and audit RBAC/IAM access paths instantly.
31 views
Daily Writeups
⤷ Title: The Invisible Siege: Google Unmasks the Sophisticated “Human Layer” War on the Defense Industry
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Thu, 12 Feb 2026 03:35:07 +0000
════════════════════════
⌗ Tags: #Cyber Security #APT groups #China cyber espionage #Defense Industry #Google Threat Intelligence #manufacturing ransomware #North Korea #recruitment scams #Social Engineering #Supply Chain Security #Tech News 2026
Penetration Testing Tools
The Invisible Siege: Google Unmasks the Sophisticated "Human Layer" War on the Defense Industry
The magnitude of cyber threats confronting the defense industry is escalating precipitously, transcending the boundaries of isolated digital
25 views
Daily Writeups
⤷ Title: Digital Eraser: Google Unleashes AI-Powered Shields for Passports and Private Photos
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Thu, 12 Feb 2026 03:33:54 +0000
════════════════════════
⌗ Tags: #Google #AI filtering #digital footprint #Google Search #identity theft #non_consensual imagery #passport monitoring #privacy tools #Results about you #Safer Internet Day #Tech News 2026
Penetration Testing Tools
Digital Eraser: Google Unleashes AI-Powered Shields for Passports and Private Photos
In honor of International Safer Internet Day, Google has augmented its suite of privacy preservation instruments, meticulously engineered
20 views
Daily Writeups
⤷ Title: Total Mobile Dominion: The “ZeroDayRAT” Spyware Turning iPhones and Androids into Open Books
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Thu, 12 Feb 2026 03:32:23 +0000
════════════════════════
⌗ Tags: #Malware #2FA Bypass #Android malware #iOS spyware #iVerify #mobile EDR #Mobile Spyware #Smishing #Tech News 2026 #Telegram malware #ZeroDayRAT
Penetration Testing Tools
Total Mobile Dominion: The "ZeroDayRAT" Spyware Turning iPhones and Androids into Open Books
Security analysts at iVerify have unearthed a nascent mobile espionage platform dubbed ZeroDayRAT within public Telegram channels. The
16 views
Daily Writeups
⤷ Title: Shielding the Cloud: Intel and Google Unmask “Critical” Vulnerabilities in TDX Hardware Isolation
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Thu, 12 Feb 2026 03:29:25 +0000
════════════════════════
⌗ Tags: #Vulnerability #AI security audit #confidential computing #CVE_2025_30513 #google cloud #Hardware Security #Intel TDX #Live Migration #Tech News 2026 #TEE #Trusted Execution Environment
Penetration Testing Tools
Shielding the Cloud: Intel and Google Unmask "Critical" Vulnerabilities in TDX Hardware Isolation
Intel Corporation and Google have concluded a collaborative security audit focusing on a cornerstone of Trusted Execution Technology
15 views
Daily Writeups
⤷ Title: The End of Intrusive Apps: Microsoft Unveils the “Mobile-Style” Permission Model for Windows 11
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Thu, 12 Feb 2026 03:27:57 +0000
════════════════════════
⌗ Tags: #Windows #App Permissions #Baseline Security Mode #cybersecurity #Digital Signature #Microsoft #Privacy 2026 #system integrity #Tech News 2026 #User Consent Model #Windows 11
Penetration Testing Tools
The End of Intrusive Apps: Microsoft Unveils the "Mobile-Style" Permission Model for Windows 11
Microsoft has resolved to significantly fortify the security architecture of Windows 11 without compromising the platform’s quintessential openness
16 views
Daily Writeups
⤷ Title: The Watchers Unmasked: Massive Leak Exposes 500,000 Users of “Stalkerware” Spy Apps
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Thu, 12 Feb 2026 03:26:27 +0000
════════════════════════
⌗ Tags: #Data Leak #data breach #Ersten Group #Geofinder #Hacktivism #Peekviewer #privacy violation #spy apps #stalkerware #Tech News 2026 #uMobix #wikkid #Xnspy
Penetration Testing Tools
The Watchers Unmasked: Massive Leak Exposes 500,000 Users of "Stalkerware" Spy Apps
An anonymous hacktivist has disseminated over half a million payment records belonging to users of stalkerware applications. These
14 views
Daily Writeups
⤷ Title: The Filter Trap: How “Adbleed” Unmasks Your Real Location Behind Any VPN
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Thu, 12 Feb 2026 03:25:06 +0000
════════════════════════
⌗ Tags: #Data Leak #ad blocker #Adbleed #Browser Fingerprinting #cybersecurity #De_anonymization #EasyList #JavaScript #privacy #Tech News 2026 #Tor Browser #VPN
Penetration Testing Tools
The Filter Trap: How "Adbleed" Unmasks Your Real Location Behind Any VPN
Security researcher Melvin Lammerts has unveiled Adbleed, a Proof-of-Concept (PoC) utility that demonstrates a sophisticated technique for the
17 views
Daily Writeups
⤷ Title: The Rust OS is Alive: Redox Achieves Self-Hosting Milestone and Slashes USB Latency
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Thu, 12 Feb 2026 03:22:34 +0000
════════════════════════
⌗ Tags: #Linux #Cargo #COSMIC Edit #microkernel #open source #operating system #Redox OS #Relibc #Rust #rustc #self_hosting #Tech News 2026
Penetration Testing Tools
The Rust OS is Alive: Redox Achieves Self-Hosting Milestone and Slashes USB Latency
The architects of Redox, an avant-garde operating system forged in Rust, have presented a comprehensive retrospective of their
9 views
Daily Writeups
⤷ Title: Payment Bypass: When “Payment Successful” Was Just a Suggestion
════════════════════════
𐀪 Author: Xp10it
════════════════════════
ⴵ Time: Thu, 12 Feb 2026 03:46:01 GMT
════════════════════════
⌗ Tags: #cybersecurity #application_security #software_engineering #bug_bounty #fintech
Medium
Payment Bypass: When “Payment Successful” Was Just a Suggestion
Payment flows are built on trust.
12 views
Daily Writeups
⤷ Title: Membedah Ancaman Lumma Stealer: Modus Fake CAPTCHA dalam Perspektif Cyber Kill Chain
════════════════════════
𐀪 Author: Bryankurniaakbar
════════════════════════
ⴵ Time: Thu, 12 Feb 2026 03:23:22 GMT
════════════════════════
⌗ Tags: #hacking #cybersecurity
Medium
Membedah Ancaman Lumma Stealer: Modus Fake CAPTCHA dalam Perspektif Cyber Kill Chain
Belakangan ini, komunitas keamanan siber dikejutkan dengan kampanye penyebaran Lumma Stealer yang sangat licin. Berbeda dengan teknik…
20 views
Daily Writeups
⤷ Title: Awas! Jebakan “Saya Bukan Robot” yang Bisa Mencuri Semua Akun Kamu (Bedah Kasus Lumma Stealer)
════════════════════════
𐀪 Author: Adrian Syah Abidin
════════════════════════
ⴵ Time: Thu, 12 Feb 2026 02:36:40 GMT
════════════════════════
⌗ Tags: #fake_captcha #lumma_stealer #hacking #penetration_testing #cybersecurity
Medium
Awas! Jebakan “Saya Bukan Robot” yang Bisa Mencuri Semua Akun Kamu (Bedah Kasus Lumma Stealer)
Ditulis Oleh : Adrian Syah Abidin
17 views