Daily Writeups
@Daily_Writeups
3.49K subscribers
2 photos
128K links
Daily Bug Bounty / Cybersecurity Writeups
Source Code : https://github.com/Spix0r/writeup-miner
Download Telegram
About
Blog
Apps
Platform
Join
Daily Writeups
3.49K subscribers
Daily Writeups
⤷ Title: The Rise and Fall of the Twitter EdChat
════════════════════════
𐀪 Author: Mark Grabe
════════════════════════
ⴵ Time: Sun, 15 Feb 2026 18:02:09 GMT
════════════════════════
⌗ Tags: #teaching #k12 #social_media #k12_education #xs
Medium
The Rise and Fall of the Twitter EdChat
For over a decade, the hashtag #Edchat allowed educators using Twitter to gather, share, and commiserate. However, as the platform formerly…
35 views
Daily Writeups
⤷ Title: 200k Sites Exposed: Critical CleanTalk Flaw (CVSS 9.8) Allows RCE
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Mon, 16 Feb 2026 00:59:00 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #Anti_Spam #CleanTalk #CVE_2026_1490 #CVSS 9.8 #DNS Spoofing #Patch Alert #Plugin Vulnerability #Remote Code Execution #Web Security #wordpress security
Daily CyberSecurity
200k Sites Exposed: Critical CleanTalk Flaw (CVSS 9.8) Allows RCE
CleanTalk flaw CVE-2026-1490 (CVSS 9.8) exposes 200k sites to RCE via DNS spoofing. Attackers bypass auth to install plugins. Update to v6.72 now.
35 views
Daily Writeups
⤷ Title: Don’t Click That Shortcut: Phorpiex Botnet Hides in “Your Document” Emails
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Mon, 16 Feb 2026 00:56:25 +0000
════════════════════════
⌗ Tags: #Malware #botnet #Forcepoint #living_off_the_land #LNK File #malware #phishing #Phorpiex #powershell #Trik #Windows Security
Daily CyberSecurity
Don't Click That Shortcut: Phorpiex Botnet Hides in "Your Document" Emails
Phorpiex botnet returns in "Your Document" phishing campaign. Attackers use malicious .LNK files and hidden extensions to trick users.
24 views
Daily Writeups
⤷ Title: Industrial Sabotage Risk: Critical Airleader Flaw (CVSS 9.8) Exposed
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Mon, 16 Feb 2026 00:53:10 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #Airleader Master #CISA alert #Critical Infrastructure #CVE_2026_1358 #File Upload Vulnerability #ICS security #industrial control systems #OT Security #Remote Code Execution
Daily CyberSecurity
Industrial Sabotage Risk: Critical Airleader Flaw (CVSS 9.8) Exposed
CISA warns of critical Airleader Master vulnerability CVE-2026-1358. Unauthenticated attackers can upload files and gain RCE. Update to 6.386 now.
18 views
Daily Writeups
⤷ Title: The “Windows + R” Trap: ClickFix Scam Tricks Users into Installing StealC Malware
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Mon, 16 Feb 2026 00:50:53 +0000
════════════════════════
⌗ Tags: #Malware #ClickFix #Cyber Security #fake CAPTCHA #Fileless Malware #Infostealer #LevelBlue #Malware_as_a_Service #powershell #social engineering #StealC
Daily CyberSecurity
The "Windows + R" Trap: ClickFix Scam Tricks Users into Installing StealC Malware
LevelBlue warns of StealC malware using "ClickFix" fake CAPTCHAs. Users are tricked into running fileless malware via PowerShell. Stay alert.
15 views
Daily Writeups
⤷ Title: The Silent Hijack: BADIIS Malware Turns 1,800+ Servers into Illicit Websites
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Mon, 16 Feb 2026 00:46:39 +0000
════════════════════════
⌗ Tags: #Malware #BadIIS #Cybercrime #Elastic Security Labs #Gambling Scam #IIS Server #malware #SEO Poisoning #Traffic Redirection #UAT_8099 #Windows Security
Daily CyberSecurity
The Silent Hijack: BADIIS Malware Turns 1,800+ Servers into Illicit Websites
Elastic Security Labs uncovers BADIIS malware compromising 1,800+ IIS servers. Attackers use SEO poisoning to redirect users to illicit gambling sites.
16 views
Daily Writeups
⤷ Title: “Carding” as a Service: How Stolen Credit Cards Became a Structured Economy
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Mon, 16 Feb 2026 00:41:22 +0000
════════════════════════
⌗ Tags: #Cybercriminals #Brian's Club #CaaS #Carding_as_a_Service #Credit Card Fraud #Cybercrime #Dark Web Market #Findsome #Fullz #identity theft #Rapid7
Daily CyberSecurity
"Carding" as a Service: How Stolen Credit Cards Became a Structured Economy
Rapid7 reveals how "Carding-as-a-Service" mimics legitimate e-commerce. Fraud markets now offer refunds & "Fullz" data. Learn about the new threat.
15 views
Daily Writeups
⤷ Title: Fake AI, Real Spies: 260,000 Users Hit by Malicious Browser Extensions
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Mon, 16 Feb 2026 00:37:45 +0000
════════════════════════
⌗ Tags: #Malware #AI Tools #browser security #ChatGPT #Chrome Web Store #Claude #Gemini #LayerX #Malicious Extensions #privacy #surveillance #Tapnetic
Daily CyberSecurity
Fake AI, Real Spies: 260,000 Users Hit by Malicious Browser Extensions
LayerX exposes 30+ malicious AI extensions spying on 260,000 users. These "privileged proxies" steal Gmail data & page content. Uninstall now.
13 views
Daily Writeups
⤷ Title: “Matryoshka” Malware: New macOS Attack Hides Inside “Russian Dolls” of Obfuscation
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Mon, 16 Feb 2026 00:33:11 +0000
════════════════════════
⌗ Tags: #Malware #ClickFix #Cryptocurrency Scam #Intego #Ledger Live #Mac Security #macOS Threat #Matryoshka Malware #social engineering #Trezor Suite #Typo_squatting
Daily CyberSecurity
“Matryoshka” Malware: New macOS Attack Hides Inside “Russian Dolls” of Obfuscation
Mac users are being targeted by a sophisticated new social engineering campaign that wraps malicious code in layers of deceit, much like the famous Russian nesting dolls it’s named after. In…
24 views
Daily Writeups
⤷ Title: One Code to Lock Them All: LockBit 5.0 Unifies Attacks on Windows, Linux, and ESXi
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Mon, 16 Feb 2026 00:30:29 +0000
════════════════════════
⌗ Tags: #Malware #Acronis TRU #Cybercrime #ESXi Ransomware #Linux Ransomware #LockBit 5.0 #Lockbit ransomware #Malware Analysis #SmokeLoader #Unified Codebase #Windows Security
Daily CyberSecurity
One Code to Lock Them All: LockBit 5.0 Unifies Attacks on Windows, Linux, and ESXi
LockBit 5.0 launches with a unified codebase targeting Windows, Linux, and ESXi. Acronis reveals identical encryption and ties to SmokeLoader.
20 views
Daily Writeups
⤷ Title: OysterLoader: Multi-Stage Loader Evolves to Evade Detection and Deliver Ransomware
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Mon, 16 Feb 2026 00:27:06 +0000
════════════════════════
⌗ Tags: #Malware #API hammering #Broomstick #C# malware #CleanUp #Custom LZMA #Malware Analysis #OysterLoader #Rhysida ransomware #Sekoia TDR #steganography
Daily CyberSecurity
OysterLoader: Multi-Stage Loader Evolves to Evade Detection and Deliver Ransomware
OysterLoader malware uses custom LZMA & steganography to evade tools. Linked to Rhysida ransomware, it hides in fake IT installers.
19 views
Daily Writeups
⤷ Title: “Distillation” Theft: Attackers Target AI Models in New Wave of Intellectual Property Heists
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Mon, 16 Feb 2026 00:21:01 +0000
════════════════════════
⌗ Tags: #Cybercriminals #AI security #API Key Theft #artificial intelligence #DeepMind #Distillation Attack #Google Threat Intelligence #Intellectual Property #Model Extraction #One API #Xanthorox
Daily CyberSecurity
"Distillation" Theft: Attackers Target AI Models in New Wave of Intellectual Property Heists
Google Threat Intelligence reports a surge in "model extraction" attacks. Private entities are cloning AI models & stealing API keys. Stay alert.
18 views
Daily Writeups
⤷ Title: JPCERT/CC Warns of Active Exploits Targeting Critical FileZen Command Injection Flaw
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Mon, 16 Feb 2026 00:17:47 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #Active Exploitation #Antivirus Evasion #CVE_2026_25108 #File Transfer #FileZen #JPCERT/CC #os command injection #Patch Alert #Soliton Systems #zero_day
Daily CyberSecurity
JPCERT/CC Warns of Active Exploits Targeting Critical FileZen Command Injection Flaw
Critical FileZen flaw CVE-2026-25108 is under active attack. Antivirus feature allows command injection. Update to V5.0.11 immediately to secure data.
23 views
Daily Writeups
⤷ Title: Critical ZLAN5143D Flaws (CVSS 9.8) Allow Total Takeover, No Patch Available
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Mon, 16 Feb 2026 00:16:37 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #Authentication Bypass #CISA #Critical Infrastructure #CVE_2026_24789 #CVE_2026_25084 #ICS security #Industrial IoT #OT Security #Serial_to_Ethernet #ZLAN5143D
Daily CyberSecurity
Critical ZLAN5143D Flaws (CVSS 9.8) Allow Total Takeover, No Patch Available
CISA warns of critical ZLAN5143D flaws CVE-2026-25084 & CVE-2026-24789. Attackers can bypass login & reset passwords. Isolate devices now.
29 views
Daily Writeups
⤷ Title: Surveillance for Sale: ZeroDayRAT Turns Phones into Spies via Telegram
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Mon, 16 Feb 2026 00:12:45 +0000
════════════════════════
⌗ Tags: #Malware #Android Malware #Crypto theft #Cybercrime #iOS Malware #iVerify #Mobile Spyware #rat #surveillance #Telegram #ZeroDayRAT
Daily CyberSecurity
Surveillance for Sale: ZeroDayRAT Turns Phones into Spies via Telegram
ZeroDayRAT mobile spyware is sold on Telegram. It offers full remote control of Android & iOS devices, including camera streaming & crypto theft.
14 views
Daily Writeups
⤷ Title: HAProxy Patches High-Severity QUIC Flaws That Can Kill the Load Balancer
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Mon, 16 Feb 2026 00:11:53 +0000
════════════════════════
⌗ Tags: #Vulnerability #ALOHA #Denial of Service #DevOps #HAProxy #Integer Underflow #load balancer #Patch Alert #QUIC Protocol
Daily CyberSecurity
HAProxy Patches High-Severity QUIC Flaws That Can Kill the Load Balancer
HAProxy patches high-severity QUIC flaws CVE-2026-26080 & 26081. Remote attackers can crash servers via malformed packets. Update to v3.0.16 now.
13 views
Daily Writeups
⤷ Title: AI Data at Risk: Critical Milvus Flaw (CVSS 9.8) Exposes Database via Port 9091
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Mon, 16 Feb 2026 00:06:13 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #AI security #Critical Vulnerability #Data Breach #DevOps #machine_learning #Milvus #Patch Alert #Port 9091 #rce #Vector Database
Daily CyberSecurity
AI Data at Risk: Critical Milvus Flaw (CVSS 9.8) Exposes Database via Port 9091
Critical Milvus flaw (CVSS 9.8) exposes port 9091. Unauthenticated attackers can steal secrets & delete data. Update to v2.5.27 or v2.6.10 immediately.
17 views
Daily Writeups
⤷ Title: Trusted Tool Weaponized: Lotus Blossom Hijacks Notepad++ Updates
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Mon, 16 Feb 2026 00:00:42 +0000
════════════════════════
⌗ Tags: #Cyber Security #Malware #AiTM #Chrysalis Backdoor #Cobalt Strike #cybersecurity #DLL side_loading #infosec #Lotus Blossom #notepad++ #Patch Alert #supply chain attack
Daily CyberSecurity
Trusted Tool Weaponized: Lotus Blossom Hijacks Notepad++ Updates
Lotus Blossom hijacked Notepad++ updates to target admins. The supply chain attack deployed Chrysalis backdoor. Update to v8.9.1 immediately.
20 views
Daily Writeups
⤷ Title: Events In Information Policy & Ethics: Securing Data In Clinical Machinery
════════════════════════
𐀪 Author: Hannah Hillery
════════════════════════
ⴵ Time: Sun, 15 Feb 2026 23:28:38 GMT
════════════════════════
⌗ Tags: #new_writers_welcome #ethical_hacking #healthcare_technology #data_security #healthcare
Medium
Events In Information Policy & Ethics: Securing Data In Clinical Machinery
Photo by Carlos Muza on Unsplash
32 views
Daily Writeups
⤷ Title: Rooting/Jailbreaking iPhone X IOS 16.7.10
════════════════════════
𐀪 Author: n00
════════════════════════
ⴵ Time: Sun, 15 Feb 2026 23:00:19 GMT
════════════════════════
⌗ Tags: #jailbreak #ethical_hacking #apple #ios_hacking
Medium
Rooting/Jailbreaking iPhone X IOS 16.7.10
Video: https://www.youtube.com/watch?v=uDfs3cTEWAE
40 views
Daily Writeups
⤷ Title: Tier 1: When Zero Security Meets Real Attackers
════════════════════════
𐀪 Author: Mohammed Annan
════════════════════════
ⴵ Time: Mon, 16 Feb 2026 01:48:56 GMT
════════════════════════
⌗ Tags: #ethical_hacking #infosec #penetration_testing #cybersecurity
Medium
Tier 1: When Zero Security Meets Real Attackers
Part 2: The Vulnerable Baseline — Complete System Compromise in Under 10 Minutes
22 views