Daily Writeups
@Daily_Writeups
3.49K subscribers
2 photos
128K links
Daily Bug Bounty / Cybersecurity Writeups
Source Code : https://github.com/Spix0r/writeup-miner
Download Telegram
About
Blog
Apps
Platform
Join
Daily Writeups
3.49K subscribers
Daily Writeups
⤷ Title: The Silent Hijack: BADIIS Malware Turns 1,800+ Servers into Illicit Websites
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Mon, 16 Feb 2026 00:46:39 +0000
════════════════════════
⌗ Tags: #Malware #BadIIS #Cybercrime #Elastic Security Labs #Gambling Scam #IIS Server #malware #SEO Poisoning #Traffic Redirection #UAT_8099 #Windows Security
Daily CyberSecurity
The Silent Hijack: BADIIS Malware Turns 1,800+ Servers into Illicit Websites
Elastic Security Labs uncovers BADIIS malware compromising 1,800+ IIS servers. Attackers use SEO poisoning to redirect users to illicit gambling sites.
16 views
Daily Writeups
⤷ Title: “Carding” as a Service: How Stolen Credit Cards Became a Structured Economy
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Mon, 16 Feb 2026 00:41:22 +0000
════════════════════════
⌗ Tags: #Cybercriminals #Brian's Club #CaaS #Carding_as_a_Service #Credit Card Fraud #Cybercrime #Dark Web Market #Findsome #Fullz #identity theft #Rapid7
Daily CyberSecurity
"Carding" as a Service: How Stolen Credit Cards Became a Structured Economy
Rapid7 reveals how "Carding-as-a-Service" mimics legitimate e-commerce. Fraud markets now offer refunds & "Fullz" data. Learn about the new threat.
15 views
Daily Writeups
⤷ Title: Fake AI, Real Spies: 260,000 Users Hit by Malicious Browser Extensions
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Mon, 16 Feb 2026 00:37:45 +0000
════════════════════════
⌗ Tags: #Malware #AI Tools #browser security #ChatGPT #Chrome Web Store #Claude #Gemini #LayerX #Malicious Extensions #privacy #surveillance #Tapnetic
Daily CyberSecurity
Fake AI, Real Spies: 260,000 Users Hit by Malicious Browser Extensions
LayerX exposes 30+ malicious AI extensions spying on 260,000 users. These "privileged proxies" steal Gmail data & page content. Uninstall now.
13 views
Daily Writeups
⤷ Title: “Matryoshka” Malware: New macOS Attack Hides Inside “Russian Dolls” of Obfuscation
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Mon, 16 Feb 2026 00:33:11 +0000
════════════════════════
⌗ Tags: #Malware #ClickFix #Cryptocurrency Scam #Intego #Ledger Live #Mac Security #macOS Threat #Matryoshka Malware #social engineering #Trezor Suite #Typo_squatting
Daily CyberSecurity
“Matryoshka” Malware: New macOS Attack Hides Inside “Russian Dolls” of Obfuscation
Mac users are being targeted by a sophisticated new social engineering campaign that wraps malicious code in layers of deceit, much like the famous Russian nesting dolls it’s named after. In…
24 views
Daily Writeups
⤷ Title: One Code to Lock Them All: LockBit 5.0 Unifies Attacks on Windows, Linux, and ESXi
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Mon, 16 Feb 2026 00:30:29 +0000
════════════════════════
⌗ Tags: #Malware #Acronis TRU #Cybercrime #ESXi Ransomware #Linux Ransomware #LockBit 5.0 #Lockbit ransomware #Malware Analysis #SmokeLoader #Unified Codebase #Windows Security
Daily CyberSecurity
One Code to Lock Them All: LockBit 5.0 Unifies Attacks on Windows, Linux, and ESXi
LockBit 5.0 launches with a unified codebase targeting Windows, Linux, and ESXi. Acronis reveals identical encryption and ties to SmokeLoader.
20 views
Daily Writeups
⤷ Title: OysterLoader: Multi-Stage Loader Evolves to Evade Detection and Deliver Ransomware
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Mon, 16 Feb 2026 00:27:06 +0000
════════════════════════
⌗ Tags: #Malware #API hammering #Broomstick #C# malware #CleanUp #Custom LZMA #Malware Analysis #OysterLoader #Rhysida ransomware #Sekoia TDR #steganography
Daily CyberSecurity
OysterLoader: Multi-Stage Loader Evolves to Evade Detection and Deliver Ransomware
OysterLoader malware uses custom LZMA & steganography to evade tools. Linked to Rhysida ransomware, it hides in fake IT installers.
19 views
Daily Writeups
⤷ Title: “Distillation” Theft: Attackers Target AI Models in New Wave of Intellectual Property Heists
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Mon, 16 Feb 2026 00:21:01 +0000
════════════════════════
⌗ Tags: #Cybercriminals #AI security #API Key Theft #artificial intelligence #DeepMind #Distillation Attack #Google Threat Intelligence #Intellectual Property #Model Extraction #One API #Xanthorox
Daily CyberSecurity
"Distillation" Theft: Attackers Target AI Models in New Wave of Intellectual Property Heists
Google Threat Intelligence reports a surge in "model extraction" attacks. Private entities are cloning AI models & stealing API keys. Stay alert.
18 views
Daily Writeups
⤷ Title: JPCERT/CC Warns of Active Exploits Targeting Critical FileZen Command Injection Flaw
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Mon, 16 Feb 2026 00:17:47 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #Active Exploitation #Antivirus Evasion #CVE_2026_25108 #File Transfer #FileZen #JPCERT/CC #os command injection #Patch Alert #Soliton Systems #zero_day
Daily CyberSecurity
JPCERT/CC Warns of Active Exploits Targeting Critical FileZen Command Injection Flaw
Critical FileZen flaw CVE-2026-25108 is under active attack. Antivirus feature allows command injection. Update to V5.0.11 immediately to secure data.
23 views
Daily Writeups
⤷ Title: Critical ZLAN5143D Flaws (CVSS 9.8) Allow Total Takeover, No Patch Available
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Mon, 16 Feb 2026 00:16:37 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #Authentication Bypass #CISA #Critical Infrastructure #CVE_2026_24789 #CVE_2026_25084 #ICS security #Industrial IoT #OT Security #Serial_to_Ethernet #ZLAN5143D
Daily CyberSecurity
Critical ZLAN5143D Flaws (CVSS 9.8) Allow Total Takeover, No Patch Available
CISA warns of critical ZLAN5143D flaws CVE-2026-25084 & CVE-2026-24789. Attackers can bypass login & reset passwords. Isolate devices now.
29 views
Daily Writeups
⤷ Title: Surveillance for Sale: ZeroDayRAT Turns Phones into Spies via Telegram
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Mon, 16 Feb 2026 00:12:45 +0000
════════════════════════
⌗ Tags: #Malware #Android Malware #Crypto theft #Cybercrime #iOS Malware #iVerify #Mobile Spyware #rat #surveillance #Telegram #ZeroDayRAT
Daily CyberSecurity
Surveillance for Sale: ZeroDayRAT Turns Phones into Spies via Telegram
ZeroDayRAT mobile spyware is sold on Telegram. It offers full remote control of Android & iOS devices, including camera streaming & crypto theft.
14 views
Daily Writeups
⤷ Title: HAProxy Patches High-Severity QUIC Flaws That Can Kill the Load Balancer
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Mon, 16 Feb 2026 00:11:53 +0000
════════════════════════
⌗ Tags: #Vulnerability #ALOHA #Denial of Service #DevOps #HAProxy #Integer Underflow #load balancer #Patch Alert #QUIC Protocol
Daily CyberSecurity
HAProxy Patches High-Severity QUIC Flaws That Can Kill the Load Balancer
HAProxy patches high-severity QUIC flaws CVE-2026-26080 & 26081. Remote attackers can crash servers via malformed packets. Update to v3.0.16 now.
13 views
Daily Writeups
⤷ Title: AI Data at Risk: Critical Milvus Flaw (CVSS 9.8) Exposes Database via Port 9091
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Mon, 16 Feb 2026 00:06:13 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #AI security #Critical Vulnerability #Data Breach #DevOps #machine_learning #Milvus #Patch Alert #Port 9091 #rce #Vector Database
Daily CyberSecurity
AI Data at Risk: Critical Milvus Flaw (CVSS 9.8) Exposes Database via Port 9091
Critical Milvus flaw (CVSS 9.8) exposes port 9091. Unauthenticated attackers can steal secrets & delete data. Update to v2.5.27 or v2.6.10 immediately.
17 views
Daily Writeups
⤷ Title: Trusted Tool Weaponized: Lotus Blossom Hijacks Notepad++ Updates
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Mon, 16 Feb 2026 00:00:42 +0000
════════════════════════
⌗ Tags: #Cyber Security #Malware #AiTM #Chrysalis Backdoor #Cobalt Strike #cybersecurity #DLL side_loading #infosec #Lotus Blossom #notepad++ #Patch Alert #supply chain attack
Daily CyberSecurity
Trusted Tool Weaponized: Lotus Blossom Hijacks Notepad++ Updates
Lotus Blossom hijacked Notepad++ updates to target admins. The supply chain attack deployed Chrysalis backdoor. Update to v8.9.1 immediately.
20 views
Daily Writeups
⤷ Title: Events In Information Policy & Ethics: Securing Data In Clinical Machinery
════════════════════════
𐀪 Author: Hannah Hillery
════════════════════════
ⴵ Time: Sun, 15 Feb 2026 23:28:38 GMT
════════════════════════
⌗ Tags: #new_writers_welcome #ethical_hacking #healthcare_technology #data_security #healthcare
Medium
Events In Information Policy & Ethics: Securing Data In Clinical Machinery
Photo by Carlos Muza on Unsplash
32 views
Daily Writeups
⤷ Title: Rooting/Jailbreaking iPhone X IOS 16.7.10
════════════════════════
𐀪 Author: n00
════════════════════════
ⴵ Time: Sun, 15 Feb 2026 23:00:19 GMT
════════════════════════
⌗ Tags: #jailbreak #ethical_hacking #apple #ios_hacking
Medium
Rooting/Jailbreaking iPhone X IOS 16.7.10
Video: https://www.youtube.com/watch?v=uDfs3cTEWAE
40 views
Daily Writeups
⤷ Title: Tier 1: When Zero Security Meets Real Attackers
════════════════════════
𐀪 Author: Mohammed Annan
════════════════════════
ⴵ Time: Mon, 16 Feb 2026 01:48:56 GMT
════════════════════════
⌗ Tags: #ethical_hacking #infosec #penetration_testing #cybersecurity
Medium
Tier 1: When Zero Security Meets Real Attackers
Part 2: The Vulnerable Baseline — Complete System Compromise in Under 10 Minutes
22 views
Daily Writeups
⤷ Title: INE-Assessment Methodologies: Footprinting and Scanning CTF 1 by Singkhon
════════════════════════
𐀪 Author: Singkhon K
════════════════════════
ⴵ Time: Mon, 16 Feb 2026 01:25:03 GMT
════════════════════════
⌗ Tags: #ctf #cybersecurity #penetration_testing
Medium
INE-Assessment Methodologies: Footprinting and Scanning CTF 1 by Singkhon
Hello, my name is Singkhon. After completing the eJPT course, I would like to share my methods and approaches for solving each CTF problem…
24 views
Daily Writeups
⤷ Title: INE-Assessment Methodologies: Information Gathering CTF 1 by Singkhon K
════════════════════════
𐀪 Author: Singkhon K
════════════════════════
ⴵ Time: Sun, 15 Feb 2026 20:28:23 GMT
════════════════════════
⌗ Tags: #cybersecurity #penetration_testing #ctf_writeup #ctf
Medium
INE CTF-Assessment Methodologies: Information Gathering CTF 1 by Singkhon K
Hello, my name is Singkhon. After completing the eJPT course, I would like to share my methods and approaches for solving each CTF problem…
24 views
Daily Writeups
⤷ Title: Hidden Deep Into my Heart — TryHackMe Writeup | by P4NTHR
════════════════════════
𐀪 Author: P4NTHR
════════════════════════
ⴵ Time: Mon, 16 Feb 2026 01:06:12 GMT
════════════════════════
⌗ Tags: #tryhackme_writeup #information_disclosure #cybersecurity #tryhackme
Medium
Hidden Deep Into my Heart — TryHackMe Writeup | by P4NTHR
Enumeration
38 views
Daily Writeups
⤷ Title: Breaking a Wi-Fi Device Without Touching the Network
════════════════════════
𐀪 Author: Michael Preston
════════════════════════
ⴵ Time: Mon, 16 Feb 2026 01:20:26 GMT
════════════════════════
⌗ Tags: #pentesting #rfm_analysis #wifihacking #ethical_hacking
Medium
Breaking a Wi-Fi Device Without Touching the Network
What RF Recon, Signal Analysis, and Physical-Layer Attacks Taught Me About Security
80 views
Daily Writeups
⤷ Title: Turn Your Phone into a Hacking Machine: The 16GB RAM Cloud PC Guide
════════════════════════
𐀪 Author: Zer0Figure
════════════════════════
ⴵ Time: Mon, 16 Feb 2026 03:12:43 GMT
════════════════════════
⌗ Tags: #security #ethical_hacking #hacking #bug_bounty #cybersecurity
Medium
Turn Your Phone into a Hacking Machine: The 16GB RAM Cloud PC Guide
No Termux. No Root. Just a Browser and the Power of the Cloud.
28 views