Daily Writeups
@Daily_Writeups
3.56K subscribers
2 photos
130K links
Daily Bug Bounty / Cybersecurity Writeups
Source Code : https://github.com/Spix0r/writeup-miner
Download Telegram
About
Blog
Apps
Platform
Join
Daily Writeups
3.56K subscribers
Daily Writeups
⤷ Title: IDOR Vulnerability in Staff Management Endpoint — Arbitrary Deletion of Staff Members — 500$
════════════════════════
𐀪 Author: Hasan Khan
════════════════════════
ⴵ Time: Mon, 16 Feb 2026 22:42:55 GMT
════════════════════════
⌗ Tags: #idor_vulnerability #idor #bug_bounty_writeup #bug_bounty #api_bug_bounty
Medium
IDOR Vulnerability in Staff Management Endpoint — Arbitrary Deletion of Staff Members — 500$
Introduction
33 views
Daily Writeups
⤷ Title: If AI Can Audit Smart Contracts, Why Do We Still Need Human Auditors?
════════════════════════
𐀪 Author: Abraham
════════════════════════
ⴵ Time: Mon, 16 Feb 2026 20:57:21 GMT
════════════════════════
⌗ Tags: #ai #smart_contract_security #bug_bounty #cybersecurity #blockchain
Medium
If AI Can Audit Smart Contracts, Why Do We Still Need Human Auditors?
AI can already write code, summarize vulnerabilities, and scan smart contracts in seconds. So why are smart contract auditors still in…
29 views
Daily Writeups
⤷ Title: BitLocker — Recovering Recovery Keys in Practice
════════════════════════
𐀪 Author: Nexamos
════════════════════════
ⴵ Time: Mon, 16 Feb 2026 22:06:58 GMT
════════════════════════
⌗ Tags: #bitlocker #hacking #windows
Medium
BitLocker — Recovering Recovery Keys in Practice
In modern Microsoft Windows environments, disk encryption is widely adopted as a baseline security control. However, during incident…
16 views
Daily Writeups
⤷ Title: SOCFortress CoPilot Docs Are Live: How to Get Value Fast
════════════════════════
𐀪 Author: SOCFortress
════════════════════════
ⴵ Time: Mon, 16 Feb 2026 20:52:26 GMT
════════════════════════
⌗ Tags: #information_security #cybersecurity #infosec #open_source #socfortress
Medium
SOCFortress CoPilot Docs Are Live: How to Get Value Fast
We just launched the new SOCFortress CoPilot documentation site:
18 views
Daily Writeups
⤷ Title: OSPC Notes, SQL Injection Cheatsheet
════════════════════════
𐀪 Author: Aaronashley
════════════════════════
ⴵ Time: Mon, 16 Feb 2026 21:21:10 GMT
════════════════════════
⌗ Tags: #sql_injection #oscp_preparation
Medium
OSPC Notes, SQL Injection Cheatsheet
Now, this is a huge topic to cover beyond the common attack types and kinda deserves its own section. However, SQLMap is not allowed on the…
27 views
Daily Writeups
⤷ Title: The Great Refurbishment: Why iOS 27 is the “Vernal Cleansing” Your iPhone Battery Needs
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Tue, 17 Feb 2026 00:40:59 +0000
════════════════════════
⌗ Tags: #Technology #Apple #Apple Intelligence #code cleanup #iOS 27 #iPhone battery life #Liquid Glass UI #Mark Gurman #Snow Leopard update #software stability #Tech News 2026 #Technical Debt
Daily CyberSecurity
The Great Refurbishment: Why iOS 27 is the "Vernal Cleansing" Your iPhone Battery Needs
iOS 27 ditched flashy features for a "Snow Leopard" style cleanup. Discover how Apple is purging 20 years of legacy code to save your iPhone's battery life.
23 views
Daily Writeups
⤷ Title: The Rise of the Digital Concierge: OpenAI Hires OpenClaw Visionary to Turn ChatGPT into an Autonomous Agent
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Tue, 17 Feb 2026 00:35:03 +0000
════════════════════════
⌗ Tags: #Technology #AI Agents #autonomous agents #ChatGPT #github #Moltbot #open_source #OpenAI #OpenClaw #personal agents #Peter Steinberger #Sam Altman #Tech News 2026
Daily CyberSecurity
The Rise of the Digital Concierge: OpenAI Hires OpenClaw Visionary to Turn ChatGPT into an Autonomous Agent
OpenAI hires OpenClaw creator Peter Steinberger to lead its "Personal Agent" revolution, aiming to turn ChatGPT into a proactive, task-executing concierge.
23 views
Daily Writeups
⤷ Title: Hiding in Plain Sight: APT28’s “Operation MacroMaze” Hits European Govs
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Tue, 17 Feb 2026 00:32:54 +0000
════════════════════════
⌗ Tags: #Cyber Security #APT28 #cyber_espionage #Fancy Bear #Forest Blizzard #Lab52 #living_off_the_land #Macro Malware #Operation MacroMaze #Spanish Government #Webhook.site
Daily CyberSecurity
Hiding in Plain Sight: APT28's "Operation MacroMaze" Hits European Govs
APT28's "Operation MacroMaze" targets Europe using Spanish gov decoys. The campaign uses "low-tech" macros & Webhook.site to evade detection.
20 views
Daily Writeups
⤷ Title: The AI Baseline: Apple’s “Special Experience” to Launch Budget MacBooks and M5 Powerhouses
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Tue, 17 Feb 2026 00:27:34 +0000
════════════════════════
⌗ Tags: #Technology #A18 iPad #Apple Event #Apple Experience #Apple Intelligence #budget MacBook #iPhone 17e #M5 Max #M5 Pro #MacBook Pro 2026 #March 4 2026 #Tech News 2026
Daily CyberSecurity
The AI Baseline: Apple's "Special Experience" to Launch Budget MacBooks and M5 Powerhouses
Apple’s March 4 "Experience" debuts M5 Pro/Max chips and a colorful $699 MacBook. Say goodbye to "AI orphans" as Apple Intelligence goes global.
19 views
Daily Writeups
⤷ Title: The “Styles” Trap: 500,000 VK Accounts Hijacked by Chrome Extensions
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Tue, 17 Feb 2026 00:27:00 +0000
════════════════════════
⌗ Tags: #Malware #Account Hijacking #browser security #Chrome Web Store #CSRF #KOI Security #Malicious Extensions #Social Media Botnet #VK #VK Styles #VKontakte
Daily CyberSecurity
The "Styles" Trap: 500,000 VK Accounts Hijacked by Chrome Extensions
500k VK accounts hijacked by "VK Styles" extensions. Malware forces subscriptions and bypasses CSRF tokens. Remove the extension immediately.
23 views
Daily Writeups
⤷ Title: Game Over: “RenEngine” Malware Hides in Pirated Visual Novels
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Tue, 17 Feb 2026 00:22:22 +0000
════════════════════════
⌗ Tags: #Malware #ACR Stealer #Cyber Crime #Data Theft #Game Security #kaspersky #Lumma Stealer #malware #Pirated Games #Ren'Py #RenEngine #Visual Novels
Daily CyberSecurity
Game Over: "RenEngine" Malware Hides in Pirated Visual Novels
Kaspersky warns: Pirated visual novels are spreading RenEngine malware. Attackers use fake downloads to install ACR Stealer. Protect your data now.
19 views
Daily Writeups
⤷ Title: The 1% Breach: 287 Chrome Extensions Caught Spying on 37M Users
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Tue, 17 Feb 2026 00:19:15 +0000
════════════════════════
⌗ Tags: #Data Leak #Big Star Labs #browser security #Chrome extensions #Cyber Security #Data Privacy #Google Analytics Abuse #Q Continuum #Similarweb #spyware #Super PiP
Daily CyberSecurity
The 1% Breach: 287 Chrome Extensions Caught Spying on 37M Users
Q Continuum finds 287 Chrome extensions spying on 37M users. "Super PiP" & others exfiltrate history via Google Analytics. Check your browser now.
17 views
Daily Writeups
⤷ Title: Foxveil: New Malware Loader Hides in Plain Sight Using Cloudflare and Discord
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Tue, 17 Feb 2026 00:13:48 +0000
════════════════════════
⌗ Tags: #Malware #Cato CTRL #Cloudflare Abuse #Cyber Security #Discord #evasion techniques #Fileless Malware #Foxveil #infosec #malware loader #Netlify
Daily CyberSecurity
Foxveil: New Malware Loader Hides in Plain Sight Using Cloudflare and Discord
Cato CTRL discovers Foxveil, a new malware loader abusing Cloudflare, Netlify & Discord to bypass defenses. Active since Aug 2025. Learn the signs.
29 views
Daily Writeups
⤷ Title: “CL Suite” Deception: Malicious Chrome Extension Steals 2FA Secrets and Meta Business Data
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Tue, 17 Feb 2026 00:07:00 +0000
════════════════════════
⌗ Tags: #Malware #2FA Theft #Account Takeover #CL Suite #Cyber Security #Facebook Business #Instagram Business #Malicious Chrome Extension #Meta Business Suite #Socket Threat Research #TOTP Seeds
Daily CyberSecurity
"CL Suite" Deception: Malicious Chrome Extension Steals 2FA Secrets and Meta Business Data
"CL Suite" Chrome extension steals Meta Business 2FA seeds & data. Attackers bypass security even after uninstall. Reset 2FA immediately.
20 views
Daily Writeups
⤷ Title: “Natural Selection” at Work: How North Korean IT Workers Use AI to Infiltrate Companies
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Tue, 17 Feb 2026 00:00:13 +0000
════════════════════════
⌗ Tags: #Cybercriminals #AI Deepfakes #Background Checks #DPRK #employment fraud #identity theft #Insider Threat #North Korean IT workers #Okta Threat Intelligence #Remote Work Security #social engineering
Daily CyberSecurity
"Natural Selection" at Work: How North Korean IT Workers Use AI to Infiltrate Companies
Okta exposes North Korean IT workers using AI photos & stolen LinkedIn profiles to land remote jobs. Learn how "JJ" bypassed checks.
15 views
Daily Writeups
⤷ Title: UUID Might Not Be Unique (Use this to report a security issue)
════════════════════════
𐀪 Author: Rahul Singh Chauhan
════════════════════════
ⴵ Time: Tue, 17 Feb 2026 00:52:19 GMT
════════════════════════
⌗ Tags: #cybersecurity #bug_bounty #uuid #cryptography #bug_bounty_reports
Medium
UUID Might Not Be Unique (Use this to report a security issue)
UUID — It stands for Universally Unique Identifier. It has the word UNIQUE in it. But is it really unique? How many times have you…
17 views
Daily Writeups
⤷ Title: Guía de sslscan: Cómo auditar certificados SSL/TLS y detectar vulnerabilidades críticas
════════════════════════
𐀪 Author: JPablo13
════════════════════════
ⴵ Time: Tue, 17 Feb 2026 00:01:01 GMT
════════════════════════
⌗ Tags: #bug_bounty #cybersecurity #penetration_testing #hacking #technology
Medium
Guía de sslscan: Cómo auditar certificados SSL/TLS y detectar vulnerabilidades críticas
Aprende a usar sslscan para identificar fallos de cifrado, protocolos obsoletos y activos ocultos en tus auditorías de seguridad web.
20 views
Daily Writeups
⤷ Title: (Windows/Linux)File Transfer Methods Labs | HTB
════════════════════════
𐀪 Author: Mohamed Mejahed
════════════════════════
ⴵ Time: Tue, 17 Feb 2026 00:11:51 GMT
════════════════════════
⌗ Tags: #penetration_testing #htb_academy #htb_walkthrough
Medium
(Windows/Linux)File Transfer Methods Labs | HTB
Hello today i will walk through this 2 labs so maybe someone will benefit from this walk through
30 views
Daily Writeups
⤷ Title: Hidden Deep Into My Heart — TryHackMe writeup
════════════════════════
𐀪 Author: Cybernerddd
════════════════════════
ⴵ Time: Tue, 17 Feb 2026 00:21:01 GMT
════════════════════════
⌗ Tags: #cybersecurity #reconnaissance #cybernerddd #valenfind #ethical_hacking
Medium
Hidden Deep Into My Heart — TryHackMe writeup
Breaking Into Cupid’s Secret Vault (Without Brute Force)
27 views
Daily Writeups
⤷ Title: Forgotten Ruins -OSINT
════════════════════════
𐀪 Author: Aser Ahmed
════════════════════════
ⴵ Time: Tue, 17 Feb 2026 02:48:00 GMT
════════════════════════
⌗ Tags: #ctf_writeup #ctf #cybersecurity #hacking #osint
Medium
Forgotten Ruins -OSINT
Hello, this is my first writeup and I hope you enjoy it. So we have an OSINT challenge called Forgotten Ruins on vulnbydefault.com
23 views
Daily Writeups
⤷ Title: Tuesday Morning Threat Report: Feb 17, 2026
════════════════════════
𐀪 Author: Mark Maguire
════════════════════════
ⴵ Time: Tue, 17 Feb 2026 02:24:25 GMT
════════════════════════
⌗ Tags: #cybersecurity #hacking #anthropics
Medium
Tuesday Morning Threat Report: Feb 17, 2026
Where the news is always bad, but the analysis is always good.
27 views