Daily Writeups
@Daily_Writeups
3.53K subscribers
2 photos
130K links
Daily Bug Bounty / Cybersecurity Writeups
Source Code : https://github.com/Spix0r/writeup-miner
Download Telegram
About
Blog
Apps
Platform
Join
Daily Writeups
3.53K subscribers
Daily Writeups
⤷ Title: The “I Paid Twice” Trap: New Booking.com Phishing Kit Targets Hotels & Guests
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Wed, 18 Feb 2026 00:32:42 +0000
════════════════════════
⌗ Tags: #Cybercriminals #Booking.com #Bridewell #Cyber Crime #financial fraud #Hospitality Security #Hotel Security #phishing #Russian cybercrime #social engineering #Travel Scam
Daily CyberSecurity
The "I Paid Twice" Trap: New Booking.com Phishing Kit Targets Hotels & Guests
Bridewell warns of Russian hackers targeting Booking.com. Phishing kits steal hotel staff creds to scam guests with "I Paid Twice" messages.
18 views
Daily Writeups
⤷ Title: Infected Out of the Box: “Keenadu” Backdoor Hijacks Android at the Firmware Level
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Wed, 18 Feb 2026 00:27:38 +0000
════════════════════════
⌗ Tags: #Malware #Ad Fraud #Android Malware #Cyber Security #Firmware Backdoor #kaspersky #Keenadu #libandroid_runtime #mobile security #supply chain attack #Triada #Zygote Process
Daily CyberSecurity
Infected Out of the Box: "Keenadu" Backdoor Hijacks Android at the Firmware Level
Kaspersky uncovers Keenadu, a firmware-level Android backdoor infecting the Zygote process. This pre-installed malware gives attackers full control.
13 views
Daily Writeups
⤷ Title: PostgreSQL Fixes 5 Security Flaws Including Critical Code Execution Risks
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Wed, 18 Feb 2026 00:20:49 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #buffer overflow #CVE_2026_2005 #CVE_2026_2006 #database security #infosec #open_source #Patch Alert #pgcrypto #PostgreSQL #rce
Daily CyberSecurity
PostgreSQL Fixes 5 Security Flaws Including Critical Code Execution Risks
Urgent: PostgreSQL patches 5 flaws, including 3 critical RCEs (CVSS 8.8). Attackers can execute code as OS user via text manipulation. Update v14-18.
16 views
Daily Writeups
⤷ Title: Ghost NICs & Secret Knocks: Dell Zero-Day (CVSS 10) Exploited by UNC6201
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Wed, 18 Feb 2026 00:18:33 +0000
════════════════════════
⌗ Tags: #Cyber Security #Vulnerability Report #CVE_2026_22769 #Dell RecoverPoint #ESXi Security #Ghost NICs #GRIMBOLT #Mandiant #SLAYSTYLE #UNC6201 #Virtualization Security #zero_day
Daily CyberSecurity
Ghost NICs & Secret Knocks: Dell Zero-Day (CVSS 10) Exploited by UNC6201
Mandiant reveals UNC6201 exploiting Dell RecoverPoint zero-day CVE-2026-22769. Attackers use "Ghost NICs" & GRIMBOLT malware. Patch now.
17 views
Daily Writeups
⤷ Title: Hackers Use Jira Notifications to Bypass Spam Filters
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Wed, 18 Feb 2026 00:12:55 +0000
════════════════════════
⌗ Tags: #Cybercriminals #Atlassian JIRA #Email Security #Enterprise Security #Keitaro TDS #Notification Abuse #phishing #SaaS Security #social engineering #spam campaign #Trend Micro
Daily CyberSecurity
Hackers Use Jira Notifications to Bypass Spam Filters
Hackers abuse Atlassian Jira notifications to bypass spam filters. Trend Micro warns of scams targeting enterprise users via trusted alerts.
24 views
Daily Writeups
⤷ Title: “Dormant” Backdoors: Ivanti EPMM Zero-Days Exploited to Plant Long-Term Spies
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Wed, 18 Feb 2026 00:07:38 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #Bash Injection #CVE_2026_1281 #CVE_2026_1340 #Ivanti EPMM #mobile security #Nezha Agent #Patch Alert #Remote Code Execution #Unit 42 #zero_day
Daily CyberSecurity
"Dormant" Backdoors: Ivanti EPMM Zero-Days Exploited to Plant Long-Term Spies
Ivanti EPMM under attack via zero-days CVE-2026-1281 & 1340. Hackers use bash scripts to plant dormant backdoors. Patch immediately.
18 views
Daily Writeups
⤷ Title: CISA Adds 2008 Windows Flaw & Chrome Zero-Day to KEV
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Wed, 18 Feb 2026 00:00:04 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #Chrome Security #CISA #CVE_2008_0015 #CVE_2020_7796 #CVE_2024_7694 #CVE_2026_2441 #KEV Catalog #Patch Alert #Windows XP #zero_day
Daily CyberSecurity
CISA Adds 2008 Windows Flaw & Chrome Zero-Day to KEV
CISA adds 4 flaws to KEV: Ancient Windows ActiveX bug (CVE-2008-0015) & new Chrome zero-day (CVE-2026-2441). Patch now to prevent exploitation.
18 views
Daily Writeups
⤷ Title: TryHackMe VulnNet Walkthrough: Complete CTF Writeup & Privilege Escalation Guide
════════════════════════
𐀪 Author: 5um1t0x
════════════════════════
ⴵ Time: Wed, 18 Feb 2026 00:06:51 GMT
════════════════════════
⌗ Tags: #penetration_testing #vulnerability #bug_bounty #hacking #ctf
Medium
TryHackMe VulnNet Walkthrough: Complete CTF Writeup & Privilege Escalation Guide
This post is a complete VulnNet walkthrough, aimed at CTF players and OSCP students who want more than just copy‑paste commands.
19 views
Daily Writeups
⤷ Title: sslscan Guide: How to audit SSL/TLS certificates and detect critical vulnerabilities
════════════════════════
𐀪 Author: JPablo13
════════════════════════
ⴵ Time: Wed, 18 Feb 2026 00:01:01 GMT
════════════════════════
⌗ Tags: #bug_bounty #penetration_testing #hacking #cybersecurity #technology
Medium
sslscan Guide: How to audit SSL/TLS certificates and detect critical vulnerabilities
Learn how to use sslscan to identify encryption flaws, obsolete protocols, and hidden assets in your web security audits.
24 views
Daily Writeups
⤷ Title: Exam Review: Certified AppSec Practitioner (CAP)
════════════════════════
𐀪 Author: Mrittika Debnath
════════════════════════
ⴵ Time: Tue, 17 Feb 2026 19:06:20 GMT
════════════════════════
⌗ Tags: #information_security #application_security #cybersecurity
Medium
Exam Review: Certified AppSec Practitioner (CAP)
I recently appeared for the Certified AppSec Practitioner (CAP) exam by SecOps Group and successfully passed with a meritorious score of…
32 views
Daily Writeups
⤷ Title: RPC Proxy Injection Part II: Breaking Elastic EDR Telemetry
════════════════════════
𐀪 Author: S12 - 0x12Dark Development
════════════════════════
ⴵ Time: Tue, 17 Feb 2026 22:58:20 GMT
════════════════════════
⌗ Tags: #pentesting #malware #hacking #red_team #cybersecurity
Medium
RPC Proxy Injection Part II: Breaking Elastic EDR Telemetry
Welcome to this new Medium post, this one it’s the continuation of a previous post from some weeks ago where we leverage the Remote…
30 views
Daily Writeups
⤷ Title: INE-Host & Network Penetration Testing: System-Host Based Attacks CTF 1 by Singkhon
════════════════════════
𐀪 Author: Singkhon K
════════════════════════
ⴵ Time: Tue, 17 Feb 2026 23:44:54 GMT
════════════════════════
⌗ Tags: #penetration_testing #programming #cybersecurity #coding #ctf
Medium
INE-Host & Network Penetration Testing: System-Host Based Attacks CTF 1 by Singkhon
Hello, my name is Singkhon. After completing the eJPT course, I would like to share my methods and approaches for solving each CTF problem…
33 views
Daily Writeups
⤷ Title: Tutorials of Terror: How NVIDIA’s AI Training Guides Became a Gateway for Code Injection
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Wed, 18 Feb 2026 01:47:27 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #AI security #code_injection #CVE_2025_33239 #CVE_2025_33240 #infosec #LLM Training #machine_learning #Megatron Bridge #nvidia #privilege escalation #Tech News 2026
Daily CyberSecurity
Tutorials of Terror: How NVIDIA’s AI Training Guides Became a Gateway for Code Injection
NVIDIA has released a critical software update for its Megatron Bridge, a key component used in training large language models (LLMs). The bulletin discloses two high-severity vulnerabilities hidd…
36 views
Daily Writeups
⤷ Title: Elon Musk’s Grok Faces “Large-Scale” EU Probe Over Deepfake Imagery and Data Rights
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Wed, 18 Feb 2026 01:19:38 +0000
════════════════════════
⌗ Tags: #Technology #Deepfakes #Digital Services Act #Elon Musk #EU Data Protection Commission #GDPR #Grok #non_consensual intimate imagery #privacy by design #Tech News 2026 #X headquarters raid #xAI
Daily CyberSecurity
Elon Musk’s Grok Faces “Large-Scale” EU Probe Over Deepfake Imagery and Data Rights
Following the precedents set by France and the United Kingdom, the European Union’s primary privacy regulator has formally inaugurated a “large-scale” investigation into Elon Mus…
20 views
Daily Writeups
⤷ Title: The Tiny Titan: Why Raspberry Pi is the Unexpected King of the AI Agent Revolution
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Wed, 18 Feb 2026 01:16:08 +0000
════════════════════════
⌗ Tags: #Technology #AI Agents #AI HAT+ #Eben Upton #Edge Inference #Llama 3 #London Stock Exchange #Mistral #OpenClaw #Raspberry Pi #Raspberry Pi 5 #single_board computer #stock market 2026 #Tech News
Daily CyberSecurity
The Tiny Titan: Why Raspberry Pi is the Unexpected King of the AI Agent Revolution
A 42% stock surge and the rise of "Edge Inference" have transformed the Raspberry Pi into the premier low-cost vessel for autonomous AI agents in 2026.
23 views
Daily Writeups
⤷ Title: Beyond the Chatbot: Google I/O 2026 to Unveil the “Agentic” Future of Android 17
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Wed, 18 Feb 2026 01:13:20 +0000
════════════════════════
⌗ Tags: #Technology #AI agent #Android 17 #Android XR #developer conference #Gemini 3 #Generative AI #Google I/O 2026 #Google puzzles #Shoreline Amphitheatre #Tech News 2026
Daily CyberSecurity
Beyond the Chatbot: Google I/O 2026 to Unveil the "Agentic" Future of Android 17
Google I/O 2026 kicks off May 19! Discover how Gemini 3 and Android 17 are turning your phone into a proactive AI concierge. The era of the agent is here.
29 views
Daily Writeups
⤷ Title: Authorisation BypassVulnerability Analysis in DVWA (Low to Impossible)
════════════════════════
𐀪 Author: Narathama Firmansyah Putra
════════════════════════
ⴵ Time: Wed, 18 Feb 2026 01:37:09 GMT
════════════════════════
⌗ Tags: #cybersecurity #dvwa #authentication_bypass #penetration_testing
Medium
Authorisation BypassVulnerability Analysis in DVWA (Low to Impossible)
Introduction Authorisation Bypass adalah kondisi ketika seorang pengguna berhasil mengakses halaman atau fitur yang seharusnya tidak…
31 views
Daily Writeups
⤷ Title: TryHeartMe | TryHackMe Walkthrough
════════════════════════
𐀪 Author: Munirah
════════════════════════
ⴵ Time: Wed, 18 Feb 2026 02:11:41 GMT
════════════════════════
⌗ Tags: #tryhackme_walkthrough #ctf_writeup #tryhackme_writeup #ctf #tryhackme
Medium
TryHeartMe | TryHackMe Walkthrough
A writeup for TryHeartMe — A Web CTF Walkthrough.
37 views
Daily Writeups
⤷ Title: THM — SOC Simulator -> Phishing Unfolding
════════════════════════
𐀪 Author: EduKayky
════════════════════════
ⴵ Time: Wed, 18 Feb 2026 01:44:21 GMT
════════════════════════
⌗ Tags: #information_security #security #tryhackme #ctf_writeup #blue_team
Medium
THM — SOC Simulator -> Phishing Unfolding
> Resumo:
28 views
Daily Writeups
⤷ Title: What Really Happens When Your PHP App Gets XSS — And You Don’t Even Notice
════════════════════════
𐀪 Author: Ann R.
════════════════════════
ⴵ Time: Wed, 18 Feb 2026 02:41:22 GMT
════════════════════════
⌗ Tags: #xss_vulnerability #xss_attack #php #php_development #backend
Medium
What Really Happens When Your PHP App Gets XSS — And You Don’t Even Notice
Hook: The Bug That Doesn’t Look Like a Bug
40 views
Daily Writeups
⤷ Title: Unstable Twin WriteUP TryHackMe
════════════════════════
𐀪 Author: cat0x01
════════════════════════
ⴵ Time: Wed, 18 Feb 2026 03:52:33 GMT
════════════════════════
⌗ Tags: #cybersecurity #ethical_hacking #tryhackme #bug_bounty #ctf
Medium
Unstable Twin WriteUP TryHackMe
42 views