Daily Writeups
@Daily_Writeups
3.79K subscribers
4 photos
133K links
Daily Bug Bounty / Cybersecurity Writeups
Source Code : https://github.com/Spix0r/writeup-miner
Download Telegram
About
Blog
Apps
Platform
Join
Daily Writeups
3.79K subscribers
Daily Writeups
⤷ Title: The “EvilTokens” Surge: Why Device Code Phishing Exploded 37-Fold in 2026
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Tue, 07 Apr 2026 07:46:02 +0000
════════════════════════
⌗ Tags: #Cybercriminals #Account Takeover #Cybersecurity 2026 #Device Code Phishing #EvilTokens #Infosec #Microsoft 365 #OAuth 2.0 #Phishing_as_a_Service #Push Security #Token Theft
Penetration Testing Tools
The "EvilTokens" Surge: Why Device Code Phishing Exploded 37-Fold in 2026
The architecture of account exploitation is undergoing a profound metamorphosis, as adversaries increasingly eschew traditional subversion in favor
9 views
Daily Writeups
⤷ Title: New AI-Driven Phishing Campaign Subverts Microsoft’s Device Code Flow
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Fri, 10 Apr 2026 08:24:02 +0000
════════════════════════
⌗ Tags: #Cybercriminals #AI Phishing #cybersecurity #Device Code Phishing #EvilToken #infosec #MFA Bypass #Microsoft Defender #Microsoft Graph #OAuth #PhaaS #Phishing_as_a_Service
Daily CyberSecurity
New AI-Driven Phishing Campaign Subverts Microsoft’s Device Code Flow
Microsoft uncovers EvilToken, an AI-powered PhaaS toolkit using Dynamic Device Code Generation to bypass MFA and breach high-value accounts. Patch now!
36 views
Daily Writeups
⤷ Title: Hardware-Locked: How Chrome’s New DBSC Makes Stolen Cookies Worthless
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Tue, 14 Apr 2026 07:18:14 +0000
════════════════════════
⌗ Tags: #Technology #Chrome 146 #cybersecurity #DBSC #Device Bound Credentials #google chrome #infosec #InfoStealer malware #Secure Enclave #Session Hijacking #TPM #Web Security
Daily CyberSecurity
Hardware-Locked: How Chrome’s New DBSC Makes Stolen Cookies Worthless
Google launches DBSC in Chrome 146, binding session cookies to hardware like TPM. Neutralize infostealers and stop session hijacking with this new standard.
12 views
Daily Writeups
⤷ Title: Hackers Hijack Microsoft 365 Accounts via Legitimate Device Code Flows
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Fri, 08 May 2026 09:07:51 +0000
════════════════════════
⌗ Tags: #Cybercriminals #Cyber Espionage #Device Code Flow #Graphish #M365 Hardening #Microsoft 365 #OAuth #Passwordless Security #phishing 2026 #Proofpoint #QR Code Phishing #SquarePhish2 #TA2723
Penetration Testing Tools
Hackers Hijack Microsoft 365 Accounts via Legitimate Device Code Flows
Both fraudulent actors and state-sponsored syndicates have commenced the large-scale deployment of a novel stratagem to usurp Microsoft
13 views
Daily Writeups
⤷ Title: BAADTokenBroker Abuses Microsoft Entra ID Device-Bound Keys for PRT Hijacking
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Fri, 15 May 2026 02:49:46 +0000
════════════════════════
⌗ Tags: #Open Source Tool #Azure AD #BAADTokenBroker #cloud security #Device_Bound Keys #Kerberos #Microsoft Entra ID #NT Hash #post_exploitation #PRT Cookie #red teaming #TGT
Penetration Testing Tools
BAADTokenBroker Abuses Microsoft Entra ID Device-Bound Keys for PRT Hijacking
Master Microsoft Entra ID post-exploitation with BAADTokenBroker. Learn how to request PRT cookies and abuse Entra Kerberos to acquire TGTs and NT hashes.
29 views
Daily Writeups
⤷ Title: AI “Vibe Coding” Fuels a Phishing Free-For-All: How EvilTokens Bypasses Microsoft 365 MFA
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Tue, 19 May 2026 06:11:13 +0000
════════════════════════
⌗ Tags: #Cybercriminals #Conditional Access #Cyber Security #Device Code Phishing #EvilTokens #infosec #MFA Bypass #Microsoft 365 #PhaaS #Phishing_as_a_Service #Proofpoint #Vibe Coding
Daily CyberSecurity
AI "Vibe Coding" Fuels a Phishing Free-For-All: How EvilTokens Bypasses Microsoft 365 MFA
AI "vibe coding" and the EvilTokens PhaaS platform are supercharging device code phishing to bypass Microsoft 365 MFA. Secure your network today!
14 views
Daily Writeups
⤷ Title: Microsoft Explains the New “SecureBoot” Folder in Windows 11 KB5089549 Update
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Tue, 19 May 2026 05:43:42 +0000
════════════════════════
⌗ Tags: #Windows #C:\Windows\SecureBoot #Detect_SecureBootCertUpdateStatus #Device Security #Enterprise Fleet Management #KB5089549 #PowerShell Script #Secure Boot Expiration #Trust Chain Renovation #UEFI CA 2023 #Windows 11 May Update
Daily CyberSecurity
Microsoft Explains the New "SecureBoot" Folder in Windows 11 KB5089549 Update
Seeing a new SecureBoot folder under C:Windows? Microsoft confirms it is part of an essential KB5089549 update to replace expiring 2011 UEFI certificates.
12 views
Daily Writeups
⤷ Title: Resurgent Tycoon 2FA Adopts OAuth Device Code Phishing to Hijack Microsoft 365
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Tue, 19 May 2026 07:11:10 +0000
════════════════════════
⌗ Tags: #Cybercriminals #Cloud Security #Cyber Security #Device Authorization Grant #eSentire TRU #infosec #MFA Bypass #Microsoft 365 #Multi_Factor Authentication #OAuth 2.0 #PhaaS #Phishing_as_a_Service #Tycoon 2FA
Daily CyberSecurity
Resurgent Tycoon 2FA Adopts OAuth Device Code Phishing to Hijack Microsoft 365
Despite a global takedown, Tycoon 2FA is back. It now abuses Microsoft's device code flow to bypass MFA entirely. Disabling this flow is critical.
14 views
Daily Writeups
⤷ Title: Intel Architects High-Velocity Point-to-Point Interconnect Paradigm for Linux
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Wed, 27 May 2026 06:37:39 +0000
════════════════════════
⌗ Tags: #Linux #/dev/tbstreamX character device #cable based host to host streaming #ConfigFS USB4 tunnel configuration #device to device file sharing #hardware peripheral virtualization #Intel thunderbolt_stream kernel patch #Linux USB4STREAM driver protocol #low dependency disaster recovery backup #Mika Westerberg Linux 7.2 merge #raw packet transfer over Thunderbolt
Information Security News
Intel USB4STREAM Driver Bypasses Network Stack in Linux 7.2
Intel's new USB4STREAM driver protocol lets Linux hosts transfer raw data and share hardware peripherals via USB4/Thunderbolt without a network stack.
37 views
Daily Writeups
⤷ Title: Telemetry Interception: The Unauthorized Routing of Motorola’s Amazon Gateway
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Thu, 28 May 2026 03:32:30 +0000
════════════════════════
⌗ Tags: #Technology #Allison Yi product management statement #Amazon affiliate code injection #Android launcher app hijacking #Device Native mobile ad monetization #disable Motorola Smart Feed #kira_abboud.com tracking domain #mobile bloatware browser detour #Motorola Razr 60 Ultra app drawer bug #Motorola Smart Feed redirect
Daily CyberSecurity
Telemetry Interception: The Unauthorized Routing of Motorola's Amazon Gateway
Users uncover a weird Motorola Smart Feed redirect that forces the Amazon app through third-party tracking links. Motorola claims it was a glitch and fixed it.
22 views