Daily Writeups
@Daily_Writeups
3.78K subscribers
4 photos
133K links
Daily Bug Bounty / Cybersecurity Writeups
Source Code : https://github.com/Spix0r/writeup-miner
Download Telegram
About
Blog
Apps
Platform
Join
Daily Writeups
3.78K subscribers
Daily Writeups
⤷ Title: iPhone Chip, Windows Soul? Parallels Brings Windows 11 to the $599 MacBook Neo
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Sun, 15 Mar 2026 10:37:54 +0000
════════════════════════
⌗ Tags: #Technology #8GB Unified Memory #Apple A18 Pro #Apple Silicon 2026 #budget MacBook #Fanless Performance #MacBook Neo #macOS Tahoe #Parallels Desktop #virtualization #Windows 11 on Arm
Daily CyberSecurity
iPhone Chip, Windows Soul? Parallels Brings Windows 11 to the $599 MacBook Neo
Parallels Desktop confirms Windows 11 runs on the $599 MacBook Neo. Discover how the A18 Pro chip handles virtualization and why 8GB RAM is the ultimate bottleneck.
27 views
Daily Writeups
⤷ Title: Firecracker Security Alert: Virtio-PCI Vulnerability Could Lead to Out-of-Bounds Memory Access
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Wed, 08 Apr 2026 13:22:17 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #AWS Firecracker #AWS Lambda #Cloud Security #CVE_2026_5747 #Fargate Security #Linux Kernel #MicroVM Security #out_of_bounds write #Virtio_PCI #virtualization
Daily CyberSecurity
Firecracker Security Alert: Virtio-PCI Vulnerability Could Lead to Out-of-Bounds Memory Access
AWS patches a high-severity (8.7) Firecracker flaw allowing root guests to trigger memory corruption via the virtio-pci transport. Update your microVMs now.
19 views
Daily Writeups
⤷ Title: Ghosts in the Hypervisor: Mandiant Exposes the 400-Day vSphere Takeover
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Thu, 09 Apr 2026 06:39:11 +0000
════════════════════════
⌗ Tags: #Malware #BRICKSTEAM #BRICKSTORM #ESXi #Hypervisor Security #infosec #Mandiant #Photon OS #threat intelligence #VCSA #virtualization #VMware Security #vSphere
Daily CyberSecurity
Ghosts in the Hypervisor: Mandiant Exposes the 400-Day vSphere Takeover
Mandiant uncovers BRICKSTORM, a threat actor hiding in VMware vSphere for 393 days. Learn how to close the visibility gap and harden your ESXi infrastructure.
25 views
Daily Writeups
⤷ Title: Building a Pentesting Lab on Apple Silicon: Installing Kali Linux with UTM on MacBook M4
════════════════════════
𐀪 Author: Nauval Dzakwan Baihaqi
════════════════════════
ⴵ Time: Mon, 13 Apr 2026 09:31:25 GMT
════════════════════════
⌗ Tags: #kali_linux_on_virtualbox #virtualization #ethical_hacking #pentesting #cybersecurity
Medium
Building a Pentesting Lab on Apple Silicon: Installing Kali Linux with UTM on MacBook M4
Halo semuanya! Saya Nauval Dzakwan Baihaqi, mahasiswa Universitas Pendidikan Indonesia yang saat ini sedang mendalami dunia Cybersecurity…
23 views
Daily Writeups
⤷ Title: Zero-Exfil Hijacking: How VMkatz Rips Windows Credentials Directly from VM Snapshots
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Thu, 16 Apr 2026 10:30:13 +0000
════════════════════════
⌗ Tags: #Open Source Tool #Active Directory #Credential Extraction #Hypervisor Attack #Pentesting #red teaming #Virtualization Security #VMDK #VMkatz #VMSN #Windows Security
Penetration Testing Tools
Zero-Exfil Hijacking: How VMkatz Rips Windows Credentials Directly from VM Snapshots
Extract NTLM hashes, Kerberos tickets, and BitLocker keys directly from .vmdk and .vmsn files. VMkatz lets you loot virtual machines without massive exfiltration.
18 views
Daily Writeups
⤷ Title: The Phantom Hypervisor: How Payouts King Uses QEMU to Hide Ransomware Inside Virtual Machines
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Mon, 20 Apr 2026 08:01:37 +0000
════════════════════════
⌗ Tags: #Malware #3AM Ransomware #Alpine Linux #CitrixBleed 2 #Cyber Security #EDR evasion #GOLD ENCOUNTER #Payouts King #QEMU #ransomware #Sophos #Virtualization Security
Penetration Testing Tools
The Phantom Hypervisor: How Payouts King Uses QEMU to Hide Ransomware Inside Virtual Machines
Ransomware syndicates are increasingly adopting the clandestine practice of concealing their malicious artifacts not merely adjacent to the
15 views
Daily Writeups
⤷ Title: OVN Security Alert: Critical Heap Over-Read Flaws Risk Sensitive Data Leaks
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Tue, 21 Apr 2026 12:05:11 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #CVE_2026_5265 #CVE_2026_5367 #DHCPv6 #Heap Over_read #ICMP Leak #infosec #network_security #Open Virtual Network #OVN #Patch Alert #Virtualization Security
Daily CyberSecurity
OVN Security Alert: Critical Heap Over-Read Flaws Risk Sensitive Data Leaks
OVN reveals two critical heap over-read flaws in ICMP and DHCPv6 processing. Learn how crafted packets can siphon sensitive memory and find the patch versions.
14 views
Daily Writeups
⤷ Title: Operational Blackout: How Kyber Ransomware Targets the Heart of Virtualized Environments
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Fri, 24 Apr 2026 02:00:08 +0000
════════════════════════
⌗ Tags: #Malware #cybersecurity #data recovery #Hyper_V #infosec #Kyber Ransomware #Rapid7 #Rust malware #Virtualization Attack #VMware ESXi #VSS Wipe #Windows Security
Daily CyberSecurity
Operational Blackout: How Kyber Ransomware Targets the Heart of Virtualized Environments
Researchers at Rapid7 have uncovered Kyber, a specialized ransomware family that recently hit enterprise environments with a coordinated, dual-platform attack. Unlike common strains that focus on …
27 views
Daily Writeups
⤷ Title: The Shittrix Disclosure: 89 Flaws Collapse 20 Years of Trust in Citrix and XCP-ng
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Wed, 29 Apr 2026 13:04:55 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #API security #Bootkit #Citrix #Cloud Security #CVSS 9.9 #Hypervisor #infosec #Jakob Wolffhechel #Shittrix #Storage Security #Virtualization Security #XCP_ng #XenServer
Daily CyberSecurity
The Shittrix Disclosure: 89 Flaws Collapse 20 Years of Trust in Citrix and XCP-ng
Independent security researcher Jakob Wolffhechel has publicly disclosed 89 vulnerabilities impacting Citrix XenServer/Hypervisor and its open-source counterpart, XCP-ng. Dubbed “Shittrix&#8…
16 views
Daily Writeups
⤷ Title: Root Access Race: TOCTOU Vulnerability (CVE-2026-41702) Hits VMware Fusion
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Fri, 15 May 2026 06:54:39 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #Broadcom #CVE_2026_41702 #infosec #Patch Alert #privilege escalation #race condition #root access #TOCTOU #Virtualization Security #VMware Fusion
Daily CyberSecurity
Root Access Race: TOCTOU Vulnerability (CVE-2026-41702) Hits VMware Fusion
VMware Fusion CVE-2026-41702 allows local users to gain root access via a TOCTOU race condition. Secure your host and update to 26H1 immediately!
34 views