Daily Writeups
@Daily_Writeups
3.78K subscribers
4 photos
133K links
Daily Bug Bounty / Cybersecurity Writeups
Source Code : https://github.com/Spix0r/writeup-miner
Download Telegram
About
Blog
Apps
Platform
Join
Daily Writeups
3.78K subscribers
Daily Writeups
⤷ Title: Critical 9.1 CVSS Flaw in Horner Automation PLCs Invites Industrial Takeovers
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Fri, 17 Apr 2026 13:05:50 +0000
════════════════════════
⌗ Tags: #Vulnerability #brute force attack #Cscape #CVE_2026_6284 #Horner Automation #ICS security #industrial control systems #PLC #SCADA Security #XL4 #XL7
Daily CyberSecurity
Critical 9.1 CVSS Flaw in Horner Automation PLCs Invites Industrial Takeovers
Critical 9.1 CVSS flaw in Horner Automation PLCs allows unauthenticated brute force attacks. Secure your industrial systems—patch XL4, XL7, and Cscape now!
23 views
Daily Writeups
⤷ Title: Introduction to the World of OT/ICS
════════════════════════
𐀪 Author: THM{0x416469747961204D6163686972616A75}
════════════════════════
ⴵ Time: Fri, 17 Apr 2026 14:03:20 GMT
════════════════════════
⌗ Tags: #ics_security #tryhackme_writeup #ot_security #tryhackme_walkthrough #tryhackme
Medium
Introduction to the World of OT/ICS
Learn what Operational Technology (OT) and Industrial Control Systems (ICS) are, and how they function.
11 views
Daily Writeups
⤷ Title: Critical 9.3 Flaw Lets Outsiders Hijack AVEVA Pipeline Simulations
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Sat, 18 Apr 2026 01:13:30 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #API security #AVEVA #Critical Infrastructure #CVE_2026_5387 #CWE_862 #ICS security #industrial cybersecurity #Missing Authorization #Patch Alert #Pipeline Simulation #privilege escalation
Daily CyberSecurity
Critical 9.3 Flaw Lets Outsiders Hijack AVEVA Pipeline Simulations
AVEVA alerts on a 9.3 critical flaw in Pipeline Simulation. Unauthenticated users can hijack admin roles and alter data. Upgrade to version 2025 SP1 P01 now.
22 views
Daily Writeups
⤷ Title: The Global Surge in Modbus/TCP Probes Targeting Our Physical World
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Fri, 24 Apr 2026 09:18:47 +0000
════════════════════════
⌗ Tags: #Cybercriminals #Cato Networks #Critical Infrastructure #Cyber Reconnaissance #ICS security #industrial control systems #infosec #Manufacturing Security #Modbus #OT Security #PLC #SCADA
Daily CyberSecurity
The Global Surge in Modbus/TCP Probes Targeting Our Physical World
Cato Networks reveals 235,500+ Modbus probes on PLCs across 70 countries. Learn how attackers fingerprint and hijack industrial control systems. Patch now.
18 views
Daily Writeups
⤷ Title: Using modbus-cli to Read and Write Modbus registers in LabShock
════════════════════════
𐀪 Author: Sulaiman Alhasawi
════════════════════════
ⴵ Time: Thu, 30 Apr 2026 10:20:05 GMT
════════════════════════
⌗ Tags: #cybersecurity #penetration_testing #ics_security #modbus #ot_security
Medium
Using modbus-cli to Read and Write Modbus registers in LabShock
In the previous post — “Using modbus-cli to Read and Write Modbus Coils in LabShock” — I showed something simple:
20 views
Daily Writeups
⤷ Title: The Great Split: How MITRE ATT&CK v19 Redefines Defense Evasion and Maps the AI Threat Landscape
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Fri, 08 May 2026 09:03:26 +0000
════════════════════════
⌗ Tags: #Information Security #AI security #cyber threat intelligence #Defense Evasion #EDR Bypass #ICS Security #InfoSec 2026 #MITRE ATT&CK v19 #Mobile Threats #SOC Strategy #Social Engineering #T1682 #T1685
Penetration Testing Tools
The Great Split: How MITRE ATT&CK v19 Redefines Defense Evasion and Maps the AI Threat Landscape
MITRE has unveiled ATT&CK v19, a monumental evolution of the framework utilized by security cohorts to delineate adversary
17 views
Daily Writeups
⤷ Title: AI’s Zero-Day Move: How Claude and GPT-4.1 Orchestrated the First Major Assault on Industrial Water Systems
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Tue, 12 May 2026 07:48:39 +0000
════════════════════════
⌗ Tags: #Cybercriminals #AI Cyberattack #BACKUPOSINT #Claude Code #Critical Infrastructure #Cybersecurity 2026 #Dragos #GPT_4.1 #ICS Security #Industrial Control Systems #Monterrey Water Attack #threat intelligence
Penetration Testing Tools
AI’s Zero-Day Move: How Claude and GPT-4.1 Orchestrated the First Major Assault on Industrial Water Systems
In a seminal transgression, adversaries have endeavored to compromise municipal water infrastructure by wielding the sophisticated cognitive capabilities
17 views
Daily Writeups
⤷ Title: Attacking ICS Plant #1
════════════════════════
𐀪 Author: Pavneet_Singh_
════════════════════════
ⴵ Time: Tue, 12 May 2026 07:40:34 GMT
════════════════════════
⌗ Tags: #medium #ics_security #tryhackme #ot_security #tryhackme_walkthrough
Medium
Attacking ICS Plant #1
Task 1:Introduction to OT/ICS
29 views
Daily Writeups
⤷ Title: Critical Eppendorf Bioreactor Security Flaw Disclosed
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Mon, 01 Jun 2026 00:28:54 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #Bioreactor Vulnerability #CVE_2026_7251 #Eppendorf BioFlo 320 #Hardcoded Password #ICS security #Laboratory Security
Daily CyberSecurity
Critical Eppendorf Bioreactor Security Flaw Disclosed
A critical Eppendorf bioreactor security flaw exposes systems via a hard-coded VNC password. Learn how to secure your BioFlo 320 device.
27 views
Daily Writeups
⤷ Title: Moxa Patches NPort Flaws: Root RCE and Format String Bugs (CVE-2026-10829)
════════════════════════
𐀪 Author: Do Son
════════════════════════
ⴵ Time: Thu, 18 Jun 2026 08:03:53 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #CVE_2026_10828 #CVE_2026_10829 #ICS security #Moxa #Moxa NPort vulnerability #NPort #serial device server
Daily CyberSecurity
Moxa Patches NPort Flaws: Root RCE and Format String Bugs (CVE-2026-10829)
A Moxa NPort vulnerability (CVE-2026-10829) lets authenticated attackers gain root via RCE on serial device servers. Patch v1.5.1 now.
15 views