Daily Writeups
@Daily_Writeups
3.55K subscribers
2 photos
130K links
Daily Bug Bounty / Cybersecurity Writeups
Source Code : https://github.com/Spix0r/writeup-miner
Download Telegram
About
Blog
Apps
Platform
Join
Daily Writeups
3.55K subscribers
Daily Writeups
⤷ Title: Trust Boundaries in Agentic AI
════════════════════════
𐀪 Author: Facundo Fernandez
════════════════════════
ⴵ Time: Mon, 09 Mar 2026 22:03:26 GMT
════════════════════════
⌗ Tags: #penetration_testing #machine_learning #artificial_intelligence #cybersecurity #bug_bounty
Medium
Trust Boundaries in Agentic AI
Facu on X: “Trust Boundaries in Agentic AI” / X
28 views
Daily Writeups
⤷ Title: API Hunting to Employee PII Data
════════════════════════
𐀪 Author: SIDDHANT SHUKLA
════════════════════════
ⴵ Time: Mon, 09 Mar 2026 21:17:21 GMT
════════════════════════
⌗ Tags: #cybersecurity #bug_bounty #infosec #technology #hacking
Medium
API Hunting to Employee PII Data
Fuzzing on APIs
30 views
Daily Writeups
⤷ Title: Understanding UAC on Windows — Why It Matters, How It’s Bypassed, and Why It’s Still Relevant
════════════════════════
𐀪 Author: Yua Mikanana
════════════════════════
ⴵ Time: Mon, 09 Mar 2026 22:30:34 GMT
════════════════════════
⌗ Tags: #cybersecurity #technology #ethical_hacking #hacking #information_security
Medium
Understanding UAC on Windows — Why It Matters, How It’s Bypassed, and Why It’s Still Relevant
If you work in offensive security, sooner or later you’ll run into UAC.
14 views
Daily Writeups
⤷ Title: Sold to the Highest Bidder: How a Trusted Chrome Extension Became a Malware Delivery Chain
════════════════════════
𐀪 Author: Jbird
════════════════════════
ⴵ Time: Mon, 09 Mar 2026 22:28:10 GMT
════════════════════════
⌗ Tags: #information_technology #information_security #cyberattack #hacking #cybersecurity
Medium
Sold to the Highest Bidder: How a Trusted Chrome Extension Became a Malware Delivery Chain
A security researcher discovered that a Featured Chrome extension had been quietly sold to a malicious actor and repurposed to run a full…
13 views
Daily Writeups
⤷ Title: Cheesy Does It (Business Logic Vuln) (Bugforge)
════════════════════════
𐀪 Author: 7s26Simon
════════════════════════
ⴵ Time: Mon, 09 Mar 2026 22:22:57 GMT
════════════════════════
⌗ Tags: #bugforge #ctf_writeup #hacking
Medium
Cheesy Does It (Business Logic Vuln) (Bugforge)
Step 1: Register and log in
15 views
Daily Writeups
⤷ Title: Try Hack Me- Simple CTF Walkthrough
════════════════════════
𐀪 Author: PulseEinher
════════════════════════
ⴵ Time: Mon, 09 Mar 2026 21:59:30 GMT
════════════════════════
⌗ Tags: #cybersecurity #tryhackme_walkthrough #tryhackme_writeup #penetration_testing #tryhackme
Medium
Try Hack Me- Simple CTF Walkthrough
Hello, stranger — let’s begin.
31 views
Daily Writeups
⤷ Title: Understanding Web Applications: The Foundation for Investigating Web App Security Alerts
════════════════════════
𐀪 Author: CipherX9F Security
════════════════════════
ⴵ Time: Mon, 09 Mar 2026 21:49:19 GMT
════════════════════════
⌗ Tags: #vapt #penetration_testing #web_security #cipherx9f_security #web_penetration_testing
Medium
Understanding Web Applications: The Foundation for Investigating Web App Security Alerts
Introduction
27 views
Daily Writeups
⤷ Title: Cryptography Basics — TryHackMe walkthrough
════════════════════════
𐀪 Author: SAIMM
════════════════════════
ⴵ Time: Mon, 09 Mar 2026 21:18:16 GMT
════════════════════════
⌗ Tags: #cybersecurity_101 #cryptography #tryhackme_walkthrough #tryhackme #tryhackme_writeup
Medium
Cryptography Basics — TryHackMe walkthrough
30 views
Daily Writeups
⤷ Title: Dutch Intel Warns of Russian Hackers Hijacking Signal, WhatsApp Attacks
════════════════════════
𐀪 Author: Deeba Ahmed
════════════════════════
ⴵ Time: Mon, 09 Mar 2026 23:06:05 +0000
════════════════════════
⌗ Tags: #Security #Privacy #Cyber Attack #Cyber Crime #Cybersecurity #Russia #Signal #WhatsApp
Hackread
Dutch Intel Warns of Russian Hackers Hijacking Signal, WhatsApp Attacks
Follow us on all major social media platforms at @HackRead
25 views
Daily Writeups
⤷ Title: “Coruna” Exploit Kit: Mass iOS Attacks Pivot from Crypto Scams to Iran-Themed Lures
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Tue, 10 Mar 2026 00:50:32 +0000
════════════════════════
⌗ Tags: #Cybercriminals #Coruna #Cryptocurrency Drainer #cyber_espionage #Google Threat Intelligence #iOS Exploit Kit #iPhone security #Plasmagrid #threat intelligence #Validin #Vulnerability
Daily CyberSecurity
"Coruna" Exploit Kit: Mass iOS Attacks Pivot from Crypto Scams to Iran-Themed Lures
Validin reveals how the Coruna iOS exploit kit evolved from targeted surveillance to mass crypto-draining and geopolitical watering hole attacks.
21 views
Daily Writeups
⤷ Title: Fake CleanMyMac Site Unleashes SHub Stealer to Drain macOS Crypto Wallets
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Tue, 10 Mar 2026 00:45:06 +0000
════════════════════════
⌗ Tags: #Malware #CleanMyMac Phishing #ClickFix #Cryptocurrency Theft #cybersecurity #infosec #MAC Malware #macOS security #SHub Stealer #social engineering #threat intelligence
Daily CyberSecurity
Fake CleanMyMac Site Unleashes SHub Stealer to Drain macOS Crypto Wallets
A fake CleanMyMac website is using ClickFix tactics to trick macOS users into installing SHub Stealer, a potent malware targeting passwords and crypto.
17 views
Daily Writeups
⤷ Title: Critical 9.8 CVSS Flaws Expose SICK Lector Scanners to Hijacking
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Tue, 10 Mar 2026 00:41:09 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #CVE_2026_2330 #CVE_2026_2331 #cybersecurity #ICS security #industrial automation #Manufacturing Security #OT Security #Patch Alert #SICK Lector #Vulnerability
Daily CyberSecurity
Critical 9.8 CVSS Flaws Expose SICK Lector Scanners to Hijacking
SICK PSIRT warns of critical vulnerabilities (CVE-2026-2330, CVE-2026-2331) in Lector85x and Lector83x scanners allowing full device takeover. Update now.
14 views
Daily Writeups
⤷ Title: Malicious “Hex Visualizer” Chrome Extension Targeting imToken Users
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Tue, 10 Mar 2026 00:37:59 +0000
════════════════════════
⌗ Tags: #Cybercriminals #Chrome Extension Phishing #Crypto Wallet Drainer #Cryptocurrency Security #Homoglyph Attack #ImToken Chromophore #infosec #Malware Analysis #Seed Phrase Theft #Socket Threat Research #Web3 security
Daily CyberSecurity
Malicious "Hex Visualizer" Chrome Extension Targeting imToken Users
Socket researchers uncover "ImToken Chromophore," a malicious Chrome extension using fake branding and homoglyphs to steal crypto wallet seed phrases.
17 views
Daily Writeups
⤷ Title: Critical 9.3 CVSS Flaw in Gogs Turns Repositories into Malware Delivery Vectors
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Tue, 10 Mar 2026 00:32:48 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #Cross_Repository Overwrite #CVE_2026_25921 #cybersecurity #Gogs #infosec #Large File Storage #LFS #Path Collision #supply chain attack #Vulnerability
Daily CyberSecurity
Critical 9.3 CVSS Flaw in Gogs Turns Repositories into Malware Delivery Vectors
A critical 9.3 CVSS flaw (CVE-2026-25921) in Gogs' LFS handling allows attackers to silently overwrite repository files, risking severe supply-chain attacks.
15 views
Daily Writeups
⤷ Title: Agencies Issue Urgent Warning on INC Ransom Healthcare Attacks
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Tue, 10 Mar 2026 00:22:11 +0000
════════════════════════
⌗ Tags: #Cybercriminals #ACSC #CERT Tonga #cybersecurity #Double Extortion #healthcare security #INC Ransom #infosec #NCSC New Zealand #ransomware #threat intelligence
Daily CyberSecurity
Agencies Issue Urgent Warning on INC Ransom Healthcare Attacks
A joint advisory warns of INC Ransom's devastating pivot to the Pacific. Discover how this RaaS group uses double extortion to target healthcare sectors.
14 views
Daily Writeups
⤷ Title: Critical Request Smuggling & Cache Flaws Discovered in Cloudflare’s Pingora
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Tue, 10 Mar 2026 00:18:52 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #Cache Poisoning #Cloudflare Pingora #CVE_2026_2833 #CVE_2026_2835 #CVE_2026_2836 #cybersecurity #http_request_smuggling #infosec #Patch Alert #Rust Security
Daily CyberSecurity
Critical Request Smuggling & Cache Flaws Discovered in Cloudflare's Pingora
Discover three critical flaws (including CVE-2026-2835) in Cloudflare's Pingora Rust framework causing request smuggling and cache poisoning. Update now.
11 views
Daily Writeups
⤷ Title: The Spy in Your Sidebar: Fake AI Browser Extensions Steal Data from 900,000 Users
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Tue, 10 Mar 2026 00:11:44 +0000
════════════════════════
⌗ Tags: #Malware #Browser Extensions #Chrome Web Store #Chromium Security #cyber_espionage #cybersecurity #data exfiltration #infosec #Malicious AI Extensions #Microsoft Defender #threat intelligence
Daily CyberSecurity
The Spy in Your Sidebar: Fake AI Browser Extensions Steal Data from 900,000 Users
Microsoft Defender uncovers a massive campaign of malicious Chromium extensions impersonating AI tools to steal data from 900,000 users. Audit browsers now.
11 views
Daily Writeups
⤷ Title: The ‘Contagious Interview’ Trap: How a Web3 CEO Unmasked North Korean Stealth Malware
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Tue, 10 Mar 2026 00:07:12 +0000
════════════════════════
⌗ Tags: #Cybercriminals #Contagious Interview #cybersecurity #infosec #Kill Switch #LinkedIn Phishing #Malware Analysis #North Korean malware #social engineering #threat intelligence #Web3 security
Daily CyberSecurity
The 'Contagious Interview' Trap: How a Web3 CEO Unmasked North Korean Stealth Malware
A fake LinkedIn recruiter and a poisoned GitHub repo: See how a CEO uncovered the North Korean "Contagious Interview" malware targeting Web3 developers.
16 views
Daily Writeups
⤷ Title: Silently Swapped: How ClipXDaemon Hijacks Linux Cryptowallets Without a C2 Server
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Tue, 10 Mar 2026 00:02:53 +0000
════════════════════════
⌗ Tags: #Malware #Bincrypter #ClipXDaemon #Cryptocurrency Hijacker #cybersecurity #Cyble Research #infosec #Linux Malware #Process Masquerading #threat intelligence #X11 Security
Daily CyberSecurity
Silently Swapped: How ClipXDaemon Hijacks Linux Cryptowallets Without a C2 Server
Cyble Research unmasks ClipXDaemon, a C2-less Linux malware that silently hijacks cryptocurrency wallet addresses in X11 clipboard environments.
8 views
Daily Writeups
⤷ Title: Guía de XXE Injection: Fundamentos, Payloads y Estrategias de Bug Bounty
════════════════════════
𐀪 Author: JPablo13
════════════════════════
ⴵ Time: Tue, 10 Mar 2026 00:01:02 GMT
════════════════════════
⌗ Tags: #technology #bug_bounty #cybersecurity #web_security #hacking
Medium
Guía de XXE Injection: Fundamentos, Payloads y Estrategias de Bug Bounty
Aprende qué es XXE, cómo detectarlo y los mejores payloads para lectura de archivos, SSRF y ataques OOB en auditorías de seguridad.
9 views
Daily Writeups
⤷ Title: THM: Windows Privilege Escalation
════════════════════════
𐀪 Author: Murad Salem
════════════════════════
ⴵ Time: Mon, 09 Mar 2026 23:32:07 GMT
════════════════════════
⌗ Tags: #tryhackme #privilege_escalation #cybersecurity #penetration_testing #windows
Medium
THM: Windows Privilege Escalation
A write-up for Windows Privilege Escalation room
15 views