Daily Writeups
@Daily_Writeups
3.88K subscribers
4 photos
134K links
Daily Bug Bounty / Cybersecurity Writeups
Source Code : https://github.com/Spix0r/writeup-miner
Download Telegram
About
Blog
Apps
Platform
Join
Daily Writeups
3.88K subscribers
Daily Writeups
⤷ Title: The End of the Restart: How Windows “Hotpatching” Will Seal Zero-Days Without a Single Reboot
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Thu, 12 Mar 2026 07:38:23 +0000
════════════════════════
⌗ Tags: #Windows #Cyber Security 2026 #Hotpatching #IT Administration #Microsoft Graph API #Microsoft Intune #Patch Tuesday #Windows 11 #Windows 11 Enterprise #Windows Autopatch #zero_day
Penetration Testing Tools
The End of the Restart: How Windows "Hotpatching" Will Seal Zero-Days Without a Single Reboot
The necessity of rebooting following the installation of security updates has long been a source of profound exasperation
❤1
15 views
Daily Writeups
⤷ Title: Shadow of the Router: How the “KadNap” Botnet Hijacked 14,000 ASUS Devices
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Thu, 12 Mar 2026 07:37:32 +0000
════════════════════════
⌗ Tags: #Malware #aic.sh #ASUS Routers #Black Lotus Labs #BOTNET #Cyber Espionage #Doppelganger proxy #IoT Security #Kademlia DHT #KadNap #Lumen Technologies #Malware 2026 #proxy network
Penetration Testing Tools
Shadow of the Router: How the "KadNap" Botnet Hijacked 14,000 ASUS Devices
The Black Lotus Labs vanguard at Lumen Technologies has unearthed a nascent botnet christened KadNap, operational since August
22 views
Daily Writeups
⤷ Title: The Invisible Switch: How “ClipXDaemon” Hijacks Linux Clipboards to Steal Crypto
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Thu, 12 Mar 2026 07:35:12 +0000
════════════════════════
⌗ Tags: #Malware #Bitcoin #Clipboard hijacker #ClipXDaemon #Cryptocurrency Theft #Cyber Security 2026 #Ethereum #Fileless Malware #Linux Desktop security #Linux malware #Monero #X11 security
Penetration Testing Tools
The Invisible Switch: How "ClipXDaemon" Hijacks Linux Clipboards to Steal Crypto
Cybersecurity researchers have unearthed a nascent Linux malware strain christened ClipXDaemon. This insidious program clandestinely intercepts the contents
13 views
Daily Writeups
⤷ Title: The Living Dead: How “Zombie ZIP” Headers Trick 50 Mainstream Antivirus Engines
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Thu, 12 Mar 2026 07:30:55 +0000
════════════════════════
⌗ Tags: #Vulnerability #Antivirus Bypass #Archive Security #Bombadil Systems #Chris Aziz #CVE_2026_0866 #Cyber Security 2026 #DEFLATE #EICAR #malware obfuscation #VirusTotal #ZIP Header Manipulation #Zombie ZIP
Penetration Testing Tools
The Living Dead: How "Zombie ZIP" Headers Trick 50 Mainstream Antivirus Engines
Investigators have directed their scrutiny toward a novel artifice for obfuscating malignant code within ZIP archives. Christened “Zombie
14 views
Daily Writeups
⤷ Title: The Silent Miner: How “BeatBanker” Malware Spoofs Starlink to Hijack Android Smartphones
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Thu, 12 Mar 2026 07:24:05 +0000
════════════════════════
⌗ Tags: #Malware #Android malware #banking trojan #BeatBanker #Brazil #BTMOB RAT #cryptocurrency mining #Google Play Phishing #Infosec #mobile security #Starlink #Tech News 2026 #XMRig
Penetration Testing Tools
The Silent Miner: How "BeatBanker" Malware Spoofs Starlink to Hijack Android Smartphones
Analysts at Kaspersky Lab have unearthed an Android application christened BeatBanker, which cunningly masquerades as the Starlink satellite
14 views
Daily Writeups
⤷ Title: The Tag Trap: How a Single Commit Swap Turned Xygeni’s GitHub Action into a Clandestine Backdoor
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Thu, 12 Mar 2026 07:21:26 +0000
════════════════════════
⌗ Tags: #Malware #CI/CD Security #DevOps Security #GitHub Actions #GitHub Token Theft #malware #RCE #StepSecurity #supply chain attack #Tag Poisoning #Tech News 2026 #v5 tag #Xygeni
Penetration Testing Tools
The Tag Trap: How a Single Commit Swap Turned Xygeni’s GitHub Action into a Clandestine Backdoor
An imperceptible edit to a single tag transformed a ubiquitous security auditing instrument into a clandestine backdoor. A
❤1
10 views
Daily Writeups
⤷ Title: Edge of Extinction: How FortiGate Flaws Open the Gates to Active Directory Subjugation
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Thu, 12 Mar 2026 07:19:35 +0000
════════════════════════
⌗ Tags: #Cybercriminals #Active Directory #CVE_2025_59718 #CVE_2025_59719 #CVE_2026_24858 #FortiGate #Fortinet #InfoSec 2026 #Initial Access Broker #Lateral Movement #NTDS.dit #SentinelOne #SIEM #SSO Bypass
Penetration Testing Tools
Edge of Extinction: How FortiGate Flaws Open the Gates to Active Directory Subjugation
The compromise of a perimeter network appliance can swiftly shepherd a malefactor toward domain controllers and the enterprise’s
13 views
Daily Writeups
⤷ Title: Velocity of the Machine: How Generative AI Collapsed the Cyberattack “Breakout Time” to 29 Minutes
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Thu, 12 Mar 2026 07:18:19 +0000
════════════════════════
⌗ Tags: #Cyber Security #AI security #Anthropic #Autonomous Agents #breakout time #Claude Code #CrowdStrike #Cyber Espionage #Generative AI #PromptLock #ransomware #red teaming #Tech News 2026
Penetration Testing Tools
Velocity of the Machine: How Generative AI Collapsed the Cyberattack "Breakout Time" to 29 Minutes
Within the dominion of cybersecurity, a perpetual, sisyphean race has long endured: defenders fortify a breach, assailants unearth
10 views
Daily Writeups
⤷ Title: Nidhogg: multi-functional rootkit for red teams
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Thu, 12 Mar 2026 07:08:06 +0000
════════════════════════
⌗ Tags: #Open Source Tool #Nidhogg #red teams #rootkit
Penetration Testing Tools
Nidhogg: multi-functional rootkit for red teams
Nidhogg is a multi-functional rootkit for red teams. The goal of Nidhogg is to provide an all-in-one and easy-to-use rootkit
12 views
Daily Writeups
⤷ Title: The $32 Billion Fortress: Google Completes Historic Wiz Acquisition to Solve the “AI-Native” Risk
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Thu, 12 Mar 2026 08:38:26 +0000
════════════════════════
⌗ Tags: #Technology #acquisition #AI security #Cloud Security #Code_to_Cloud #cyber security 2026 #Gemini #google #Mandiant #Multi_Cloud #vulnerability management #Wiz
Daily CyberSecurity
The $32 Billion Fortress: Google Completes Historic Wiz Acquisition to Solve the "AI-Native" Risk
Google has finalized its $32B acquisition of Wiz, the largest in its history. Discover how this "code-to-cloud" platform secures AI in a multi-cloud world.
10 views
Daily Writeups
⤷ Title: The Silicon Schism: Google Deploys 3 Million AI Agents to the Pentagon as Anthropic Faces Exile
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Thu, 12 Mar 2026 08:34:39 +0000
════════════════════════
⌗ Tags: #Technology #AI Ethics #Anthropic #Claude #Defense Strategy 2026 #Department of Defense #Gemini #GenAI.mil #google #Military AI #Pentagon #Project Maven #supply chain risk
Daily CyberSecurity
The Silicon Schism: Google Deploys 3 Million AI Agents to the Pentagon as Anthropic Faces Exile
Google has deployed Gemini AI agents to 3 million Pentagon staff following a fallout with Anthropic. Discover the ethics shift and the new "GenAI.mil" portal.
14 views
Daily Writeups
⤷ Title: Beyond the Formula: ChatGPT’s New “Dynamic Visuals” Turn Equations Into Interactive Sandboxes
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Thu, 12 Mar 2026 08:22:30 +0000
════════════════════════
⌗ Tags: #Technology #AI Tutor #Algebra #ChatGPT #Dynamic Visual Explanations #EdTech 2026 #Geometry #Interactive learning #OpenAI #Physics #Pythagorean theorem #STEM education #Study Mode
Daily CyberSecurity
Beyond the Formula: ChatGPT’s New "Dynamic Visuals" Turn Equations Into Interactive Sandboxes
ChatGPT’s new "Dynamic Visual Explanations" let you manipulate variables in real-time diagrams for 70+ math and science concepts. No more static formulas.
13 views
Daily Writeups
⤷ Title: Agentic War: Amazon Secures Landmark Injunction to Block Perplexity’s AI Shopping Bot
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Thu, 12 Mar 2026 08:19:35 +0000
════════════════════════
⌗ Tags: #Technology #Agentic Commerce #AI Agents #Amazon #CFAA #Comet browser #Ecommerce News 2026 #Maxine Chesney #Perplexity.ai #Preliminary injunction #Retail Media #U.S. District Court #Web 3.0
Daily CyberSecurity
Agentic War: Amazon Secures Landmark Injunction to Block Perplexity’s AI Shopping Bot
A San Francisco judge has blocked Perplexity’s Comet AI from buying on Amazon. Learn how this 2026 ruling defines the legal boundaries of agentic AI commerce.
12 views
Daily Writeups
⤷ Title: One Vector to Rule Them All: How Gemini Embedding 2 Unifies Text, Audio, and Video
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Thu, 12 Mar 2026 08:16:03 +0000
════════════════════════
⌗ Tags: #Technology #AI Infrastructure 2026 #Audio Embedding #Gemini Embedding 2 #Google DeepMind #Matryoshka Representation Learning #MRL #Multimodal RAG #Semantic Search #Vector Embeddings #Vertex AI
Daily CyberSecurity
One Vector to Rule Them All: How Gemini Embedding 2 Unifies Text, Audio, and Video
Google DeepMind’s Gemini Embedding 2 is here. Map text, images, 120s of video, and native audio into one vector space to revolutionize multimodal RAG and search.
13 views
Daily Writeups
⤷ Title: ⚡ Automating Web Security Testing with OWASP ZAP
A Beginner-Friendly Guide for Bug Bounty…
════════════════════════
𐀪 Author: ghostyjoe
════════════════════════
ⴵ Time: Thu, 12 Mar 2026 07:17:46 GMT
════════════════════════
⌗ Tags: #bug_bounty #cybersecurity #automation #hacking #security
Medium
⚡ Automating Web Security Testing with OWASP ZAP 🚀 A Beginner-Friendly Guide for Bug Bounty Hunters
✍️ By Ghostyjoe
14 views
Daily Writeups
⤷ Title: The Web3 IDOR: Leaving the Bank Vault Wide Open
════════════════════════
𐀪 Author: Tabrez Mukadam
════════════════════════
ⴵ Time: Thu, 12 Mar 2026 07:11:00 GMT
════════════════════════
⌗ Tags: #cybersecurity #web3 #ethereum #bitcoin #bug_bounty
Medium
The Web3 IDOR: Leaving the Bank Vault Wide Open 🚪
Season 1: PROTOCOL ZERO, Chapter 6 | What happens when a developer forgets to lock the front door? Anyone can walk in.
27 views
Daily Writeups
⤷ Title: [Dev Update] NODE: PROTOCOL
════════════════════════
𐀪 Author: NODE: PROTOCOL
════════════════════════
ⴵ Time: Thu, 12 Mar 2026 08:00:32 GMT
════════════════════════
⌗ Tags: #hackathons #kali_linux #hacking #games #game_development
Medium
[Dev Update] NODE: PROTOCOL
The Invisible Crew: Architecture of an Asynchronous Co-op Hacking Sim
12 views
Daily Writeups
⤷ Title: Identity Sprawl: The Hidden Risk in Modern Cloud Environments
════════════════════════
𐀪 Author: Cybersphere Official
════════════════════════
ⴵ Time: Thu, 12 Mar 2026 08:16:26 GMT
════════════════════════
⌗ Tags: #cloud_security #access_control #infosec #cybersecurity #identity_management
Medium
Identity Sprawl: The Hidden Risk in Modern Cloud Environments
Context
12 views
Daily Writeups
⤷ Title: How to build a Cybersecurity Portfolio that gets you hired
════════════════════════
𐀪 Author: 0xSmit
════════════════════════
ⴵ Time: Thu, 12 Mar 2026 07:13:57 GMT
════════════════════════
⌗ Tags: #technology #information_security #web_development #cybersecurity #infosec
Medium
How to build a Cybersecurity Portfolio that gets you hired
Cybersecurity is one of the few industries where skills matter more than degrees. Recruiters want to see proof of your abilities, not just…
28 views
Daily Writeups
⤷ Title: Write-Up: Attacktive Directory — TryHackMe
════════════════════════
𐀪 Author: Aiko Devy Ratnasari
════════════════════════
ⴵ Time: Thu, 12 Mar 2026 08:15:16 GMT
════════════════════════
⌗ Tags: #penetration_testing #tryhackme_writeup #active_directory #cybersecurity #ctf
Medium
Write-Up: Attacktive Directory — TryHackMe
Platform: TryHackMe
15 views
Daily Writeups
⤷ Title: M365 Monitoring Basics Walkthrough Notes | TryHackMe
════════════════════════
𐀪 Author: Sle3pyHead ‍
════════════════════════
ⴵ Time: Thu, 12 Mar 2026 08:41:18 GMT
════════════════════════
⌗ Tags: #tryhackme_writeup #tryhackme #microsoft_365 #m365_security #tryhackme_walkthrough
Medium
M365 Monitoring Basics Walkthrough Notes | TryHackMe
M365 monitoring guide using Entra logs and Splunk investigations.
18 views