Daily Writeups
@Daily_Writeups
3.5K subscribers
2 photos
129K links
Daily Bug Bounty / Cybersecurity Writeups
Source Code : https://github.com/Spix0r/writeup-miner
Download Telegram
About
Blog
Apps
Platform
Join
Daily Writeups
3.5K subscribers
Daily Writeups
⤷ Title: TryHackMe SOC Analyst Road Map Part-8
════════════════════════
𐀪 Author: safa kaya
════════════════════════
ⴵ Time: Thu, 12 Mar 2026 22:50:42 GMT
════════════════════════
⌗ Tags: #tryhackme #cybersecurity
Medium
TryHackMe SOC Analyst Road Map Part-8
-NETWORKING SECURE PROTOCOLS-
Task 1 — Introduction
Networking Core Protocols — Türkçe Özet
27 views
Daily Writeups
⤷ Title: Objective
════════════════════════
𐀪 Author: inbd4unix
════════════════════════
ⴵ Time: Thu, 12 Mar 2026 22:10:04 GMT
════════════════════════
⌗ Tags: #tryhackme_writeup #tryhackme #tryhackme_walkthrough
Medium
Objective
The goal of this room was to gain access to the administrative dashboard by identifying the password for the admin user and retrieving the…
35 views
Daily Writeups
⤷ Title: Understanding and Demonstrating ARP Spoofing > A Comprehensive Guide
════════════════════════
𐀪 Author: Huzaifah Tahir
════════════════════════
ⴵ Time: Thu, 12 Mar 2026 22:50:57 GMT
════════════════════════
⌗ Tags: #cybersecurity #wifihacking #rap #ethical_hacking #arp_spoofing
Medium
Understanding and Demonstrating ARP Spoofing > A Comprehensive Guide
This article provides a complete guide to understanding, executing, and defending against Address Resolution Protocol (ARP) spoofing, also…
41 views
Daily Writeups
⤷ Title: Critical 9.8 CVSS telnetd Buffer Overflow Grants Pre-Auth Root
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Fri, 13 Mar 2026 00:23:43 +0000
════════════════════════
⌗ Tags: #Vulnerability #buffer overflow #cybersecurity #GNU Inetutils #infosec #legacy systems #LINEMODE SLC #Patch Alert #Pre_Auth RCE #Telnetd
Daily CyberSecurity
Critical 9.8 CVSS telnetd Buffer Overflow Grants Pre-Auth Root
A critical 9.8 CVSS pre-auth buffer overflow in GNU Inetutils telnetd allows attackers to execute arbitrary code and gain root access. Patch immediately.
34 views
Daily Writeups
⤷ Title: The “CrashFix” Evolution: KongTuke’s New Playbook for Enterprise Infiltration
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Fri, 13 Mar 2026 00:12:28 +0000
════════════════════════
⌗ Tags: #Malware #ClickFix #CrashFix #cybersecurity #infosec #KongTuke #living_off_the_land #LotL #ModeloRAT #threat intelligence #Trend Micro
Daily CyberSecurity
The "CrashFix" Evolution: KongTuke’s New Playbook for Enterprise Infiltration
Trend Micro exposes KongTuke's new "CrashFix" tactic, which tricks enterprise users via fake Chrome errors into deploying the fileless modeloRAT backdoor.
31 views
Daily Writeups
⤷ Title: TaxiSpy RAT: New Android Banking Trojan Targets Russian Financial Sector
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Fri, 13 Mar 2026 00:08:31 +0000
════════════════════════
⌗ Tags: #Malware #Android Banking Malware #cybersecurity #Cyfirma #infosec #Obfuscation #rat #Remote Access Trojan #RuTaxi Trojan #threat intelligence #vnc
Daily CyberSecurity
TaxiSpy RAT: New Android Banking Trojan Targets Russian Financial Sector
Cyfirma uncovers the RuTaxi Android banking Trojan, a highly persistent malware using VNC capabilities to hijack Russian bank accounts and crypto wallets.
23 views
Daily Writeups
⤷ Title: A Single Line of Code: Pre-Auth OpenSSH Flaw Exposes Ubuntu and Debian Servers
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Fri, 13 Mar 2026 00:07:14 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #CVE_2026_3497 #cybersecurity #Debian #GSSAPI Key Exchange #heap corruption #infosec #Linux Security #OpenSSH #Ubuntu #Vulnerability
Daily CyberSecurity
A Single Line of Code: Pre-Auth OpenSSH Flaw Exposes Ubuntu and Debian Servers
A pre-auth flaw in OpenSSH's GSSAPI Key Exchange (CVE-2026-3497) exposes Ubuntu and Debian servers to heap corruption and data leaks. Patch now.
21 views
Daily Writeups
⤷ Title: The Amphibious Gamer: How Google’s “Buy Once, Play Anywhere” Strategy is Taking on Steam
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Fri, 13 Mar 2026 00:05:55 +0000
════════════════════════
⌗ Tags: #Android #AI gaming assistant #Android gaming #Buy once play anywhere #Cross_platform gaming #Game Trials #GDC 2026 #Google Play Games PC #Google Play Store #Play Games Sidekick #Steam rival #Windows 11
Daily CyberSecurity
The Amphibious Gamer: How Google’s "Buy Once, Play Anywhere" Strategy is Taking on Steam
Google’s GDC 2026 updates bring "buy once, play anywhere" licenses and AI-powered "Sidekick" tips to PC and mobile. See how they're challenging Steam’s monopoly.
19 views
Daily Writeups
⤷ Title: The Arm64 Vanguard: Valve Shatters x86 Hegemony with Steam Frame and “SteamOS on Arm”
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Fri, 13 Mar 2026 00:05:06 +0000
════════════════════════
⌗ Tags: #Technology #ARM64 #FEX_Emu #GDC 2026 #PC Gaming 2026 #Proton for Arm #Snapdragon 8 Gen 3 #Steam Frame #Steam Machine #Steam Machine Verified #SteamOS #Valve
Daily CyberSecurity
The Arm64 Vanguard: Valve Shatters x86 Hegemony with Steam Frame and "SteamOS on Arm"
Valve’s GDC 2026 reveal of "SteamOS on Arm" and the Steam Frame marks the end of x86 dominance. Discover the new 1080p/30FPS Steam Machine Verified standards.
16 views
Daily Writeups
⤷ Title: Hardware Autonomy: Meta’s “High Velocity” Roadmap to Deploy Four AI Chips by 2027
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Fri, 13 Mar 2026 00:03:34 +0000
════════════════════════
⌗ Tags: #Technology #AI Silicon #GenAI #HBM bandwidth #Inference_First #Llama 5 #Meta #MTIA #MTIA 500 #Open Compute Project #PyTorch #semiconductor #Tech News 2026
Daily CyberSecurity
Hardware Autonomy: Meta’s "High Velocity" Roadmap to Deploy Four AI Chips by 2027
Meta shatters the industry standard with a 6-month chip cycle. Discover the MTIA 300-500 roadmap designed to slash AI costs and power 3 billion users by 2027.
18 views
Daily Writeups
⤷ Title: The “Helix” Horizon: Microsoft Transforms Windows 11 Into a Console With “Xbox Mode”
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Fri, 13 Mar 2026 00:01:11 +0000
════════════════════════
⌗ Tags: #Windows #Advanced Shader Delivery #ASD #DirectStorage #DirectX #Game Developers Conference #GDC 2026 #PC Gaming #Project Helix #Shader Stutter #Windows 11 #Xbox Mode #Zstandard
Daily CyberSecurity
The "Helix" Horizon: Microsoft Transforms Windows 11 Into a Console With "Xbox Mode"
Microsoft’s new "Xbox Mode" brings a full-screen, controller-first console experience to all Windows 11 PCs this April. Say goodbye to shader stutter in 2026.
23 views
Daily Writeups
⤷ Title: Double Zero-Day Threat: Emergency Chrome Update Patches Actively Exploited Skia and V8 Flaws
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Thu, 12 Mar 2026 23:39:34 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #browser security #Chrome Zero_Day #CVE_2026_3909 #CVE_2026_3910 #cybersecurity #Google Chrome Update #infosec #Patch Alert #Skia Vulnerability #V8 JavaScript engine #zero_day
Daily CyberSecurity
Double Zero-Day Threat: Emergency Chrome Update Patches Actively Exploited Skia and V8 Flaws
Google releases an emergency Chrome update to patch two actively exploited zero-day vulnerabilities (CVE-2026-3909 & CVE-2026-3910). Update immediately.
17 views
Daily Writeups
⤷ Title: Guía Maestra de SQL Injection (SQLi): Tipos, Payloads y Técnicas de Evasión
════════════════════════
𐀪 Author: JPablo13
════════════════════════
ⴵ Time: Fri, 13 Mar 2026 00:01:01 GMT
════════════════════════
⌗ Tags: #bug_bounty #cybersecurity #sql_injection #hacking #technology
Medium
Guía Maestra de SQL Injection (SQLi): Tipos, Payloads y Técnicas de Evasión
Aprende los fundamentos de SQL Injection, estrategias de explotación, evasión de WAF y payloads críticos para Bug Bounty.
21 views
Daily Writeups
⤷ Title: ‍♂️How I Escalated From Domain User to Domain Admin
════════════════════════
𐀪 Author: Jabaribrown
════════════════════════
ⴵ Time: Thu, 12 Mar 2026 23:04:39 GMT
════════════════════════
⌗ Tags: #ctf #hacking #cybersecurity #bug_bounty #ethical_hacking
Medium
👷‍♂️🪟How I Escalated From Domain User to Domain Admin
If you’re interested in more Active Directory fun, check out my previous article on over-permissive file shares…
28 views
Daily Writeups
⤷ Title: Penetration Testing
════════════════════════
𐀪 Author: Mac Sunny
════════════════════════
ⴵ Time: Fri, 13 Mar 2026 00:25:56 GMT
════════════════════════
⌗ Tags: #cyberattack #penetration_testing
Medium
Penetration Testing
Penetration testing is a legal or an authorized cybersecurity testing technique where ethical hackers simulated cyberattack on…
33 views
Daily Writeups
⤷ Title: Account Takeover Time‑Sensitive Password Reset Tokens (PortSwigger Lab 28)
════════════════════════
𐀪 Author: Anonymousd
════════════════════════
ⴵ Time: Fri, 13 Mar 2026 00:56:24 GMT
════════════════════════
⌗ Tags: #tryhackme_writeup #race_condition #cybersecurity #hackthebox_writeup #portswigger_academy_labs
Medium
🔥 Account Takeover Time‑Sensitive Password Reset Tokens (PortSwigger Lab 28)
Introduction
38 views
Daily Writeups
⤷ Title: Legacy Under Siege: Apple Pushes Emergency iOS 15.8.7 Update to Thwart ‘Coruna’ Exploit Kit
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Fri, 13 Mar 2026 02:45:11 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #Apple Security #Coruna Exploit Kit #CVE_2023_41974 #cybersecurity #infosec #iOS 15.8.7 #iPadOS 15.8.7 #Kernel Exploit #Legacy Hardware #WebKit Vulnerability
Daily CyberSecurity
Legacy Under Siege: Apple Pushes Emergency iOS 15.8.7 Update to Thwart 'Coruna' Exploit Kit
Apple releases emergency iOS 15.8.7 and 16.7.15 updates for older iPhones to block the actively exploited "Coruna" WebKit and Kernel exploit kit. Patch now.
34 views
Daily Writeups
⤷ Title: Breaking the Shield: ‘CrackArmor’ Flaws Expose 12.6 Million Linux Servers to Full Root Takeover
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Fri, 13 Mar 2026 02:28:21 +0000
════════════════════════
⌗ Tags: #Linux #Vulnerability Report #AppArmor #Container Breakout #CrackArmor #cybersecurity #Linux Security #privilege escalation #Qualys TRU #Ubuntu #Vulnerability #zero_day
Daily CyberSecurity
Breaking the Shield: 'CrackArmor' Flaws Expose 12.6 Million Linux Servers to Full Root Takeover
CrackArmor exposes 12.6M Linux servers to root escalation. Qualys TRU discovers 9 AppArmor flaws letting users bypass security and escape containers.
29 views
Daily Writeups
⤷ Title: Unit 42 Unmasks CL-STA-1087’s Years-Long Cyber Espionage Against Asian Militaries
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Fri, 13 Mar 2026 01:54:05 +0000
════════════════════════
⌗ Tags: #Cyber Security #Malware #AppleChris Backdoor #APT #CL_STA_1087 #cyber_espionage #cybersecurity #infosec #MemFun Backdoor #State_Sponsored Threat #threat intelligence #Unit 42
Daily CyberSecurity
Unit 42 Unmasks CL-STA-1087's Years-Long Cyber Espionage Against Asian Militaries
Unit 42 exposes CL-STA-1087, a suspected Chinese state-sponsored cyber espionage group using custom backdoors to infiltrate Asian military networks.
21 views
Daily Writeups
⤷ Title: Apache Livy Patches Path Traversal and File Access Flaws Exposing Spark Clusters
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Fri, 13 Mar 2026 01:43:40 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #Apache Livy #Apache Spark #CVE_2025_60012 #CVE_2025_66249 #cybersecurity #infosec #Patch Alert #Path Traversal #REST API Security #vulnerability management
Daily CyberSecurity
Apache Livy Patches Path Traversal and File Access Flaws Exposing Spark Clusters
Protect your Spark clusters: Apache Livy 0.9.0 patches two important file access and path traversal vulnerabilities (CVE-2025-60012 & CVE-2025-66249).
16 views
Daily Writeups
⤷ Title: Veeam Urgently Patches Critical 9.9 CVSS RCE Flaws in Backup Servers
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Fri, 13 Mar 2026 01:35:21 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #Backup Security #CVE_2026_21669 #CVE_2026_21708 #cybersecurity #infosec #Patch Alert #privilege escalation #Ransomware Defense #RCE vulnerability #Veeam Backup & Replication
Daily CyberSecurity
Veeam Urgently Patches Critical 9.9 CVSS RCE Flaws in Backup Servers
Veeam releases a critical security update fixing 9.9 CVSS RCE flaws (CVE-2026-21669, CVE-2026-21708) in Backup & Replication. Patch servers immediately.
17 views