Daily Writeups
@Daily_Writeups
3.49K subscribers
2 photos
129K links
Daily Bug Bounty / Cybersecurity Writeups
Source Code : https://github.com/Spix0r/writeup-miner
Download Telegram
About
Blog
Apps
Platform
Join
Daily Writeups
3.49K subscribers
Daily Writeups
⤷ Title: The “Helix” Horizon: Microsoft Transforms Windows 11 Into a Console With “Xbox Mode”
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Fri, 13 Mar 2026 00:01:11 +0000
════════════════════════
⌗ Tags: #Windows #Advanced Shader Delivery #ASD #DirectStorage #DirectX #Game Developers Conference #GDC 2026 #PC Gaming #Project Helix #Shader Stutter #Windows 11 #Xbox Mode #Zstandard
Daily CyberSecurity
The "Helix" Horizon: Microsoft Transforms Windows 11 Into a Console With "Xbox Mode"
Microsoft’s new "Xbox Mode" brings a full-screen, controller-first console experience to all Windows 11 PCs this April. Say goodbye to shader stutter in 2026.
23 views
Daily Writeups
⤷ Title: Double Zero-Day Threat: Emergency Chrome Update Patches Actively Exploited Skia and V8 Flaws
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Thu, 12 Mar 2026 23:39:34 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #browser security #Chrome Zero_Day #CVE_2026_3909 #CVE_2026_3910 #cybersecurity #Google Chrome Update #infosec #Patch Alert #Skia Vulnerability #V8 JavaScript engine #zero_day
Daily CyberSecurity
Double Zero-Day Threat: Emergency Chrome Update Patches Actively Exploited Skia and V8 Flaws
Google releases an emergency Chrome update to patch two actively exploited zero-day vulnerabilities (CVE-2026-3909 & CVE-2026-3910). Update immediately.
17 views
Daily Writeups
⤷ Title: Guía Maestra de SQL Injection (SQLi): Tipos, Payloads y Técnicas de Evasión
════════════════════════
𐀪 Author: JPablo13
════════════════════════
ⴵ Time: Fri, 13 Mar 2026 00:01:01 GMT
════════════════════════
⌗ Tags: #bug_bounty #cybersecurity #sql_injection #hacking #technology
Medium
Guía Maestra de SQL Injection (SQLi): Tipos, Payloads y Técnicas de Evasión
Aprende los fundamentos de SQL Injection, estrategias de explotación, evasión de WAF y payloads críticos para Bug Bounty.
21 views
Daily Writeups
⤷ Title: ‍♂️How I Escalated From Domain User to Domain Admin
════════════════════════
𐀪 Author: Jabaribrown
════════════════════════
ⴵ Time: Thu, 12 Mar 2026 23:04:39 GMT
════════════════════════
⌗ Tags: #ctf #hacking #cybersecurity #bug_bounty #ethical_hacking
Medium
👷‍♂️🪟How I Escalated From Domain User to Domain Admin
If you’re interested in more Active Directory fun, check out my previous article on over-permissive file shares…
28 views
Daily Writeups
⤷ Title: Penetration Testing
════════════════════════
𐀪 Author: Mac Sunny
════════════════════════
ⴵ Time: Fri, 13 Mar 2026 00:25:56 GMT
════════════════════════
⌗ Tags: #cyberattack #penetration_testing
Medium
Penetration Testing
Penetration testing is a legal or an authorized cybersecurity testing technique where ethical hackers simulated cyberattack on…
33 views
Daily Writeups
⤷ Title: Account Takeover Time‑Sensitive Password Reset Tokens (PortSwigger Lab 28)
════════════════════════
𐀪 Author: Anonymousd
════════════════════════
ⴵ Time: Fri, 13 Mar 2026 00:56:24 GMT
════════════════════════
⌗ Tags: #tryhackme_writeup #race_condition #cybersecurity #hackthebox_writeup #portswigger_academy_labs
Medium
🔥 Account Takeover Time‑Sensitive Password Reset Tokens (PortSwigger Lab 28)
Introduction
38 views
Daily Writeups
⤷ Title: Legacy Under Siege: Apple Pushes Emergency iOS 15.8.7 Update to Thwart ‘Coruna’ Exploit Kit
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Fri, 13 Mar 2026 02:45:11 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #Apple Security #Coruna Exploit Kit #CVE_2023_41974 #cybersecurity #infosec #iOS 15.8.7 #iPadOS 15.8.7 #Kernel Exploit #Legacy Hardware #WebKit Vulnerability
Daily CyberSecurity
Legacy Under Siege: Apple Pushes Emergency iOS 15.8.7 Update to Thwart 'Coruna' Exploit Kit
Apple releases emergency iOS 15.8.7 and 16.7.15 updates for older iPhones to block the actively exploited "Coruna" WebKit and Kernel exploit kit. Patch now.
34 views
Daily Writeups
⤷ Title: Breaking the Shield: ‘CrackArmor’ Flaws Expose 12.6 Million Linux Servers to Full Root Takeover
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Fri, 13 Mar 2026 02:28:21 +0000
════════════════════════
⌗ Tags: #Linux #Vulnerability Report #AppArmor #Container Breakout #CrackArmor #cybersecurity #Linux Security #privilege escalation #Qualys TRU #Ubuntu #Vulnerability #zero_day
Daily CyberSecurity
Breaking the Shield: 'CrackArmor' Flaws Expose 12.6 Million Linux Servers to Full Root Takeover
CrackArmor exposes 12.6M Linux servers to root escalation. Qualys TRU discovers 9 AppArmor flaws letting users bypass security and escape containers.
29 views
Daily Writeups
⤷ Title: Unit 42 Unmasks CL-STA-1087’s Years-Long Cyber Espionage Against Asian Militaries
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Fri, 13 Mar 2026 01:54:05 +0000
════════════════════════
⌗ Tags: #Cyber Security #Malware #AppleChris Backdoor #APT #CL_STA_1087 #cyber_espionage #cybersecurity #infosec #MemFun Backdoor #State_Sponsored Threat #threat intelligence #Unit 42
Daily CyberSecurity
Unit 42 Unmasks CL-STA-1087's Years-Long Cyber Espionage Against Asian Militaries
Unit 42 exposes CL-STA-1087, a suspected Chinese state-sponsored cyber espionage group using custom backdoors to infiltrate Asian military networks.
21 views
Daily Writeups
⤷ Title: Apache Livy Patches Path Traversal and File Access Flaws Exposing Spark Clusters
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Fri, 13 Mar 2026 01:43:40 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #Apache Livy #Apache Spark #CVE_2025_60012 #CVE_2025_66249 #cybersecurity #infosec #Patch Alert #Path Traversal #REST API Security #vulnerability management
Daily CyberSecurity
Apache Livy Patches Path Traversal and File Access Flaws Exposing Spark Clusters
Protect your Spark clusters: Apache Livy 0.9.0 patches two important file access and path traversal vulnerabilities (CVE-2025-60012 & CVE-2025-66249).
16 views
Daily Writeups
⤷ Title: Veeam Urgently Patches Critical 9.9 CVSS RCE Flaws in Backup Servers
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Fri, 13 Mar 2026 01:35:21 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #Backup Security #CVE_2026_21669 #CVE_2026_21708 #cybersecurity #infosec #Patch Alert #privilege escalation #Ransomware Defense #RCE vulnerability #Veeam Backup & Replication
Daily CyberSecurity
Veeam Urgently Patches Critical 9.9 CVSS RCE Flaws in Backup Servers
Veeam releases a critical security update fixing 9.9 CVSS RCE flaws (CVE-2026-21669, CVE-2026-21708) in Backup & Replication. Patch servers immediately.
17 views
Daily Writeups
⤷ Title: How I Use Google Dorking to Find Hidden Vulnerabilities
════════════════════════
𐀪 Author: loopXvedant
════════════════════════
ⴵ Time: Fri, 13 Mar 2026 02:31:00 GMT
════════════════════════
⌗ Tags: #google_dorking #google_dorks_list #bug_bounty #google_dork #hacking
Medium
How I Use Google Dorking to Find Hidden Vulnerabilities 🔍
Google isn’t just a search engine. In the right hands, it’s a hacking tool.
15 views
Daily Writeups
⤷ Title: Your Data Is More Valuable Than You Think
════════════════════════
𐀪 Author: Armansyah hakim
════════════════════════
ⴵ Time: Fri, 13 Mar 2026 02:43:26 GMT
════════════════════════
⌗ Tags: #data #cybersecurity #hacking #technology #data_breach
Medium
Your Data Is More Valuable Than You Think
Understanding PII, PHI, and PSI Before the Next Data Breach
16 views
Daily Writeups
⤷ Title: Más allá del bolsillo: El mapa de las amenazas móviles en 2026
════════════════════════
𐀪 Author: Domínguez Pérez Jesús Alonso
════════════════════════
ⴵ Time: Fri, 13 Mar 2026 02:32:00 GMT
════════════════════════
⌗ Tags: #cibersecurity #ciberseguridad #hacking #mobile #malware
Medium
Más allá del bolsillo: El mapa de las amenazas móviles en 2026
En la actualidad, nuestro smartphone es mucho más que un dispositivo de comunicación; es nuestra oficina, nuestro banco y nuestro diario…
19 views
Daily Writeups
⤷ Title: Your WordPress Site Might Be Hacked Right Now — And You Would Never Know
════════════════════════
𐀪 Author: ToolXray
════════════════════════
ⴵ Time: Fri, 13 Mar 2026 01:50:37 GMT
════════════════════════
⌗ Tags: #seo #hacking #programming #coding
Medium
Your WordPress Site Might Be Hacked Right Now — And You Would Never Know
Most WordPress hacks are designed to be invisible to the site owner. Here are the signs, the recovery steps, and how to make sure it never…
19 views
Daily Writeups
⤷ Title: What Security Analysts Actually Look at All Day
════════════════════════
𐀪 Author: Armansyah hakim
════════════════════════
ⴵ Time: Fri, 13 Mar 2026 01:27:57 GMT
════════════════════════
⌗ Tags: #hacking #technology #data_security #online_safety #cybersecurity
Medium
What Security Analysts Actually Look at All Day
Understanding Logs, Alerts, and Threat Monitoring
17 views
Daily Writeups
⤷ Title: Abusing AD-DACL: ForceChangePassword
════════════════════════
𐀪 Author: Youssef Said Thabet
════════════════════════
ⴵ Time: Fri, 13 Mar 2026 02:16:00 GMT
════════════════════════
⌗ Tags: #penetration_testing #active_directory #active_directory_attack
Medium
Abusing AD-DACL: ForceChangePassword
This permission grants the right to change the password of a user account without knowing their current password. Consequently, attackers…
19 views
Daily Writeups
⤷ Title: Try Hack Me- Tokyo Ghoul CTF Walkthrough
════════════════════════
𐀪 Author: PulseEinher
════════════════════════
ⴵ Time: Fri, 13 Mar 2026 01:54:14 GMT
════════════════════════
⌗ Tags: #tryhackme_walkthrough #penetration_testing #tryhackme_writeup #cybersecurity #tryhackme
Medium
Try Hack Me- Tokyo Ghoul CTF Walkthrough
Hello, stranger — let’s begin.
19 views
Daily Writeups
⤷ Title: Red Team Simulation
════════════════════════
𐀪 Author: Jeffersonpacana
════════════════════════
ⴵ Time: Fri, 13 Mar 2026 02:30:59 GMT
════════════════════════
⌗ Tags: #red_team #simulation #ethical_hacking
Medium
Red Team Simulation
The red-team simulation to obtain a remote shell and extract credentials. I executed the following sequence of actions (detailed steps…
29 views
Daily Writeups
⤷ Title: OpenClaw Part II: The Growing Security Risks Behind One-Click RCE in AI Agents
════════════════════════
𐀪 Author: Criminal IP
════════════════════════
ⴵ Time: Fri, 13 Mar 2026 00:55:22 GMT
════════════════════════
⌗ Tags: #cybersecurity #openclaw #one_click_rce #threat_intelligence #rce
Medium
OpenClaw Part II: The Growing Security Risks Behind One-Click RCE in AI Agents
A 1-Click Remote Code Execution (RCE) vulnerability, CVE-2026–25253, was recently disclosed in the AI agent platform OpenClaw, drawing…
44 views
Daily Writeups
⤷ Title: 45 Seconds to Empty: Ledger Unmasks Critical MediaTek Flaw That Turns Phones Into Glass Vaults
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Fri, 13 Mar 2026 03:47:43 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #Android security #Crypto Wallet Hack #Ledger Donjon #March 2026 Security Patch #MediaTek #Mobile Hardware Security #Nothing CMF Phone 1 #Seed Phrase Theft #TEE #Trusted Execution Environment
Daily CyberSecurity
45 Seconds to Empty: Ledger Unmasks Critical MediaTek Flaw That Turns Phones Into Glass Vaults
Ledger Donjon uncovers a critical MediaTek TEE flaw allowing attackers to extract PINs and crypto seed phrases in 45 seconds. Patch now.
30 views