Daily Writeups
@Daily_Writeups
3.56K subscribers
2 photos
130K links
Daily Bug Bounty / Cybersecurity Writeups
Source Code : https://github.com/Spix0r/writeup-miner
Download Telegram
About
Blog
Apps
Platform
Join
Daily Writeups
3.56K subscribers
Daily Writeups
⤷ Title: 4 Million iOS Users at Risk: Abandoned Domains Weaponized for iCalendar Phishing
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Tue, 02 Dec 2025 04:33:15 +0000
════════════════════════
⌗ Tags: #Cybercriminals #Attack Vector #Balada Injector #Bitsight #Calendar Phishing #Domain Abuse #iCalendar #iOS Security #macos #Social Engineering
Penetration Testing Tools
4 Million iOS Users at Risk: Abandoned Domains Weaponized for iCalendar Phishing
Digital calendars have long been a convenient way to stay organized amid daily routines, yet new research from
5 views
Daily Writeups
⤷ Title: DOJ Seizes Domain of Burma’s Notorious Tai Chang Scam Compound to Disrupt ‘Pig Butchering’ Fraud
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Wed, 03 Dec 2025 02:52:06 +0000
════════════════════════
⌗ Tags: #Cybercriminals #Crypto Fraud #DOJ #domain seizure #Organized Crime #Pig Butchering #Tai Chang Compound #Transnational Crime
Daily CyberSecurity
DOJ Seizes Domain of Burma’s Notorious Tai Chang Scam Compound to Disrupt 'Pig Butchering' Fraud
The DOJ seized tickmilleas.com, a domain central to "pig butchering" crypto fraud run from Burma's Tai Chang compound. The action is part of a rapid escalation against transnational organized crime scams.
12 views
Daily Writeups
⤷ Title: The HTTPS Lockdown: Chrome & CAs Retire 11 Legacy Domain Validation Methods by 2028
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Mon, 15 Dec 2025 07:27:51 +0000
════════════════════════
⌗ Tags: #Technology #ACME #CA/Browser Forum #Certificate Authority #Chrome Root Program #DCV #Domain Validation #HTTPS #Security Standard #TLS
Penetration Testing Tools
The HTTPS Lockdown: Chrome & CAs Retire 11 Legacy Domain Validation Methods by 2028
The HTTPS certificate ecosystem is beginning a phased retreat from weaker methods of domain ownership verification. The Chrome
15 views
Daily Writeups
⤷ Title: Kill the Cipher: Microsoft to Disable RC4 Authentication by Mid-2026—Are You Ready?
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Thu, 18 Dec 2025 03:32:48 +0000
════════════════════════
⌗ Tags: #Microsoft #Active Directory #AES_SHA1 #Audit 4768 #cybersecurity #Domain Controller #Encryption #Kerberos #PowerShell #RC4 #Windows Server
Penetration Testing Tools
Kill the Cipher: Microsoft to Disable RC4 Authentication by Mid-2026—Are You Ready?
Microsoft has announced plans to retire the legacy RC4 algorithm from Windows authentication. The company is preparing changes
10 views
Daily Writeups
⤷ Title: From Foothold to Domain Admin — The Real Attacker Journey Inside Active Directory
════════════════════════
𐀪 Author: Suhel Kathi
════════════════════════
ⴵ Time: Mon, 22 Dec 2025 15:28:06 GMT
════════════════════════
⌗ Tags: #penetration_testing #domain_controller #active_directory_attack #privilege_escalation #active_directory
Medium
From Foothold to Domain Admin — The Real Attacker Journey Inside Active Directory
Active Directory is rarely breached in one dramatic move. Real-world compromises happen through a chain of small, logical steps. Once an…
20 views
Daily Writeups
⤷ Title: New WordPress Phishing Scam Steals Credit Cards via Telegram
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Mon, 05 Jan 2026 00:17:44 +0000
════════════════════════
⌗ Tags: #Cybercriminals #3_D Secure bypass #Anurag #credit card theft #cyber fraud #DMARC #Domain Renewal Scam #Exfiltration #OTP Harvesting #phishing #soyfix[.]com #Telegram bot #wordpress
Daily CyberSecurity
New WordPress Phishing Scam Steals Credit Cards via Telegram
Researcher Anurag uncovers a WordPress phishing campaign that steals credit cards and 3-D Secure OTPs, exfiltrating data directly via Telegram bots.
19 views
Daily Writeups
⤷ Title: The Insider Threat: How Tycoon 2FA Bypasses Microsoft 365 MFA via Spoofing
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Sat, 10 Jan 2026 10:21:44 +0000
════════════════════════
⌗ Tags: #Cybercriminals #AiTM #BEC #Cybersecurity 2026 #Domain Spoofing #MFA Bypass #Microsoft 365 #Microsoft Threat Intelligence #MX Records #phishing #Tycoon 2FA
Information Security News
The Insider Threat: How Tycoon 2FA Bypasses Microsoft 365 MFA via Spoofing
Occasionally, the most perilous phishing missives appear as though they were dispatched by a colleague in the adjacent office. This is precisely the strategy currently favored by adversaries who h…
19 views
Daily Writeups
⤷ Title: The Invisible Trap: How Hackers Weaponize the Internet’s Root Infrastructure (.arpa) to Bypass Security
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Tue, 03 Mar 2026 00:16:25 +0000
════════════════════════
⌗ Tags: #Cybercriminals #.arpa domain #dangling domains #Domain Hijacking #Infoblox #infosec #infrastructure abuse #IPv6 tunnel #phishing #reverse DNS #TDS #traffic distribution system
Daily CyberSecurity
The Invisible Trap: How Hackers Weaponize the Internet’s Root Infrastructure (.arpa) to Bypass Security
Infoblox uncovers a novel phishing tactic abusing the .arpa TLD. Attackers hijack internet "plumbing" to bypass firewalls and deliver brand-impersonation scams.
15 views
Daily Writeups
⤷ Title: Beyond the Perimeter: Auditing Active Directory Security with ADPulse’s 35-Point Automated Scan
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Fri, 06 Mar 2026 08:28:31 +0000
════════════════════════
⌗ Tags: #Open Source Tool #Active Directory #AD misconfiguration #AD security #ADPulse #Domain Controller #IT Administration #LDAP auditing #open source security #Penetration Testing #security reporting
Information Security News
Beyond the Perimeter: Auditing Active Directory Security with ADPulse’s 35-Point Automated Scan
ADPulse — Active Directory Security Scanner ADPulse is an open-source Active Directory security auditing tool that connects to a domain controller via LDAP(S), runs 35 automated security checks, a…
29 views
Daily Writeups
⤷ Title: The Intel “AppDomain” Hijack: Unmasking a Sophisticated Post-Exploitation Framework
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Wed, 22 Apr 2026 01:26:54 +0000
════════════════════════
⌗ Tags: #Malware #AppDomain Manager Hijacking #Cobalt Strike #Cyfirma #DLL hijacking #Domain Fronting #Financial Sector Security #IAStorHelp.exe #infosec #intel #JIT Trampolining #Memory Forensics #post_exploitation framework
Daily CyberSecurity
The Intel "AppDomain" Hijack: Unmasking a Sophisticated Post-Exploitation Framework
CYFIRMA uncovers an elite stealth framework hijacking signed Intel utilities via AppDomain Manager. It targets EMEA finance with undetectable memory-only code.
14 views
Daily Writeups
⤷ Title: Domain Fronting: Hiding C2 Behind CDNs
════════════════════════
𐀪 Author: Paritosh
════════════════════════
ⴵ Time: Tue, 12 May 2026 02:56:08 GMT
════════════════════════
⌗ Tags: #artificial_intelligence #hacking #cybersecurity #command_and_control #domain_fronting
Medium
Domain Fronting: Hiding C2 Behind CDNs
What is Domain Fronting?
27 views
Daily Writeups
⤷ Title: Canvas Hackers ShinyHunters Say Their Official Domain Was Suspended
════════════════════════
𐀪 Author: Waqas
════════════════════════
ⴵ Time: Tue, 12 May 2026 21:18:09 +0000
════════════════════════
⌗ Tags: #Cyber Crime #Security #Canvas #Cybersecurity #data breach #Domain #Instructure #LMS #Serbia #ShinyHunters
Hackread
Canvas Hackers ShinyHunters Say Their Official Domain Was Suspended
ShinyHunters says its shinyhunte.rs domain was suspended after the Canvas LMS attacks, forcing the group to move fully to its dark web (.onion) site.
24 views
Daily Writeups
⤷ Title: Fiscal Realignment: Public Interest Registry Initiates Price Hike for .ORG Domains
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Fri, 29 May 2026 09:30:27 +0000
════════════════════════
⌗ Tags: #Technology #.org domain price increase #bulk domain asset management #Cloudflare at_cost domain pricing #domain portfolio risk mitigation #ICANN domain registration fees #legacy TLD price modifications #lock in multi_year domain renewals #open_source organization website costs #Porkbun registrar price updates #Public Interest Registry wholesale tariff hike
Information Security News
.org Domain Price Increase: Rates Hike Beginning June 1
The Public Interest Registry triggers a wholesale .org domain price increase on June 1. Lock in long-term renewals now before retail rates inflate.
17 views
Daily Writeups
⤷ Title: The Netlogon Imperative: Critical Windows Server Exploitation Intensifies
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Wed, 03 Jun 2026 03:12:41 +0000
════════════════════════
⌗ Tags: #Vulnerability #Active Directory threat intelligence #buffer overflow patch #CCB Belgium security warning #CVE_2026_41089 Netlogon exploit #domain controller RCE #Windows Server vulnerability
Information Security News
CVE-2026-41089 Netlogon Exploit: Windows Server Flaw
Analyze the active CVE-2026-41089 Netlogon exploit threat. Learn how a critical buffer overflow puts Windows domain controllers at risk.
18 views
Daily Writeups
⤷ Title: Regulatory Alignment: Let’s Encrypt Amends Subscriber Agreement to Enforce US Sanctions and Export Compliance
════════════════════════
𐀪 Author: Do Son
════════════════════════
ⴵ Time: Wed, 10 Jun 2026 08:50:55 +0000
════════════════════════
⌗ Tags: #Technology #domain certificate rules #Let's Encrypt subscriber agreement #SSL sanctions compliance #U.S. export controls tool #Version 1.7 update #Web Hosting Security
Daily CyberSecurity
Regulatory Alignment: Let’s Encrypt Amends Subscriber Agreement to Enforce US Sanctions and Export Compliance
Discover the new Let's Encrypt subscriber agreement changes. Learn how Version 1.7 integrates U.S. sanctions compliance for global SSL domains.
11 views
Daily Writeups
⤷ Title: Seizing Deepfake Porn Websites: Feds Disrupt Major Global Exploitation Ring
════════════════════════
𐀪 Author: Do Son
════════════════════════
ⴵ Time: Fri, 12 Jun 2026 16:30:19 +0000
════════════════════════
⌗ Tags: #Cybercriminals #cybersecurity #Deepfakes #DOJ #domain seizure #Online Exploitation #Privacy Law
Daily CyberSecurity
Seizing Deepfake Porn Websites: Feds Disrupt Major Global Exploitation Ring
Federal authorities are seizing deepfake porn websites. This historic bust marks a massive win for enforcement of the new TAKE IT DOWN Act.
👍1
25 views
Daily Writeups
⤷ Title: Apple Modifies Hide My Email Feature to Use Dedicated Domain
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Thu, 18 Jun 2026 09:38:16 +0000
════════════════════════
⌗ Tags: #Apple #Domain Migration #Hide My Email #iCloud Privacy
Information Security News
Apple Hide My Email Feature Changes to Dedicated Domain
Apple updates its Hide My Email service by migrating addresses to a dedicated domain, making it easier for sites to identify private proxies.
28 views
Daily Writeups
⤷ Title: How Bad Actors Exploited DNS Laxity in 2026: A Deep Dive into Domain Infrastructure Vulnerabilities
════════════════════════
𐀪 Author: Whoislogic Com
════════════════════════
ⴵ Time: Sat, 27 Jun 2026 00:36:32 GMT
════════════════════════
⌗ Tags: #domain_investing #infosec #cybersecurity #threat_intelligence #dns
Medium
How Bad Actors Exploited DNS Laxity in 2026: A Deep Dive into Domain Infrastructure Vulnerabilities
The cyber threat landscape of 2026 has exposed a fundamental flaw in enterprise security: companies are defending their perimeters while…
15 views
Daily Writeups
⤷ Title: US Seizes Domains to Stop Illegal World Cup Streaming
════════════════════════
𐀪 Author: Do Son
════════════════════════
ⴵ Time: Sat, 27 Jun 2026 03:14:29 +0000
════════════════════════
⌗ Tags: #Cybercriminals #digital piracy #Domain Seizures #Operation Offsides #World Cup
Daily CyberSecurity
US Seizes Domains to Stop Illegal World Cup Streaming
At a Glance Actor or Group: Unnamed digital piracy networks Activity Type: Copyright infringement Targets or Victims: FIFA, official broadcasters, and viewers Scale: Nearly 400 internet domains se…
25 views