Daily Writeups
@Daily_Writeups
3.56K subscribers
2 photos
130K links
Daily Bug Bounty / Cybersecurity Writeups
Source Code : https://github.com/Spix0r/writeup-miner
Download Telegram
About
Blog
Apps
Platform
Join
Daily Writeups
3.56K subscribers
Daily Writeups
⤷ Title: OT Lab: Hacking OpenPLC
════════════════════════
𐀪 Author: Sulaiman Alhasawi
════════════════════════
ⴵ Time: Fri, 28 Feb 2025 15:45:43 GMT
════════════════════════
⌗ Tags: #penetration_testing #plc #open_plc #ot_security
Medium
OT Lab: Hacking OpenPLC
Having an OT lab is crucial for any OT security practitioner or learner. It’s where you gain practical, hands-on skills that can’t be…
30 views
Daily Writeups
⤷ Title: Industrial Systems at Risk: Critical Mitsubishi MELSEC Flaw (CVSS 9.1), No Patch
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Thu, 29 May 2025 11:03:51 +0000
════════════════════════
⌗ Tags: #Vulnerability #CVSS #cybersecurity #dos #industrial control systems #information leak #MELSEC iQ_F #Mitsubishi Electric #no patch #PLC
Daily CyberSecurity
Industrial Systems at Risk: Critical Mitsubishi MELSEC Flaw (CVSS 9.1), No Patch
A critical Mitsubishi MELSEC iQ-F Series CPU module flaw allows remote DoS and info leak. No software patch available.
44 views
Daily Writeups
⤷ Title: Industrial Control Systems (ICS) and SCADA: Operations, Vulnerabilities, and Cyber Defense…
════════════════════════
𐀪 Author: Steven Juliano
════════════════════════
ⴵ Time: Sat, 07 Jun 2025 06:18:05 GMT
════════════════════════
⌗ Tags: #cybersecurity #industrial #scada #automation #plc
Medium
Industrial Control Systems (ICS) and SCADA: Operations, Vulnerabilities, and Cyber Defense Strategies
Welcome back to the chronicles of my IDN Bootcamp Cyber Security Series. After exploring the malware analysis & investigation in the…
14 views
Daily Writeups
⤷ Title: WAGO Device Manager Vulnerabilities Expose Critical Industrial Infrastructure to Remote Exploits
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Wed, 18 Jun 2025 00:08:42 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #CVE_2025_25264 #CVE_2025_25265 #cybersecurity #ICS #Industrial Security #PLC #security update #Vulnerabilities #WAGO
Daily CyberSecurity
WAGO Device Manager Vulnerabilities Expose Critical Industrial Infrastructure to Remote Exploits
WAGO Device Manager security updates address two vulnerabilities allowing unauthenticated remote access to sensitive system files.
17 views
Daily Writeups
⤷ Title: EV Charging Under Attack: New Vulnerabilities Threaten Vehicles & Grids
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Thu, 10 Jul 2025 10:07:21 +0000
════════════════════════
⌗ Tags: #Vulnerability #CitrineOS #CSMS #cyberattack #cybersecurity #Denial of Service #DoS #electric vehicles #EV charging #IoT #man_in_the_middle #PLC #Powerline Communication #security research #ssh #StEVe
Penetration Testing Tools
EV Charging Under Attack: New Vulnerabilities Threaten Vehicles & Grids
A new study reveals critical cybersecurity flaws in EV charging, exposing vehicles and networks to attacks like electricity theft and system shutdowns.
9 views
Daily Writeups
⤷ Title: Industrial Intrusion CTF (THM) — OT Challenge “Kaboom” Write-up
════════════════════════
𐀪 Author: 0xZeus
════════════════════════
ⴵ Time: Mon, 28 Jul 2025 11:13:18 GMT
════════════════════════
⌗ Tags: #plc #hacking #tryhackme_writeup #ics_security #scada
Medium
Industrial Intrusion CTF (THM) — OT Challenge “Kaboom” Write-up
Hi it me Baddi Mohammed aka (0xZeus)
11 views
Daily Writeups
⤷ Title: CISA Emergency Alert: Critical RCE Flaw (CVSS 10.0) Exposes AutomationDirect PLCs to Unauthenticated Takeover
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Sun, 26 Oct 2025 08:51:12 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #AutomationDirect #CISA #Critical Vulnerability #CVE_2025_61934 #CVSS 10.0 #ICS security #PLC #rce
Daily CyberSecurity
CISA Emergency Alert: Critical RCE Flaw (CVSS 10.0) Exposes AutomationDirect PLCs to Unauthenticated Takeover
CISA warned of 9 flaws in AutomationDirect PLCs. The Critical RCE (CVE-2025-61934, CVSS 10.0) allows unauthenticated file manipulation on a simulator service. Patch to v4.5.0.x immediately.
19 views
Daily Writeups
⤷ Title: NuGet Sabotage: Time-Delayed Logic in 9 Packages Risks Total App Destruction on Hardcoded Dates
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Mon, 10 Nov 2025 00:35:37 +0000
════════════════════════
⌗ Tags: #Malware #Destructive Payload #NuGet #PLC #Ransomware_as_a_Service #Shanhai666 #Sharp7Extend #supply chain attack #Time_Delayed Logic
Daily CyberSecurity
NuGet Sabotage: Time-Delayed Logic in 9 Packages Risks Total App Destruction on Hardcoded Dates
A NuGet supply chain attack injected time-delayed destructive logic into 9 packages. The malware triggers random crashes and silent data corruption on hardcoded future dates, targeting database/PLC applications.
7 views
Daily Writeups
⤷ Title: 2027 Time Bomb: Covert NuGet Packages Target SQL and PLCs with Scheduled Sabotage
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Mon, 10 Nov 2025 02:53:09 +0000
════════════════════════
⌗ Tags: #Malware #.NET #cybersecurity #IndustrialControl #NuGet #PLC #PostgreSQL #sabotage #SQLServer #SupplyChainAttack
Penetration Testing Tools
2027 Time Bomb: Covert NuGet Packages Target SQL and PLCs with Scheduled Sabotage
Nine NuGet packages were found with covert code scheduled to activate in 2027-2028, targeting SQL databases and Siemens PLCs with sudden process terminations.
16 views
Daily Writeups
⤷ Title: How SSenStone Hardens IoT and PLC Edge Security With Server-Side Secretless Authentication
════════════════════════
𐀪 Author: David SEHYEON Baek
════════════════════════
ⴵ Time: Wed, 04 Mar 2026 11:03:15 GMT
════════════════════════
⌗ Tags: #plc #cybersecurity #iot #hacking #cyberattack
Medium
How SSenStone Hardens IoT and PLC Edge Security With Server-Side Secretless Authentication
How SSenStone Hardens IoT and PLC Edge Security With Server-Side Secretless Authentication Solving the IoT Paradox The Internet of Things has become one of the most consequential security …
19 views
Daily Writeups
⤷ Title: Critical Alert: Iranian-Affiliated Actors Target U.S. Infrastructure via Industrial Control Systems
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Wed, 08 Apr 2026 06:21:05 +0000
════════════════════════
⌗ Tags: #Cyber Security #CISA #Critical Infrastructure #CyberAv3ngers #fbi #HMI #ICS security #industrial cybersecurity #Iranian APT #OT Security #PLC Security #Rockwell Automation #SCADA
Daily CyberSecurity
Critical Alert: Iranian-Affiliated Actors Target U.S. Infrastructure via Industrial Control Systems
FBI and CISA warn of Iranian APTs hijacking internet-facing PLCs to disrupt U.S. energy and water systems. Learn the 2026 TTPs and how to defend your OT.
16 views
Daily Writeups
⤷ Title: Targeting the Grid: How Iranian Hackers are Exploiting Exposed U.S. Industrial Controllers
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Mon, 13 Apr 2026 08:36:17 +0000
════════════════════════
⌗ Tags: #Cyber Security #Allen_Bradley #Critical Infrastructure #cybersecurity #EtherNet/IP #ICS Security #Iranian APT #OT Security #PLC Security #Rockwell Automation #SCADA
Penetration Testing Tools
Targeting the Grid: How Iranian Hackers are Exploiting Exposed U.S. Industrial Controllers
State-sponsored Iranian hacking collectives have, in recent months, pivoted toward a singular and highly strategic objective within the
8 views
Daily Writeups
⤷ Title: Critical 9.1 CVSS Flaw in Horner Automation PLCs Invites Industrial Takeovers
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Fri, 17 Apr 2026 13:05:50 +0000
════════════════════════
⌗ Tags: #Vulnerability #brute force attack #Cscape #CVE_2026_6284 #Horner Automation #ICS security #industrial control systems #PLC #SCADA Security #XL4 #XL7
Daily CyberSecurity
Critical 9.1 CVSS Flaw in Horner Automation PLCs Invites Industrial Takeovers
Critical 9.1 CVSS flaw in Horner Automation PLCs allows unauthenticated brute force attacks. Secure your industrial systems—patch XL4, XL7, and Cscape now!
22 views
Daily Writeups
⤷ Title: The Global Surge in Modbus/TCP Probes Targeting Our Physical World
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Fri, 24 Apr 2026 09:18:47 +0000
════════════════════════
⌗ Tags: #Cybercriminals #Cato Networks #Critical Infrastructure #Cyber Reconnaissance #ICS security #industrial control systems #infosec #Manufacturing Security #Modbus #OT Security #PLC #SCADA
Daily CyberSecurity
The Global Surge in Modbus/TCP Probes Targeting Our Physical World
Cato Networks reveals 235,500+ Modbus probes on PLCs across 70 countries. Learn how attackers fingerprint and hijack industrial control systems. Patch now.
18 views
Daily Writeups
⤷ Title: Invisible Hands in the Machine: The Calculated Global Assault on Exposed Industrial Controllers
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Tue, 28 Apr 2026 07:37:56 +0000
════════════════════════
⌗ Tags: #Cybercriminals #Cato Networks #Critical Infrastructure #Cyber Security 2026 #Function 0x03 #ICS Exploitation #Industrial Control Systems #Manufacturing Security #Modbus #OT Security #PLC
Penetration Testing Tools
Invisible Hands in the Machine: The Calculated Global Assault on Exposed Industrial Controllers
Researchers have unearthed a pervasive offensive targeting industrial controllers that had been inadvertently exposed to the public internet.
16 views
Daily Writeups
⤷ Title: Critical-Severity XSS Flaws Uncovered in Siemens SIMATIC S7 Web Servers
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Wed, 13 May 2026 02:30:27 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #CVE_2026_25786 #industrial automation #infosec #Manufacturing Security #OT Security #Patch Alert #PLC Security #Siemens #SIMATIC S7 #TIA Portal #XSS
Daily CyberSecurity
Critical-Severity XSS Flaws Uncovered in Siemens SIMATIC S7 Web Servers
Critical Siemens Alert: 9.3 severity XSS flaws hit SIMATIC S7 PLCs. Attackers can hijack sessions via web interfaces. Update to V3.1.6 or follow mitigations.
14 views
Daily Writeups
⤷ Title: The Iranian PLC Campaign Shows Why Industrial Identity Has Become the Next OT Battleground
════════════════════════
𐀪 Author: David SEHYEON Baek
════════════════════════
ⴵ Time: Sun, 26 Jul 2026 04:29:10 GMT
════════════════════════
⌗ Tags: #hacking #plc #authentication #scada_cyber_security #cybersecurity
Medium
The Iranian PLC Campaign Shows Why Industrial Identity Has Become the Next OT Battleground
The latest joint advisory from the FBI, CISA, NSA, EPA, the Department of Energy, the Department of the Treasury, and U.S. Cyber Command’s…
23 views
Daily Writeups
⤷ Title: Iranian Hackers Modify PLC Logic in US Infrastructure Attacks
════════════════════════
𐀪 Author: Nam Phong
════════════════════════
ⴵ Time: Mon, 27 Jul 2026 14:09:38 +0000
════════════════════════
⌗ Tags: #Cyber Security #CISA Advisory #Critical Infrastructure #ICS Security #Iranian hackers #PLC Hacking
Information Security News
Iranian Hackers Modify PLC Logic in US Infrastructure Attacks
Covert Sabotage of Critical Infrastructure Iranian threat actors have developed sophisticated techniques to covertly manipulate programmable logic controllers (PLCs), ensuring that human operators…
11 views
Daily Writeups
⤷ Title: MicroLogix 1400 Attacks Lock Operators Out of Water Utility PLCs
════════════════════════
𐀪 Author: Do Son
════════════════════════
ⴵ Time: Fri, 31 Jul 2026 02:15:19 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #ICS #MicroLogix 1400 #OT Security #PLC Security #Rockwell Automation #Water Utilities
Daily CyberSecurity
MicroLogix 1400 Attacks Lock Operators Out of Water Utility PLCs
TL;DR Attackers are hijacking internet-exposed MicroLogix 1400 controllers at U.S. water utilities. They change device IP addresses and set unknown passwords, so operators lose their view of equip…
5 views