Daily Writeups
@Daily_Writeups
3.56K subscribers
2 photos
130K links
Daily Bug Bounty / Cybersecurity Writeups
Source Code : https://github.com/Spix0r/writeup-miner
Download Telegram
About
Blog
Apps
Platform
Join
Daily Writeups
3.56K subscribers
Daily Writeups
⤷ Title: The Attribution Dilemma: Inside Palo Alto Networks’ “Shadow Operations” Report and the Unnamed Giant
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Mon, 16 Feb 2026 16:06:26 +0000
════════════════════════
⌗ Tags: #Cyber Security #attribution #China cyber threat #Cyber Espionage #global infrastructure security #National Security #Palo Alto Networks #Shadow Operations #State_Sponsored Hacking #Tech News 2026 #TGR_STA_1030 #Unit 42
Penetration Testing Tools
The Attribution Dilemma: Inside Palo Alto Networks’ "Shadow Operations" Report and the Unnamed Giant
Palo Alto Networks has conspicuously tempered the rhetoric within its latest dossier regarding an extensive cyber-espionage campaign, eschewing
20 views
Daily Writeups
⤷ Title: “Dormant” Backdoors: Ivanti EPMM Zero-Days Exploited to Plant Long-Term Spies
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Wed, 18 Feb 2026 00:07:38 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #Bash Injection #CVE_2026_1281 #CVE_2026_1340 #Ivanti EPMM #mobile security #Nezha Agent #Patch Alert #Remote Code Execution #Unit 42 #zero_day
Daily CyberSecurity
"Dormant" Backdoors: Ivanti EPMM Zero-Days Exploited to Plant Long-Term Spies
Ivanti EPMM under attack via zero-days CVE-2026-1281 & 1340. Hackers use bash scripts to plant dormant backdoors. Patch immediately.
18 views
Daily Writeups
⤷ Title: Hackers Exploit Critical BeyondTrust Flaw to Deploy VShell and SparkRAT Across Multiple Sectors
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Mon, 23 Feb 2026 00:53:28 +0000
════════════════════════
⌗ Tags: #Malware #Vulnerability Report #Active Exploitation #BeyondTrust #CVE_2026_1731 #Cyber Security #infosec #Palo Alto Networks #rce #Remote Code Execution #threat intelligence #Unit 42 #zero_day
Daily CyberSecurity
Hackers Exploit Critical BeyondTrust Flaw to Deploy VShell and SparkRAT Across Multiple Sectors
Unit 42 warns of active attacks on critical BeyondTrust flaw CVE-2026-1731. Hackers bypass auth for RCE and data theft. Patch self-hosted instances now.
20 views
Daily Writeups
⤷ Title: Edge Fatigue: How Two 9.8 Zero-Days are Dismantling Ivanti’s Mobile Management Fleet
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Mon, 23 Feb 2026 03:14:32 +0000
════════════════════════
⌗ Tags: #Vulnerability #CISA KEV #CVE_2026_1281 #CVE_2026_1340 #Cybersecurity 2026 #EPMM #Ivanti #Mobile Device Management #Palo Alto Networks #RCE #Unit 42 #zero_day
Penetration Testing Tools
Edge Fatigue: How Two 9.8 Zero-Days are Dismantling Ivanti’s Mobile Management Fleet
Two nascent zero-day vulnerabilities within the Ivanti mobile device management ecosystem are currently being exploited in live offensives,
14 views
Daily Writeups
⤷ Title: Cyber Escalation: Multi-Vector Attacks Surge Following “Operation Epic Fury”
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Tue, 03 Mar 2026 08:18:19 +0000
════════════════════════
⌗ Tags: #Cyber Security #Cyber Warfare #cybersecurity #Hacktivism #infosec #Iran Cyber Threats #Iron Dome Hack #Operation Epic Fury #Operation Roaring Lion #threat intelligence #Unit 42
Daily CyberSecurity
Cyber Escalation: Multi-Vector Attacks Surge Following "Operation Epic Fury"
Unit 42 details the cyber fallout of Operation Epic Fury. Despite internet blackouts, autonomous hacktivists claim breaches of Israeli defense networks.
27 views
Daily Writeups
⤷ Title: Digital Conflagration: How “Operation Epic Fury” Triggered a Global Hacktivist Surge Against Israel and its Allies
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Thu, 05 Mar 2026 07:30:30 +0000
════════════════════════
⌗ Tags: #Cyber Security #DDoS attacks #Handala Hack #Iran cyber war 2026 #Israeli energy breach #Operation Epic Fury #Operation Roaring Lion #RedAlert phishing #SCADA hacking #Tech News 2026 #Unit 42
Penetration Testing Tools
Digital Conflagration: How "Operation Epic Fury" Triggered a Global Hacktivist Surge Against Israel and its Allies
The joint military offensive mounted by the United States and Israel against Iran has precipitously inflamed hostilities within
19 views
Daily Writeups
⤷ Title: Digital Decapitation? Israel Targets the IRGC’s “Central Nervous System” in Tehran Kinetic Strike
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Sat, 07 Mar 2026 02:21:27 +0000
════════════════════════
⌗ Tags: #Cyber Security #Ayatollah Ali Khamenei #Check Point #cyber warfare #electronic countermeasures #Handala #infrastructure sabotage #IRGC #Israel Defense Forces #Tech News 2026 #Tehran strike #Unit 42
Penetration Testing Tools
Digital Decapitation? Israel Targets the IRGC’s "Central Nervous System" in Tehran Kinetic Strike
Israel has heralded a formidable strike upon facilities situated within Tehran, which the Israeli military asserts were instrumental
26 views
Daily Writeups
⤷ Title: From Theory to Threat: Hackers Are Now Weaponizing Web Pages to Brainwash AI Agents
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Mon, 09 Mar 2026 00:07:08 +0000
════════════════════════
⌗ Tags: #Cybercriminals #Ad Fraud #AI security #cybersecurity #IDPI #Indirect Prompt Injection #infosec #machine_learning #Prompt injection #threat intelligence #Unit 42
Daily CyberSecurity
From Theory to Threat: Hackers Are Now Weaponizing Web Pages to Brainwash AI Agents
Unit 42 reveals the first real-world cases of Indirect Prompt Injection (IDPI), where hackers weaponize website content to bypass AI security filters.
15 views
Daily Writeups
⤷ Title: CL-UNK-1068: The Stealthy Chinese Threat Actor Haunting Asian Infrastructure
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Wed, 11 Mar 2026 00:08:39 +0000
════════════════════════
⌗ Tags: #Cybercriminals #Chinese APT #CL_UNK_1068 #cyber_espionage #cybersecurity #data exfiltration #GodZilla Web Shell #infosec #LOLBins #threat intelligence #Unit 42
Daily CyberSecurity
CL-UNK-1068: The Stealthy Chinese Threat Actor Haunting Asian Infrastructure
Unit 42 uncovers CL-UNK-1068, a Chinese APT targeting Asian critical infrastructure using stealthy web shells, LOLBINs, and screen-printed exfiltration.
20 views
Daily Writeups
⤷ Title: Unit 42 Unmasks CL-STA-1087’s Years-Long Cyber Espionage Against Asian Militaries
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Fri, 13 Mar 2026 01:54:05 +0000
════════════════════════
⌗ Tags: #Cyber Security #Malware #AppleChris Backdoor #APT #CL_STA_1087 #cyber_espionage #cybersecurity #infosec #MemFun Backdoor #State_Sponsored Threat #threat intelligence #Unit 42
Daily CyberSecurity
Unit 42 Unmasks CL-STA-1087's Years-Long Cyber Espionage Against Asian Militaries
Unit 42 exposes CL-STA-1087, a suspected Chinese state-sponsored cyber espionage group using custom backdoors to infiltrate Asian military networks.
21 views
Daily Writeups
⤷ Title: Hijacked Accounts and AI Code: The Deadly New Playbook of Iranian APT ‘Boggy Serpens’
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Fri, 20 Mar 2026 01:00:11 +0000
════════════════════════
⌗ Tags: #Cybercriminals #AI_Generated Code #Boggy Serpens #Cyberespionage #cybersecurity #Hijacked Accounts #Iranian APT #phishing #Rust malware #threat intelligence #Unit 42
Daily CyberSecurity
Hijacked Accounts and AI Code: The Deadly New Playbook of Iranian APT 'Boggy Serpens'
Unit 42 reveals Iranian APT Boggy Serpens is weaponizing hijacked accounts, AI-generated code, and Rust malware to infiltrate critical infrastructure.
16 views
Daily Writeups
⤷ Title: Double Agents in the Cloud: Unit 42 Unmasks Critical AI Vulnerabilities in Google Vertex AI
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Mon, 06 Apr 2026 08:16:07 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #AI security #data exfiltration #Double Agents #GCP Security #Google Cloud Platform #infosec #P4SA #Python Pickle #rce #Service Accounts #Unit 42 #Vertex AI
Daily CyberSecurity
Double Agents in the Cloud: Unit 42 Unmasks Critical AI Vulnerabilities in Google Vertex AI
Unit 42 reveals how GCP Vertex AI agents can become "double agents," exfiltrating data and accessing Google’s internal code. Learn why BYOSA is essential.
42 views
Daily Writeups
⤷ Title: State-Sponsored Actors Weaponize Critical PAN-OS Zero-Day for Root
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Thu, 07 May 2026 01:55:47 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #buffer overflow #captive portal #CL_STA_1132 #CVE_2026_0300 #cyber_espionage #Edge Security #infosec #Palo Alto Networks #PAN_OS #Root RCE #Unit 42 #zero_day
Daily CyberSecurity
State-Sponsored Actors Weaponize Critical PAN-OS Zero-Day for Root
Palo Alto Networks warns of active root RCE (CVE-2026-0300) in PAN-OS. State-sponsored cluster CL-STA-1132 is targeting edge assets. Patch and restrict now!
10 views
Daily Writeups
⤷ Title: The Zero-Detection Shadow: Unit 42 Exposes Advanced Gremlin Stealer Hijacking Live Browser WebSockets
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Wed, 20 May 2026 07:42:37 +0000
════════════════════════
⌗ Tags: #Malware #.NET Resource Obfuscation #Chromium Identity Theft #Code Virtualization Bytecode #Cookie Protection Bypass #Cryptojacking Clipboard Hijacker #Gremlin Stealer Malware #Unit 42 Palo Alto Networks #WebSocket Session Hijacking #XOR Encoded Payload #Zero Detection C2 Infrastructure
Information Security News
The Zero-Detection Shadow: Unit 42 Exposes Advanced Gremlin Stealer Hijacking Live Browser WebSockets - Information Security News
The exfiltration of administrative credentials and volatile session tokens increasingly manifests not as a rudimentary brute-force incursion, but as a meticulously obfuscated mechanism engineered to maintain absolute silence until the definitive moment of…
11 views
Daily Writeups
⤷ Title: Bypassing MFA: Gremlin Stealer Evolves into Advanced Memory-Resident Session Hijacker
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Thu, 21 May 2026 07:26:35 +0000
════════════════════════
⌗ Tags: #Malware #Chromium Browsers #Clipboard Hijacker #Control Flow Flattening #Cyber Security #Discord Token Stealer #Gremlin Stealer #infosec #Infostealer #MFA Bypass #Session Hijacking #Unit 42
Daily CyberSecurity
Bypassing MFA: Gremlin Stealer Evolves into Advanced Memory-Resident Session Hijacker
Unit 42 exposes the new Gremlin stealer. It uses memory-resident techniques to hijack active browser session tokens and completely bypass MFA.
17 views
Daily Writeups
⤷ Title: New Screening Serpens Cyberattacks Target Global Technology Professionals
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Wed, 27 May 2026 12:54:46 +0000
════════════════════════
⌗ Tags: #Cybercriminals #AppDomain Manager Hijacking #APT group #cyber_espionage #Malware Variants #Screening Serpens #threat intelligence #Unit 42
Daily CyberSecurity
New Screening Serpens Cyberattacks Target Global Technology Professionals
Learn about the latest Screening Serpens cyberattacks exposed by Unit 42. Discover their new RAT variants and advanced defensive evasion tactics.
6 views
Daily Writeups
⤷ Title: Malicious OpenClaw Skills on ClawHub Deliver Infostealers and Crypto Fraud
════════════════════════
𐀪 Author: Do Son
════════════════════════
ⴵ Time: Wed, 01 Jul 2026 07:01:10 +0000
════════════════════════
⌗ Tags: #Malware #agentic threats #AI supply chain #AMOS #ClawHavoc #ClawHub #Infostealer #malicious skills #OpenClaw #Palo Alto Networks #Unit 42
Daily CyberSecurity
Malicious OpenClaw Skills on ClawHub Deliver Infostealers and Crypto Fraud
At a glance Field Detail Actor Unattributed skill publishers; accounts banned by OpenClaw Activity Malicious AI agent skills: infostealer delivery, scanner evasion, agentic financial fraud Targets…
17 views
Daily Writeups
⤷ Title: Phantom Squatting Attacks Weaponize AI Hallucinated Domains, Unit 42 Warns
════════════════════════
𐀪 Author: Do Son
════════════════════════
ⴵ Time: Wed, 08 Jul 2026 08:13:32 +0000
════════════════════════
⌗ Tags: #Cybercriminals #AI security #LLM Hallucination #Phantom Squatting #phishing #Unit 42
Daily CyberSecurity
Phantom Squatting Attacks Weaponize AI Hallucinated Domains, Unit 42 Warns
At a glance Details Activity type Phantom squatting: registering AI hallucinated domains for phishing and malware Actors Multiple suspected threat actors, including the “Montana Empire&#8221…
7 views
Daily Writeups
⤷ Title: TuxBot v3 Evolution — an IoT Botnet Built With LLM Help
════════════════════════
𐀪 Author: Do Son
════════════════════════
ⴵ Time: Tue, 21 Jul 2026 08:11:55 +0000
════════════════════════
⌗ Tags: #Malware #Akiru #ddos #IoT botnet #Keksec #LLM malware #TuxBot #Unit 42
Daily CyberSecurity
TuxBot v3 Evolution — an IoT Botnet Built With LLM Help
At a glance Malware family TuxBot v3 Evolution (also tracked as Akiru) Threat actor Suspected link to the Keksec ecosystem; no confirmed named actor Target / victims IoT devices across 30+ device …
11 views
Daily Writeups
⤷ Title: Chinese Threat Actor Runs Autonomous AI Cyberattacks Using DeepSeek
════════════════════════
𐀪 Author: Do Son
════════════════════════
ⴵ Time: Wed, 05 Aug 2026 06:30:55 +0000
════════════════════════
⌗ Tags: #Cybercriminals #AI security #Autonomous AI Cyberattack #Chinese Threat Actor #DeepSeek #Hermes Agent #Palo Alto Networks #threat intelligence #Unit 42
Daily CyberSecurity
Chinese Threat Actor Runs Autonomous AI Cyberattacks Using DeepSeek
At a glance Field Detail Actor Chinese-speaking operator, aliases knaithe and KnYuan Activity AI-enabled autonomous hacking campaign Targets Internet-exposed infrastructure, Chinese systems, and a…
11 views