Daily Writeups
@Daily_Writeups
3.56K subscribers
2 photos
130K links
Daily Bug Bounty / Cybersecurity Writeups
Source Code : https://github.com/Spix0r/writeup-miner
Download Telegram
About
Blog
Apps
Platform
Join
Daily Writeups
3.56K subscribers
Daily Writeups
⤷ Title: CISA Emergency Alert: Commercial Spyware Exploiting Zero-Click and Malicious QR Codes to Hijack Messaging Apps
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Tue, 25 Nov 2025 02:42:03 +0000
════════════════════════
⌗ Tags: #Malware #CISA #commercial spyware #messaging app #Pegasus #QR code phishing #Signal #WhatsApp #Zero_Click
Daily CyberSecurity
CISA Emergency Alert: Commercial Spyware Exploiting Zero-Click and Malicious QR Codes to Hijack Messaging Apps
CISA issued an urgent alert: Commercial spyware is actively exploiting zero-click flaws and malicious QR codes to hijack messaging apps (Signal, WhatsApp) for espionage against government and civil society targets.
110 views
Daily Writeups
⤷ Title: Zero-Click Threat: New Attacks Turn AI Browsers into Google Drive Wipers
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Mon, 08 Dec 2025 04:27:00 +0000
════════════════════════
⌗ Tags: #Malware #AI browser #data loss #Google Drive Wiper #HashJack #OAuth Security #Perplexity Comet #Prompt Injection #Zero_Click Attack
Penetration Testing Tools
Zero-Click Threat: New Attacks Turn AI Browsers into Google Drive Wipers
Researchers at Striker STAR Labs have detailed a new attack against agent-based browsers that can turn an ordinary
12 views
Daily Writeups
⤷ Title: The Invisible Eye: How the New ‘Predator’ Spyware Turns Mobile Ads Into Surveillance Weapons
════════════════════════
𐀪 Author: Enes Karataş
════════════════════════
ⴵ Time: Mon, 08 Dec 2025 14:51:16 GMT
════════════════════════
⌗ Tags: #hackad #zero_click_attack #aladdin #intellexa #hacking
Medium
The Invisible Eye: How the New ‘Predator’ Spyware Turns Mobile Ads Into Surveillance Weapons
You didn’t click anything, but the hack has already begun. Inside the new ‘Aladdin’ exploit that turns the ads on your screen into…
10 views
Daily Writeups
⤷ Title: Hackers Breaking In Without a Click. How? They Are Using This..
════════════════════════
𐀪 Author: Redfox Security
════════════════════════
ⴵ Time: Mon, 15 Dec 2025 08:53:32 GMT
════════════════════════
⌗ Tags: #information_security #mobile_security #zero_click #cybersecurity #hacking
Medium
Hackers Breaking In Without a Click. How? They Are Using This..
For years, cybersecurity awareness campaigns have warned people not to click suspicious links, download unknown attachments, or visit shady…
9 views
Daily Writeups
⤷ Title: The Typosquat Trap: Why 90% of Parked Domains Now Redirect to Malware
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Tue, 23 Dec 2025 03:17:29 +0000
════════════════════════
⌗ Tags: #Malware #Cyber Security 2025 #David Bransdon #DNS Security #Gmai[.]com #Infoblox #Malvertising #Parked Domains #Residential IP #Scotaibank #Typosquatting #Zero_Click
Information Security News
The Typosquat Trap: Why 90% of Parked Domains Now Redirect to Malware
Direct navigation—when a user manually types a website address into the browser—has become markedly more dangerous. Researchers at Infoblox have found that the vast majority of “parked” domains ar…
28 views
Daily Writeups
⤷ Title: Zero-Click Hijack: The PrestaShop Checkout Flaw That Turns Emails Into Full Account Access, PoC Publishes
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Mon, 05 Jan 2026 00:01:54 +0000
════════════════════════
⌗ Tags: #Vulnerability #Account Takeover #Ananda Dhakal #CVE_2025_61922 #e_commerce security #paypal #PII Leak #PrestaShop #PS Checkout #Session Hijacking #Web Vulnerability #Zero_Click
Daily CyberSecurity
Zero-Click Hijack: The PrestaShop Checkout Flaw That Turns Emails Into Full Account Access, PoC Publishes
PrestaShop patches a 9.1 critical flaw (CVE-2025-61922) in the Checkout module. Attackers can hijack accounts via email. PoC available.
22 views
Daily Writeups
⤷ Title: The Pixel 9 Zero-Click Exploit Chain That Breaks the Kernel
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Mon, 19 Jan 2026 10:19:20 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #Android security #BigWave Driver #CVE_2025_36934 #CVE_2025_54957 #Dolby UDC #Google Pixel 9 #January 2026 Security Update #Kernel Hack #Project Zero #zero_click exploit
Daily CyberSecurity
The Pixel 9 Zero-Click Exploit Chain That Breaks the Kernel
Google Project Zero uncovers a zero-click exploit on Pixel 9 in Jan 2026. Hackers can hijack the kernel via silent audio messages. Patch now!
15 views
Daily Writeups
⤷ Title: Root Access for All: Critical Auth Bypass Hits Cisco Firewall Management Center
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Thu, 05 Mar 2026 02:21:59 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #Cisco Secure FMC #CVE_2026_20079 #CVSS 10.0 #cybersecurity #firewall security #infosec #Patch Alert #root access #Vulnerability #zero_click exploit
Daily CyberSecurity
Root Access for All: Critical Auth Bypass Hits Cisco Firewall Management Center
A critical 10.0 CVSS zero-click flaw (CVE-2026-20079) in Cisco Secure FMC gives unauthenticated attackers root access. Patch your systems immediately.
14 views
Daily Writeups
⤷ Title: The “Phantom” Character: How a Single Email Can Seize Full Control of Your FreeScout Helpdesk
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Fri, 06 Mar 2026 07:11:13 +0000
════════════════════════
⌗ Tags: #Vulnerability #AllowOverride #apache #CVE_2026_28289 #FreeScout #helpdesk security #Laravel #OX Research #PHP #RCE #Tech News 2026 #zero_click exploit #zero_width space
Penetration Testing Tools
The "Phantom" Character: How a Single Email Can Seize Full Control of Your FreeScout Helpdesk
In a recent dossier, OX Research delineated how a mundane email dispatched to a corporate address can precipitate
9 views
Daily Writeups
⤷ Title: Publicly Disclosed: Bishop Fox Reveals Critical Pre-Auth SQL Injection in FortiClient EMS
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Tue, 17 Mar 2026 14:00:19 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #Bishop Fox #CVE_2026_21643 #cybersecurity #database security #FortiClient EMS #infosec #sql injection #threat intelligence #vulnerability disclosure #zero_click exploit
Daily CyberSecurity
Publicly Disclosed: Bishop Fox Reveals Critical Pre-Auth SQL Injection in FortiClient EMS
Bishop Fox publicly disclosed details of a critical 9.1 CVSS zero-click SQL injection in FortiClient EMS (CVE-2026-21643). Patch to 7.4.5 immediately.
15 views
Daily Writeups
⤷ Title: The Invisible Breach: ‘Operation GhostMail’ Uses Zero-Click XSS to Hijack Ukrainian Webmail
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Fri, 20 Mar 2026 09:11:42 +0000
════════════════════════
⌗ Tags: #Cyber Security #APT28 #CVE_2025_66376 #Cyberespionage #cybersecurity #infosec #Operation GhostMail #Seqrite Labs #threat intelligence #Zero_Click XSS #Zimbra Vulnerability
Daily CyberSecurity
The Invisible Breach: 'Operation GhostMail' Uses Zero-Click XSS to Hijack Ukrainian Webmail
Seqrite Labs uncovers Operation GhostMail, an APT28-linked campaign using a zero-click XSS flaw in Zimbra to silently hijack Ukrainian government webmail.
23 views
Daily Writeups
⤷ Title: Apple Resurrects iOS 18 Security to Stop the “DarkSword” Outbreak
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Thu, 02 Apr 2026 07:52:46 +0000
════════════════════════
⌗ Tags: #Apple #Vulnerability #Cybersecurity 2026 #DarkSword #GhostBlade #GhostKnife #GhostSaber #iOS 18.7.7 #iOS 26 #iPadOS Update #iPhone security #Malware Defense #Zero_Click
Penetration Testing Tools
Apple Resurrects iOS 18 Security to Stop the "DarkSword" Outbreak
Apple has, for the first time in a considerable epoch, yielded to the entreaties of its patrons by
11 views
Daily Writeups
⤷ Title: The Zero-Click Vulnerability: Akamai Uncovers Incomplete Patch for APT28 Exploit
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Mon, 27 Apr 2026 14:54:39 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #Akamai #APT28 #CVE_2026_32202 #Fancy Bear #infosec #LNK File #NTLM hash theft #NTLM Relay #smb #Windows Security #Zero_Click
Daily CyberSecurity
The Zero-Click Vulnerability: Akamai Uncovers Incomplete Patch for APT28 Exploit
Akamai uncovers CVE-2026-32202: A zero-click LNK flaw used by APT28 to steal Windows NTLM hashes silently. No user interaction required. Patch alert!
30 views
Daily Writeups
⤷ Title: The Zero-Click Ghost: How an Incomplete Patch Left Windows Open to Fancy Bear’s Credential Theft
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Mon, 27 Apr 2026 15:15:59 +0000
════════════════════════
⌗ Tags: #Vulnerability #Akamai #APT28 #Credential Theft #CVE_2026_21510 #CVE_2026_32202 #Fancy Bear #InfoSec 2026 #NTLM Coercion #Windows Shell #Zero_Click Vulnerability
Penetration Testing Tools
The Zero-Click Ghost: How an Incomplete Patch Left Windows Open to Fancy Bear’s Credential Theft
An oversight within a security remediation has inadvertently carved a novel path for exploitation. While the developers successfully
15 views
Daily Writeups
⤷ Title: Critical Zero-Click Android Flaw Grants Remote Shell Access Without Interaction
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Tue, 05 May 2026 01:33:52 +0000
════════════════════════
⌗ Tags: #Android #Vulnerability Report #android #Android 16 #CVE_2026_0073 #cybersecurity #Google Security Bulletin #infosec #Project Mainline #rce #Remote Code Execution #Wireless ADB #Zero_Click
Daily CyberSecurity
Critical Zero-Click Android Flaw Grants Remote Shell Access Without Interaction
Google warns of CVE-2026-0073: a critical zero-click Android vulnerability allowing remote code execution via Wireless ADB. Patch to May 2026 level now!
19 views
Daily Writeups
⤷ Title: Reddit in the Spotlight: Google’s Search Pivot Puts “First-Hand Accounts” at the Core of AI Overviews
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Fri, 08 May 2026 08:04:49 +0000
════════════════════════
⌗ Tags: #Technology #AI Overviews #content licensing #Digital Marketing 2026 #Expert Advice #First_Hand Accounts #Google AI Mode #google search #Reddit #Search Engine Updates #SEO Strategy #Zero_Click Search
Daily CyberSecurity
Reddit in the Spotlight: Google’s Search Pivot Puts "First-Hand Accounts" at the Core of AI Overviews
Google’s AI Overviews shift focus to first-hand accounts from Reddit and social media. Discover how "Expert Advice" and inline linking aim to reclaim user trust.
16 views
Daily Writeups
⤷ Title: Zero-Click Shell: Public Exploit and PoC Disclosed for Android’s Critical ADB Auth Bypass (CVE-2026-0073)
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Mon, 11 May 2026 01:00:27 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #ADB #Android security #Auth Bypass #BARGHEST #CVE_2026_0073 #Exploit #infosec #mobile security #PoC #Wireless Debugging #Zero_Click
Daily CyberSecurity
Zero-Click Shell: Public Exploit and PoC Disclosed for Android’s Critical ADB Auth Bypass (CVE-2026-0073)
A critical vulnerability existing within the core of Android’s developer tools has been exposed, revealing a zero-click avenue for attackers to silently hijack mobile devices over Wi-Fi. Det…
16 views
Daily Writeups
⤷ Title: Zero-Click pretalx XSS Flaw Lets Hackers Hijack Conference Organizer Accounts
════════════════════════
𐀪 Author: Deeba Ahmed
════════════════════════
ⴵ Time: Mon, 01 Jun 2026 12:54:19 +0000
════════════════════════
⌗ Tags: #Security #Cybersecurity #javascript #Novee Security #pretalx #Vulnerability #XSS #Zero Click
Hackread
Zero-Click pretalx XSS Flaw Lets Hackers Hijack Conference Organizer Accounts
pretalx XSS flaw lets attackers hijack conference organizer accounts, steal sessions, auto-accept talks, and demote admins. Patched in v2026.1.0.
23 views
Daily Writeups
⤷ Title: Shadow Infiltration: Google Discloses Critical Zero-Click Android Flaw
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Thu, 04 Jun 2026 03:44:58 +0000
════════════════════════
⌗ Tags: #Android #Vulnerability #Android Framework core vulnerability #AOSP exploit mitigation #CVE_2025_48595 Android zero day #June 2026 security bulletin #mobile device fleet security #zero click privilege escalation
Information Security News
CVE-2025-48595 Android Zero Day: June 2026 Patches
Analyze the critical CVE-2025-48595 Android zero day flaw. Learn how this zero-click privilege escalation bug affects core devices and how to fix it.
17 views
Daily Writeups
⤷ Title: Roundcube 1.7.2 Patches Zero-Click Stored XSS CVE-2026-54433
════════════════════════
𐀪 Author: Do Son
════════════════════════
ⴵ Time: Thu, 09 Jul 2026 15:00:45 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #CVE_2026_54432 #CVE_2026_54433 #Roundcube #Roundcube Webmail #ssrf #Stored XSS #Webmail Security #Zero_Click XSS
Daily CyberSecurity
Roundcube 1.7.2 Patches Zero-Click Stored XSS CVE-2026-54433
TL;DR Roundcube shipped versions 1.7.2 and 1.6.17 to fix six security bugs. The headline flaw is a Roundcube zero-click XSS, tracked as CVE-2026-54433, in plain-text message rendering. The update …
14 views