Daily Writeups
@Daily_Writeups
3.56K subscribers
2 photos
130K links
Daily Bug Bounty / Cybersecurity Writeups
Source Code : https://github.com/Spix0r/writeup-miner
Download Telegram
About
Blog
Apps
Platform
Join
Daily Writeups
3.56K subscribers
Daily Writeups
⤷ Title: “ICS/SCADA: Jantung Otomatisasi Industri dan Ancaman Siber yang Mengintai”
════════════════════════
𐀪 Author: Fakihabdulwahab
════════════════════════
ⴵ Time: Thu, 05 Jun 2025 10:12:35 GMT
════════════════════════
⌗ Tags: #scada #cybersecurity #cyber_security_awareness #control_system #otomasi
Medium
“ICS/SCADA: Jantung Otomatisasi Industri dan Ancaman Siber yang Mengintai”
Di balik operasi industri modern seperti pembangkit listrik, kilang minyak, dan sistem distribusi air, terdapat sistem kontrol yang dikenal…
17 views
Daily Writeups
⤷ Title: Mengenal ICS/SCADA dan Ancaman Siber yang Mengintai Infrastruktur Kritis
════════════════════════
𐀪 Author: DhiyaaSheva
════════════════════════
ⴵ Time: Sat, 07 Jun 2025 05:16:25 GMT
════════════════════════
⌗ Tags: #cybersecurity #scada #control_system #cyberattack #cyber_security_awareness
Medium
Mengenal ICS/SCADA dan Ancaman Siber yang Mengintai Infrastruktur Kritis
Pendahuluan — Dunia di Balik Operasional Industri Modern
20 views
Daily Writeups
⤷ Title: SLOW#TEMPEST: Advanced Obfuscation Evades Static Analysis With CFG & Indirect Calls
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Mon, 14 Jul 2025 00:36:35 +0000
════════════════════════
⌗ Tags: #Malware #anti_analysis #CFG #Control Flow Graph #cybersecurity #DLL side_loading #malware #Obfuscation #Sandbox Evasion #SLOW#TEMPEST #threat intelligence #Unit 42
Daily CyberSecurity
SLOW#TEMPEST: Advanced Obfuscation Evades Static Analysis With CFG & Indirect Calls
Unit 42 exposes SLOW#TEMPEST, a new malware variant using advanced CFG obfuscation and indirect function calls to evade static analysis, making it nearly impossible to detect.
16 views
Daily Writeups
⤷ Title: Bug Bounty: Broken Access Control — When Hackers Walk Right In
════════════════════════
𐀪 Author: Rajkumar Kumawat
════════════════════════
ⴵ Time: Mon, 18 Aug 2025 15:21:55 GMT
════════════════════════
⌗ Tags: #hacking #bug_bounty #broken_access_control #life_hacking #control
Medium
Bug Bounty: Broken Access Control — When Hackers Walk Right In
🔍 Introduction
21 views
Daily Writeups
⤷ Title: Beyond Encryption: Cyber Security Details
════════════════════════
𐀪 Author: Cyber Security Research
════════════════════════
ⴵ Time: Fri, 12 Sep 2025 13:17:00 GMT
════════════════════════
⌗ Tags: #advanced #control #defense #infosec #cyber_sec
Medium
Beyond Encryption: Cyber Security Details
Modern digital asset protection demands a comprehensive strategy, extending far beyond the fundamental role of data encryption, to build…
18 views
Daily Writeups
⤷ Title: Raspberry Pi OS Trixie Released: Solves the Year 2038 Problem and Unveils New Control Centre
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Mon, 06 Oct 2025 02:23:48 +0000
════════════════════════
⌗ Tags: #Linux #Control Centre #Debian 13 #OS Update #Raspberry Pi OS #Single Board Computer #Trixie #Year 2038
Penetration Testing Tools
Raspberry Pi OS Trixie Released: Solves the Year 2038 Problem and Unveils New Control Centre
Raspberry Pi OS Trixie, based on Debian 13, is released. It solves the Year 2038 problem with 64-bit time, introduces a unified Control Centre, and features a refreshed UI.
8 views
Daily Writeups
⤷ Title: Cybersecurity Risk Management: A Comprehensive Guide
════════════════════════
𐀪 Author: Cyber Security Research
════════════════════════
ⴵ Time: Fri, 10 Oct 2025 09:36:16 GMT
════════════════════════
⌗ Tags: #strategy #cyber_sec #control #infosec #risk_mgmt
Medium
Cybersecurity Risk Management: A Comprehensive Guide
Mastering cybersecurity risk management is crucial for protecting digital assets. This comprehensive guide covers threat identification…
18 views
Daily Writeups
⤷ Title: CISA KEV Alert: Two Critical Flaws Under Active Exploitation, Including Gladinet LFI/RCE and CWP Admin Takeover
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Wed, 05 Nov 2025 00:37:15 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #Active Exploitation #CISA KEV #Control Web Panel #CVE_2025_11371 #Gladinet #local file inclusion #rce #Triofox
Daily CyberSecurity
CISA KEV Alert: Two Critical Flaws Under Active Exploitation, Including Gladinet LFI/RCE and CWP Admin Takeover
CISA added two critical, actively exploited flaws to its KEV Catalog: Gladinet LFI (CVE-2025-11371) risks RCE via machine key theft, and CWP RCE (CVE-2025-48703) allows unauthenticated admin takeover.
17 views
Daily Writeups
⤷ Title: China’s APT24 Launches Stealth BADAUDIO Malware, Hitting 1,000+ Domains via Taiwanese Supply Chain Hack
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Mon, 24 Nov 2025 00:36:57 +0000
════════════════════════
⌗ Tags: #Cyber Security #Malware #APT24 #BADAUDIO #China APT #Control Flow Flattening #cyber_espionage #supply chain attack #Taiwan
Daily CyberSecurity
China’s APT24 Launches Stealth BADAUDIO Malware, Hitting 1,000+ Domains via Taiwanese Supply Chain Hack
Google exposed APT24's stealth BADAUDIO C++ downloader. The three-year campaign includes a supply chain hack hitting 1,000+ domains, using control flow flattening and AES-encrypted cookies for C2.
32 views
Daily Writeups
⤷ Title: Control Drift: Why Your SOC 2 Compliance Can’t Keep Up With AI Written Code
════════════════════════
𐀪 Author: Jost Faganel
════════════════════════
ⴵ Time: Tue, 17 Mar 2026 07:43:18 GMT
════════════════════════
⌗ Tags: #ai_generated_code #control_drift #application_security #sast #soc_2_compliance
Medium
Control Drift: Why Your SOC 2 Compliance Can’t Keep Up With AI Written Code
I’ve been thinking about compliance lately. A lot. Not in the way most people think about it — not the annual audit, not the checklist, not…
18 views
Daily Writeups
⤷ Title: One Username to Rule Them All: The Persistent RCE Shadow Haunting Control Web Panel
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Mon, 06 Apr 2026 10:19:49 +0000
════════════════════════
⌗ Tags: #Vulnerability #AlmaLinux #centos #Control Web Panel #CVE_2025_48703 #CVE_2025_70951 #CWP #Fenrisk #Linux Hosting #RCE #remote code execution #Rocky Linux #Server Security
Penetration Testing Tools
One Username to Rule Them All: The Persistent RCE Shadow Haunting Control Web Panel
A profound architectural frailty has been unearthed within a ubiquitous server management console, permitting an adversary to usurp
21 views
Daily Writeups
⤷ Title: Exploit Code Live: Full Technical Details and PoC Disclosed for Critical CWP RCE Vulnerability
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Mon, 06 Apr 2026 09:42:55 +0000
════════════════════════
⌗ Tags: #Vulnerability #CentOS Web Panel #Command Injection #Control Web Panel #CWP #Exploit Disclosed #infosec #Linux Security #PoC #rce #Web Panel Security
Daily CyberSecurity
Exploit Code Live: Full Technical Details and PoC Disclosed for Critical CWP RCE Vulnerability
Fenrisk releases full PoC exploit for CVE-2025-48703, a critical CWP RCE flaw. Learn how unauthenticated attackers hijack non-root users. Patch now!
11 views
Daily Writeups
⤷ Title: Bypassing MFA: Gremlin Stealer Evolves into Advanced Memory-Resident Session Hijacker
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Thu, 21 May 2026 07:26:35 +0000
════════════════════════
⌗ Tags: #Malware #Chromium Browsers #Clipboard Hijacker #Control Flow Flattening #Cyber Security #Discord Token Stealer #Gremlin Stealer #infosec #Infostealer #MFA Bypass #Session Hijacking #Unit 42
Daily CyberSecurity
Bypassing MFA: Gremlin Stealer Evolves into Advanced Memory-Resident Session Hijacker
Unit 42 exposes the new Gremlin stealer. It uses memory-resident techniques to hijack active browser session tokens and completely bypass MFA.
17 views
Daily Writeups
⤷ Title: Storm-2949 Hijacks Azure Identity and Key Vaults in Catastrophic Cloud Campaign
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Fri, 22 May 2026 07:01:58 +0000
════════════════════════
⌗ Tags: #Cybercriminals #Azure Cloud Security #Cloud Egress #Control Plane Attack #Cyber Security #Identity Hijacking #infosec #Key Vault Exploit #Microsoft Threat Intelligence #RBAC Manipulation #SSPR Abuse #Storm_2949
Daily CyberSecurity
Storm-2949 Hijacks Azure Identity and Key Vaults in Catastrophic Cloud Campaign
Microsoft exposes Storm-2949, a cloud-native threat group abusing Azure management features and SSPR to hijack Key Vaults, App Services, and SQL databases.
14 views
Daily Writeups
⤷ Title: Public PoC Code Exposes CVSS 9.8 Control Web Panel SQL Injection CVE-2026-57517
════════════════════════
𐀪 Author: Do Son
════════════════════════
ⴵ Time: Fri, 03 Jul 2026 03:47:51 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #Control Web Panel #CVE_2026_57517 #sql injection #Vulnerability
Daily CyberSecurity
Public PoC Code Exposes CVSS 9.8 Control Web Panel SQL Injection CVE-2026-57517
Security researchers publicly disclosed a critical vulnerability in Control Web Panel alongside proof-of-concept exploit code. This flaw, identified as CVE-2026-57517, carries a maximum CVSS score…
10 views
Daily Writeups
⤷ Title: Control-M CVE-2026-10539: Unauthenticated Remote Command Injection (CVSS 9.5)
════════════════════════
𐀪 Author: Do Son
════════════════════════
ⴵ Time: Tue, 07 Jul 2026 15:21:12 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #BMC #Command Injection #Control_M #CVE_2026_10539 #Vulnerability
Daily CyberSecurity
Control-M CVE-2026-10539: Unauthenticated Remote Command Injection (CVSS 9.5)
TL;DR BMC disclosed a critical flaw in Control-M/Server tracked as CVE-2026-10539. The Control-M command injection bug scores 9.5 on CVSSv4. It lets an unauthenticated attacker run commands on the…
29 views
Daily Writeups
⤷ Title: Konnectivity Vulnerability Lets Unauthenticated Attackers Intercept Control-Plane Traffic
════════════════════════
𐀪 Author: Do Son
════════════════════════
ⴵ Time: Fri, 24 Jul 2026 13:15:28 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #Authentication Bypass #control_plane traffic #CVE_2026_16242 #hosted control planes #Konnectivity vulnerability #Kubernetes Security #mitm #proxy server
Daily CyberSecurity
Konnectivity Vulnerability Lets Unauthenticated Attackers Intercept Control-Plane Traffic
A critical Konnectivity vulnerability lets a remote attacker slip into a cluster without any credentials. Tracked as CVE-2026-16242, it carries a CVSS score of 9.4. The flaw sits in the Konnectivi…
20 views
Daily Writeups
⤷ Title: Windows Control Panel Migration: Why Legacy Code Persists
════════════════════════
𐀪 Author: Do Son
════════════════════════
ⴵ Time: Wed, 05 Aug 2026 03:28:17 +0000
════════════════════════
⌗ Tags: #Windows #Control Panel #Legacy Code #Microsoft #Windows 11 #Windows Settings
Daily CyberSecurity
Windows Control Panel Migration: Why Legacy Code Persists
For many years, Microsoft has strived to migrate traditional Control Panel applets into the modern Settings application across Windows 10 and Windows 11. Nevertheless, numerous legacy applets rema…
21 views