Daily Writeups
@Daily_Writeups
3.56K subscribers
2 photos
130K links
Daily Bug Bounty / Cybersecurity Writeups
Source Code : https://github.com/Spix0r/writeup-miner
Download Telegram
About
Blog
Apps
Platform
Join
Daily Writeups
3.56K subscribers
Daily Writeups
⤷ Title: Exploitation of Continuous Integration Pipelines for Supply Chain Compromise and Backdoor Injection
════════════════════════
𐀪 Author: Aaishh
════════════════════════
ⴵ Time: Tue, 22 Jul 2025 04:11:52 GMT
════════════════════════
⌗ Tags: #devops_security #cybersecurity #ci_cd_pipeline #supply_chain_attack #continuous_integration
Medium
Exploitation of Continuous Integration Pipelines for Supply Chain Compromise and Backdoor Injection
How much secure are the CI/CD pipelines that deliver your software? What happens when these tools designed to speed up development becomes…
19 views
Daily Writeups
⤷ Title: GitLab Patch: Fixes CI/CD Credential Theft & Unauthenticated DoS Attacks
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Wed, 26 Nov 2025 23:17:52 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #Authentication Bypass #CI/CD security #CVE_2024_9183 #CVE_2025_12571 #Denial of Service #DevOps Security #gitlab #security patch
Daily CyberSecurity
GitLab Patch: Fixes CI/CD Credential Theft & Unauthenticated DoS Attacks
Critical GitLab updates (18.6.1/18.5.3) fix severe CI/CD credential theft (CVE-2024-9183) & unauthenticated DoS flaws. Upgrade immediately.
13 views
Daily Writeups
⤷ Title: Automation Crisis: Critical 9.9 CVSS Flaw Exposes 103K n8n Instances to Full Takeover
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Wed, 24 Dec 2025 02:40:38 +0000
════════════════════════
⌗ Tags: #Vulnerability #Censys #CVE_2025_68613 #Cybersecurity 2025 #DevOps Security #n8n #Node.js #Patch Alert #RCE #remote code execution #Sandbox Escape #Workflow Automation
Information Security News
Automation Crisis: Critical 9.9 CVSS Flaw Exposes 103K n8n Instances to Full Takeover
A critical vulnerability in the globally used workflow automation platform n8n allows attackers to execute arbitrary code remotely. Tracked as CVE-2025-68613, the flaw carries an exceptionally hig…
26 views
Daily Writeups
⤷ Title: The Worm in the Code: How the Shai-Hulud npm Attack Hijacked Trust Wallet
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Mon, 05 Jan 2026 03:20:52 +0000
════════════════════════
⌗ Tags: #Cybercriminals #Crypto Theft #DevOps Security #Github #InfoSec 2026 #JavaScript #malware #npm #Shai_Hulud #supply chain attack #Trust Wallet
Penetration Testing Tools
The Worm in the Code: How the Shai-Hulud npm Attack Hijacked Trust Wallet
A large-scale supply chain compromise known as Shai-Hulud has been linked to the recent theft of approximately USD
14 views
Daily Writeups
⤷ Title: NodeCordRAT: The Trojan Hiding in NPM to Steal Crypto via Discord
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Fri, 09 Jan 2026 00:16:11 +0000
════════════════════════
⌗ Tags: #Malware #Cryptocurrency Theft #DevOps Security #Discord C2 #Malware Analysis #NodeCordRAT #npm #supply chain attack #Zscaler ThreatLabz
Daily CyberSecurity
NodeCordRAT: The Trojan Hiding in NPM to Steal Crypto via Discord
The open-source ecosystem has once again been weaponized, this time targeting developers working with cryptocurrency libraries. In a new report released this week, Zscaler ThreatLabz revealed the …
25 views
Daily Writeups
⤷ Title: VoidLink: The “Cloud-First” Malware Hunting Your Linux Servers
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Wed, 14 Jan 2026 00:21:17 +0000
════════════════════════
⌗ Tags: #Malware #Check Point Research #Chinese Threat Actor #Cloud Security #Cobalt Strike #container security #DevOps Security #eBPF #Kubernetes Security #Linux Malware #supply chain attack #VoidLink #Zig Programming Language
Daily CyberSecurity
VoidLink: The "Cloud-First" Malware Hunting Your Linux Servers
New "cloud-first" malware VoidLink targets Linux & containers with advanced stealth. Written in Zig, it mimics Cobalt Strike to evade EDR. Check your cloud.
25 views
Daily Writeups
⤷ Title: Open Source, Open Access: 5 Million Servers Expose Critical Git Metadata and Credentials
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Tue, 10 Feb 2026 09:44:03 +0000
════════════════════════
⌗ Tags: #Data Leak #.git folder #Credential Theft #data leak #DevOps Security #Git #misconfiguration #Mysterium VPN #source code exfiltration #Tech News 2026 #version control #web server hardening
Penetration Testing Tools
Open Source, Open Access: 5 Million Servers Expose Critical Git Metadata and Credentials
Approximately five million web servers globally have been identified as misconfigured, exposing sensitive Git administrative metadata and precipitating
39 views
Daily Writeups
⤷ Title: GitLab Patch Alert: High-Severity Web IDE Flaw Exposes Private Repos
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Wed, 11 Feb 2026 01:58:57 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #CI/CD #CVE_2025_7659 #Denial of Service #DevOps Security #gitlab #graphql #Markdown Vulnerability #Patch Alert #Token Theft #Web IDE
Daily CyberSecurity
GitLab Patch Alert: High-Severity Web IDE Flaw Exposes Private Repos
GitLab fixes critical CVE-2025-7659 (CVSS 8.0). Unauthenticated attackers can steal tokens via Web IDE. Update to v18.8.4 now to secure your code.
21 views
Daily Writeups
⤷ Title: CI/CD at Risk: High-Severity Jenkins XSS Flaw Exposes Build Environments
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Thu, 19 Feb 2026 14:01:29 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #automation server #CI/CD security #Cross_Site Scripting #CVE_2026_27099 #CVE_2026_27100 #DevOps Security #Information Disclosure #Jenkins #Patch Alert #XSS
Daily CyberSecurity
CI/CD at Risk: High-Severity Jenkins XSS Flaw Exposes Build Environments
Jenkins patches a high-severity stored XSS flaw (CVE-2026-27099) and an info disclosure bug. Update to version 2.551 or LTS 2.541.2 to secure pipelines.
31 views
Daily Writeups
⤷ Title: The Tag Trap: How a Single Commit Swap Turned Xygeni’s GitHub Action into a Clandestine Backdoor
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Thu, 12 Mar 2026 07:21:26 +0000
════════════════════════
⌗ Tags: #Malware #CI/CD Security #DevOps Security #GitHub Actions #GitHub Token Theft #malware #RCE #StepSecurity #supply chain attack #Tag Poisoning #Tech News 2026 #v5 tag #Xygeni
Penetration Testing Tools
The Tag Trap: How a Single Commit Swap Turned Xygeni’s GitHub Action into a Clandestine Backdoor
An imperceptible edit to a single tag transformed a ubiquitous security auditing instrument into a clandestine backdoor. A
❤1
10 views
Daily Writeups
⤷ Title: Security Alert: GitLab Issues Patch for High-Severity Vulnerabilities Across CE and EE
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Thu, 09 Apr 2026 02:52:54 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #API security #Code Integrity #CVE_2026_5173 #DevOps Security #gitlab #GitLab CE #GitLab EE #graphql #infosec #privilege escalation #security update #terraform
Daily CyberSecurity
Security Alert: GitLab Issues Patch for High-Severity Vulnerabilities Across CE and EE
GitLab releases critical patches (18.10.3+) for WebSocket flaws, Terraform DoS, and unauthorized privilege demotions. Update your self-managed instances!
29 views
Daily Writeups
⤷ Title: Supply Chain Alert: Critical 9.4 CVSS RCE Hits Sonatype Nexus Repository Manager
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Mon, 13 Apr 2026 03:35:43 +0000
════════════════════════
⌗ Tags: #Vulnerability #DevOps Security #infosec #Nexus Repo 3 #Nexus Repository #rce #Remote Code Execution #Sonatype #Supply Chain Security #vulnerability management
Daily CyberSecurity
Supply Chain Alert: Critical 9.4 CVSS RCE Hits Sonatype Nexus Repository Manager
Sonatype patches a critical 9.4 CVSS RCE in Nexus Repository 3 (CVE-2026-3199). Secure your supply chain—upgrade to version 3.91.0 immediately!
18 views
Daily Writeups
⤷ Title: Linux File & Folder Protection + History Control (Practice Guide Only)
════════════════════════
𐀪 Author: DevOps voice
════════════════════════
ⴵ Time: Thu, 30 Apr 2026 06:40:08 GMT
════════════════════════
⌗ Tags: #devsecops #audit #infosec #devops_security #cybersecurity
Medium
🔐 Linux File & Folder Protection + History Control (Practice Guide Only)
⚠️ For learning/practice only — DO NOT use direct in Dev/SIT/UAT/Prod environments
7 views
Daily Writeups
⤷ Title: New Quasar Linux (QLNX) RAT Hijacks Cloud Keys and NPM Tokens
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Wed, 06 May 2026 08:11:06 +0000
════════════════════════
⌗ Tags: #Malware #AWS Credentials #DevOps Security #eBPF Rootkit #Fileless Malware #infosec #Linux RAT #npm Security #PyPI #QLNX #Quasar Linux #supply chain attack #Trend Micro
Daily CyberSecurity
New Quasar Linux (QLNX) RAT Hijacks Cloud Keys and NPM Tokens
Trend Micro uncovers QLNX, a fileless Linux RAT targeting AWS, NPM, and Kubernetes keys. Learn how its eBPF rootkit hides from even the deepest system scans.
14 views
Daily Writeups
⤷ Title: Checkmarx Fails Again: TeamPCP Hijacks Jenkins Plugin to Harvest Developer Credentials
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Wed, 13 May 2026 08:16:40 +0000
════════════════════════
⌗ Tags: #Malware #Checkmarx #Credential Harvesting #Cybersecurity 2026 #DevOps Security #Infosec #jenkins #Jenkins Marketplace #Malware Alert #Shai_Hulud #supply chain attack #TeamPCP
Penetration Testing Tools
Checkmarx Fails Again: TeamPCP Hijacks Jenkins Plugin to Harvest Developer Credentials
Unidentified adversaries have subverted the Checkmarx plugin for Jenkins, embedding deleterious code designed for credential exfiltration. This incursion
15 views
Daily Writeups
⤷ Title: GitLab Critical Patch: High-Severity XSS and Unauthenticated DoS Flaws Hit Self-Managed Instances
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Thu, 14 May 2026 01:39:34 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #CE #CVE_2026_7481 #Cyber Security #DevOps Security #dos #EE #gitlab #GitLab 18.11.3 #GitLab Security Patch #infosec #Patch Alert #XSS
Daily CyberSecurity
GitLab Critical Patch: High-Severity XSS and Unauthenticated DoS Flaws Hit Self-Managed Instances
GitLab patches high-severity XSS (8.7 CVSS) and unauthenticated DoS flaws in versions 18.11.3, 18.10.6, and 18.9.7. Secure your DevOps pipeline now!
15 views
Daily Writeups
⤷ Title: Supply Chain Storm: Over 700 Laravel Lang Versions Poisoned with Malicious RCE Backdoor
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Sat, 23 May 2026 04:24:14 +0000
════════════════════════
⌗ Tags: #Malware #App_Bound Encryption #Composer Backdoor #Credential Harvesting #Cyber Security #DevOps Security #flipboxstudio #info_stealer #Laravel Lang #PHP RCE #supply chain attack
Daily CyberSecurity
Supply Chain Storm: Over 700 Laravel Lang Versions Poisoned with Malicious RCE Backdoor
DevOps Alert: Over 700 laravel-lang localization package versions have been backdoored with a cross-platform 17-collector info-stealer. Audit your logs.
19 views