Daily Writeups
@Daily_Writeups
3.56K subscribers
2 photos
130K links
Daily Bug Bounty / Cybersecurity Writeups
Source Code : https://github.com/Spix0r/writeup-miner
Download Telegram
About
Blog
Apps
Platform
Join
Daily Writeups
3.56K subscribers
Daily Writeups
⤷ Title: How to Use API Clients in OrderCloud to Secure Microservices
════════════════════════
𐀪 Author: Md. Zillur Rahman
════════════════════════
ⴵ Time: Sun, 02 Nov 2025 05:05:57 GMT
════════════════════════
⌗ Tags: #microservices #sitecore #architecture #api_security #ordercloud
Medium
How to Use API Clients in OrderCloud to Secure Microservices
Learn how to secure microservices in Sitecore OrderCloud by using separate API Clients for backend, buyer, and seller apps. Understand…
42 views
Daily Writeups
⤷ Title: Your .NET API Is NOT Secure — Unless You Do This
════════════════════════
𐀪 Author: Code Crack
════════════════════════
ⴵ Time: Tue, 11 Nov 2025 07:15:39 GMT
════════════════════════
⌗ Tags: #microservices #dotnet_core #entity_framework_core #api_development #api_security
Medium
Your .NET API Is NOT Secure — Unless You Do This
You might be thinking,
24 views
Daily Writeups
⤷ Title: The Most Common API Security Failures
════════════════════════
𐀪 Author: Cyber-AppSec
════════════════════════
ⴵ Time: Thu, 13 Nov 2025 22:12:13 GMT
════════════════════════
⌗ Tags: #ai #cybersecurity #api #information_security #microservices
Medium
The Most Common API Security Failures
APIs are everywhere — powering your apps, syncing your systems, and quietly keeping your business running behind the scenes.
11 views
Daily Writeups
⤷ Title: The Hidden Complexity of Secure Serialization & Deserialization in Modern Distributed Systems
════════════════════════
𐀪 Author: Bervice
════════════════════════
ⴵ Time: Wed, 19 Nov 2025 02:33:53 GMT
════════════════════════
⌗ Tags: #software_engineering #microservices #bervice #backend_engineering #cybersecurity
Medium
The Hidden Complexity of Secure Serialization & Deserialization in Modern Distributed Systems
Serialization looks simple on the surface — convert an object into a byte stream, transmit it, and reconstruct it on the other side. But…
16 views
Daily Writeups
⤷ Title: Forward Proxy vs Reverse Proxy: The Deep Dive Every Engineer Must Understand
════════════════════════
𐀪 Author: Arvind Kumar
════════════════════════
ⴵ Time: Thu, 04 Dec 2025 02:02:42 GMT
════════════════════════
⌗ Tags: #reverse_proxy #api_security #system_design_interview #forward_proxy #microservices
Medium
Forward Proxy vs Reverse Proxy: The Deep Dive Every Engineer Must Understand
There are few networking components as critical — and as misunderstood — as forward proxies and reverse proxies. Both act as…
30 views
Daily Writeups
⤷ Title: Solving OIDC Integration Challenges with Kong API Gateway and Angular UI
════════════════════════
𐀪 Author: Amanuel Eshete
════════════════════════
ⴵ Time: Wed, 17 Dec 2025 22:48:41 GMT
════════════════════════
⌗ Tags: #kong_api_gateway #api_security #openid_connect #microservices #angular
Medium
Solving OIDC Integration Challenges with Kong API Gateway and Angular UI
Integrating OpenID Connect (OIDC) into a microservices platform can feel straightforward — until subtle issues put your UI, APIs, and…
26 views
Daily Writeups
⤷ Title: Security Fundamentals — Core concepts
════════════════════════
𐀪 Author: Suraj Bhandari
════════════════════════
ⴵ Time: Thu, 18 Dec 2025 10:49:33 GMT
════════════════════════
⌗ Tags: #security #system_design_interview #api_security #software_architecture #microservices
Medium
Security Fundamentals — Core concepts
Microservices security in depth
46 views
Daily Writeups
⤷ Title: API Key vs OAuth vs mTLS — When to Use What
════════════════════════
𐀪 Author: Suraj Bhandari
════════════════════════
ⴵ Time: Mon, 29 Dec 2025 10:09:34 GMT
════════════════════════
⌗ Tags: #information_technology #api_security #microservices #security #java
Medium
API Key vs OAuth vs mTLS — When to Use What
When we build or consume APIs, one of the first questions is:  “How should this API be secured?”
64 views
Daily Writeups
⤷ Title: Building a Cleaner Authentication to Turn JWT Payloads into Backend Ready Headers with APISIX
════════════════════════
𐀪 Author: Umair
════════════════════════
ⴵ Time: Thu, 12 Feb 2026 15:04:28 GMT
════════════════════════
⌗ Tags: #software_engineering #cloud_computing #devops #microservices #api_security
Medium
Building a Cleaner Authentication to Turn JWT Payloads into Backend Ready Headers with APISIX
Working with APISIX often feels like working with a router that can think for itself. You send it a request, and instead of blindly…
40 views
Daily Writeups
⤷ Title: Authentication & Authorization Patterns for APIs, Microservices, MCP, and A2A
════════════════════════
𐀪 Author: QuarkAndCode
════════════════════════
ⴵ Time: Sat, 14 Mar 2026 22:16:09 GMT
════════════════════════
⌗ Tags: #microservices_security #api_security #authentication #ai_agent_security #authorization
Medium
Authentication & Authorization Patterns for APIs, Microservices, MCP, and A2A
Authentication and authorization are at the heart of nearly every secure digital interaction, whether it is a basic login or an AI agent…
32 views
Daily Writeups
⤷ Title: Your API Can DDoS Itself
════════════════════════
𐀪 Author: Think Data
════════════════════════
ⴵ Time: Sun, 05 Apr 2026 07:49:42 GMT
════════════════════════
⌗ Tags: #data_engineering #application_security #microservices #api #software_development
Medium
Your API Can DDoS Itself
Sometimes the most dangerous traffic doesn’t come from users. It comes from your own service.
26 views
Daily Writeups
⤷ Title: How WSO2 API Manager Helps Secure APIs in Microservices Architecture
════════════════════════
𐀪 Author: Nilakshi Madubashini
════════════════════════
ⴵ Time: Mon, 06 Apr 2026 16:45:37 GMT
════════════════════════
⌗ Tags: #wso2 #api_security #microservices #api_management #software_architecture
Medium
How WSO2 API Manager Helps Secure APIs in Microservices Architecture
As someone still learning microservices, I didn’t expect API security to be such a big topic. But the deeper I went, the more I realized…
35 views
Daily Writeups
⤷ Title: Cybersecurity in Modern Backend Systems: Lessons from Real-World Engineering
════════════════════════
𐀪 Author: Türkan BASUT
════════════════════════
ⴵ Time: Fri, 10 Apr 2026 12:23:40 GMT
════════════════════════
⌗ Tags: #cybersecurity #backend #api_security #microservices
Medium
Cybersecurity in Modern Backend Systems: Lessons from Real-World Engineering
In today’s world, cybersecurity is no longer a specialized domain — it is a fundamental responsibility of every software engineer. Whether…
38 views
Daily Writeups
⤷ Title: Building Secure APIs at Scale: A Practical Guide to SSO, MFA, and RBAC
════════════════════════
𐀪 Author: Vaishnavius Apply
════════════════════════
ⴵ Time: Mon, 13 Apr 2026 23:28:13 GMT
════════════════════════
⌗ Tags: #microservices #oauth #software_engineering #backend_development #api_security
Medium
Building Secure APIs at Scale: A Practical Guide to SSO, MFA, and RBAC
Learn how to design scalable and secure APIs using SSO, MFA, JWT, and RBAC in real-world distributed systems.
25 views
Daily Writeups
⤷ Title: Critical Authentication Bypass in Apache HttpClient 5.6
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Thu, 23 Apr 2026 12:45:20 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #Apache HttpClient #Apache Software Foundation #CVE_2026_40542 #HTTP Components #infosec #Java security #Microservices Security #Mutual Authentication #Patch Alert #SCRAM_SHA_256
Daily CyberSecurity
Critical Authentication Bypass in Apache HttpClient 5.6
Apache HttpClient 5.6 reveals a critical auth flaw (CVE-2026-40542) in SCRAM-SHA-256. Secure your Java microservices—upgrade to 5.6.1 immediately.
30 views
Daily Writeups
⤷ Title: Critical Flaws in Apache Thrift Threaten Multi-Language
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Wed, 06 May 2026 01:00:24 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #Apache Thrift #CVE_2026_43868 #CVE_2026_43869 #CVE_2026_43870 #Denial of Service #infosec #Java security #Man in the Middle #Microservices Security #Node.js #Rust Security
Daily CyberSecurity
Critical Flaws in Apache Thrift Threaten Multi-Language
Apache Thrift v0.23.0 fixes critical Rust DoS, Java MitM, and Node.js path traversal flaws. Secure your cross-language microservices and upgrade immediately!
26 views
Daily Writeups
⤷ Title: API Security: Defenses Tested in the Wild, Not Just on Paper
════════════════════════
𐀪 Author: CodersWorld
════════════════════════
ⴵ Time: Mon, 18 May 2026 03:46:00 GMT
════════════════════════
⌗ Tags: #microservices #software_development #software_engineering #programming #api_security
Medium
API Security: Defenses Tested in the Wild, Not Just on Paper
APIs are under fire. Every single day. Not in theory. Not in slides. In production.
35 views
Daily Writeups
⤷ Title: Spring Boot Rate Limiting: Stop DDoS Attacks and API Abuse Before They Crash Your System
════════════════════════
𐀪 Author: Ujjawal Rohra
════════════════════════
ⴵ Time: Thu, 04 Jun 2026 03:08:53 GMT
════════════════════════
⌗ Tags: #software_development #backend_development #api_security #spring_boot #microservices
Medium
Spring Boot Rate Limiting: Stop DDoS Attacks and API Abuse Before They Crash Your System
DDoS and abuse can crash your API. Rate limiting prevents it.
16 views
Daily Writeups
⤷ Title: Weaponizing Logs: How Attackers Crash Apps via Synchronous Logging (And How ELK Fixes It)
════════════════════════
𐀪 Author: Pau Dang
════════════════════════
ⴵ Time: Sat, 13 Jun 2026 19:41:00 GMT
════════════════════════
⌗ Tags: #microservices #cybersecurity #nodejs #software_architecture #hacking
Medium
Weaponizing Logs: How Attackers Crash Apps via Synchronous Logging (And How ELK Fixes It)
When the very system designed to monitor your application becomes the vector that takes it down.
23 views
Daily Writeups
⤷ Title: Spring Boot 4.1’s New SSRF Filter Never Touched My Feign Calls — Here’s the Trap
════════════════════════
𐀪 Author: HobbiesPark
════════════════════════
ⴵ Time: Thu, 25 Jun 2026 17:37:36 GMT
════════════════════════
⌗ Tags: #spring_security #java #spring_boot #microservices #ssrf
Medium
Spring Boot 4.1’s New SSRF Filter Never Touched My Feign Calls — Here’s the Trap
I upgraded a service to Spring Boot 4.1, switched on its new SSRF filter, and braced for the usual fallout — a global block rule shredding…
40 views