Daily Writeups
@Daily_Writeups
3.56K subscribers
2 photos
130K links
Daily Bug Bounty / Cybersecurity Writeups
Source Code : https://github.com/Spix0r/writeup-miner
Download Telegram
About
Blog
Apps
Platform
Join
Daily Writeups
3.56K subscribers
Daily Writeups
⤷ Title: October Patch Tuesday: Microsoft Fixes 6 Zero-Days, Including 4 Actively Exploited Flaws, as Windows 10 Reaches End-of-Life
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Wed, 15 Oct 2025 00:13:59 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #Windows #CVE_2025_24990 #Microsoft Security #Patch Tuesday #privilege escalation #rce #Windows 10 EOL #zero_day
Daily CyberSecurity
October Patch Tuesday: Microsoft Fixes 6 Zero-Days, Including 4 Actively Exploited Flaws, as Windows 10 Reaches End-of-Life
Microsoft patched 193 vulnerabilities this month, including six zero-days (four exploited) and issued the final update for Windows 10 (KB5066791).
11 views
Daily Writeups
⤷ Title: October Patch Tuesday: Microsoft Fixes 6 Zero-Days (4 Exploited) as Windows 10 Support Officially Ends
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Thu, 16 Oct 2025 08:15:17 +0000
════════════════════════
⌗ Tags: #Vulnerability #Windows #CVE_2025_24990 #Microsoft Security #Patch Tuesday #privilege escalation #RCE #Windows 10 EOL #zero_day
Penetration Testing Tools
October Patch Tuesday: Microsoft Fixes 6 Zero-Days (4 Exploited) as Windows 10 Support Officially Ends
Microsoft released its final Windows 10 update, fixing 172 flaws, including six zero-days. Three were actively exploited, including privilege escalation flaws in the Agere Modem Driver (removed) and RASMan.
16 views
Daily Writeups
⤷ Title: Secure the Next Wave: Protecting Agentic AI Solutions on Azure AI Foundry
════════════════════════
𐀪 Author: Arsh Riz
════════════════════════
ⴵ Time: Sun, 26 Oct 2025 22:02:24 GMT
════════════════════════
⌗ Tags: #ai_foundry #agentic_ai #ai_security #microsoft_security #cybersecurity
Medium
Secure the Next Wave: Protecting Agentic AI Solutions on Azure AI Foundry
Artificial Intelligence has moved from trial runs to becoming the backbone of business strategy. The next step in that journey is agentic…
18 views
Daily Writeups
⤷ Title: The AI-Powered Analyst: Mastering Incident Investigation with Microsoft Security Copilot
════════════════════════
𐀪 Author: Arsh Riz
════════════════════════
ⴵ Time: Sun, 02 Nov 2025 19:28:33 GMT
════════════════════════
⌗ Tags: #gen_ai_tools #microsoft_security #azure_security #cybersecurity
Medium
The AI-Powered Analyst: Mastering Incident Investigation with Microsoft Security Copilot
The cybersecurity landscape today is intense — data volumes keep growing, and threats are becoming more advanced and unpredictable…
18 views
Daily Writeups
⤷ Title: Customizing Microsoft Security Copilot with Plugins, Prompt Books, and Custom Agents
════════════════════════
𐀪 Author: Arsh Riz
════════════════════════
ⴵ Time: Sun, 02 Nov 2025 21:01:21 GMT
════════════════════════
⌗ Tags: #microsoft_security #cybersecurity #azure_security #cloud_security
Medium
Customizing Microsoft Security Copilot with Plugins, Prompt Books, and Custom Agents
Microsoft Security Copilot is one of the most significant evolutions in security operations in recent years. It’s a generative AI solution…
14 views
Daily Writeups
⤷ Title: Staying in Control: Smart Response for Modern Cyber Threats
════════════════════════
𐀪 Author: Cloudsa Africa
════════════════════════
ⴵ Time: Tue, 04 Nov 2025 09:30:32 GMT
════════════════════════
⌗ Tags: #technology #microsoft_security #cybersecurity #cloud_technology #it_security
Medium
Staying in Control: Smart Response for Modern Cyber Threats
We leverage Microsoft Security Solutions to help you stay ahead with: Real-time threat detection: Microsoft Defender & Sentinel
13 views
Daily Writeups
⤷ Title: Blinding ASLR: New Windows Zero-Day Exploited to Leak Memory
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Thu, 15 Jan 2026 08:18:43 +0000
════════════════════════
⌗ Tags: #Vulnerability #ALPC #ASLR Bypass #CISA #CVE_2026_20805 #Cyber Security News #DWM #Memory Leak #Microsoft Security #Patch Tuesday 2026 #Windows Zero_Day
Penetration Testing Tools
Blinding ASLR: New Windows Zero-Day Exploited to Leak Memory
While administrators are merely commencing the deployment of January’s Windows updates, a nascent vulnerability is already being weaponized
15 views
Daily Writeups
⤷ Title: Billions at Risk: Critical Windows Notepad Flaw Allows Remote Code Execution
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Wed, 11 Feb 2026 04:01:30 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #Command Injection #CVE_2026_20841 #Markdown Exploit #Microsoft Security #Patch Tuesday #rce #Remote Code Execution #Windows 11 #Windows Notepad
Daily CyberSecurity
Billions at Risk: Critical Windows Notepad Flaw Allows Remote Code Execution
Microsoft patches critical Windows Notepad flaw CVE-2026-20841 (CVSS 8.8). Malicious Markdown links allow Remote Code Execution. Update now.
11 views
Daily Writeups
⤷ Title: RoguePilot: The Silent AI Hijacker Turning GitHub Issues into Repository Backdoors
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Wed, 25 Feb 2026 07:36:33 +0000
════════════════════════
⌗ Tags: #Malware #AI security #GitHub Codespaces #GitHub Copilot #GITHUB_TOKEN #Indirect Prompt Injection #Microsoft Security #Orca Security #repository takeover #RoguePilot #supply chain attack #Tech News 2026
Penetration Testing Tools
RoguePilot: The Silent AI Hijacker Turning GitHub Issues into Repository Backdoors
A critical vulnerability has been unearthed within GitHub Codespaces, enabling the illicit hijacking of repositories through the integrated
19 views
Daily Writeups
⤷ Title: Global Coalition Dismantles Tycoon 2FA’s Phishing Empire
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Thu, 05 Mar 2026 03:42:17 +0000
════════════════════════
⌗ Tags: #Cybercriminals #AitM Phishing #cybersecurity #Europol #infosec #MFA Bypass #Microsoft Security #PhaaS #Phishing_as_a_Service #threat intelligence #Tycoon 2FA
Daily CyberSecurity
Global Coalition Dismantles Tycoon 2FA’s Phishing Empire
Microsoft and Europol lead a global coalition to dismantle Tycoon 2FA, a massive AiTM phishing platform that bypassed MFA for over 500,000 organizations.
14 views
Daily Writeups
⤷ Title: Zero-Day Chaos: The “BlueHammer” Leak and Microsoft’s High-Stakes Privilege Escalation Crisis
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Tue, 07 Apr 2026 07:54:52 +0000
════════════════════════
⌗ Tags: #Vulnerability #BlueHammer #Chaotic Eclipse #GitHub Leak #InfoSec 2026 #LPE #Microsoft Security #Nightmare_Eclipse #privilege escalation #SAM Database #TOCTOU #Windows Zero_Day
Penetration Testing Tools
Zero-Day Chaos: The "BlueHammer" Leak and Microsoft’s High-Stakes Privilege Escalation Crisis
The unauthorized disclosure of functional code for a nascent Windows vulnerability has presented Microsoft with a formidable new
8 views
Daily Writeups
⤷ Title: RedSun: New Windows Defender Zero-Day Turns Protector into Attacker, PoC Publishes
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Thu, 16 Apr 2026 02:06:31 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #Chaotic Eclipse #CVE_2026_33825 #cybersecurity #Elevation of Privilege #EoP #infosec #Microsoft Security #Nightmare_Eclipse #Patch Alert #RedSun #Windows Defender #zero_day
Daily CyberSecurity
RedSun: New Windows Defender Zero-Day Turns Protector into Attacker, PoC Publishes
Windows Defender "RedSun" zero-day revealed! This unpatched EoP flaw turns antivirus into a delivery tool for malicious payloads. PoC is public—patch now!
16 views
Daily Writeups
⤷ Title: Windows Snipping Tool Can Leak Your Identity, PoC Available
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Mon, 20 Apr 2026 01:47:11 +0000
════════════════════════
⌗ Tags: #Vulnerability #Blackarrow #Deep Link #Exploit Code #Microsoft Security #ms_screensketch #NTLM Disclosure #proof_of_concept #Tarlogic #Windows Snipping Tool #Windows vulnerability
Daily CyberSecurity
Windows Snipping Tool Can Leak Your Identity, PoC Available
Detailed PoC and exploit code for CVE-2026-33829 are now public. See how the Windows Snipping Tool can leak NTLM hashes and how to patch the flaw.
15 views
Daily Writeups
⤷ Title: Microsoft Defender Zero-Day “BlueHammer” Hits KEV Catalog Following Researcher’s Protest
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Thu, 23 Apr 2026 01:53:17 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #BlueHammer #CISA KEV #CVE_2026_33825 #Huntress Labs #infosec #Local Privilege Escalation #LPE #Microsoft Defender #Microsoft Security #RedSun #SAM Database #TOCTOU #UnDefend
Daily CyberSecurity
Microsoft Defender Zero-Day "BlueHammer" Hits KEV Catalog Following Researcher's Protest
CISA adds BlueHammer (CVE-2026-33825) to the KEV catalog. This Microsoft Defender LPE exploit uses TOCTOU to hijack SAM databases. Patch by May 6, 2026.
16 views
Daily Writeups
⤷ Title: New “ClickFix” Campaign Bypasses Gatekeeper to Hijack macOS Devices
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Sat, 09 May 2026 01:00:27 +0000
════════════════════════
⌗ Tags: #Malware #AMOS #Apple Security #ClickFix #Crypto theft #Gatekeeper Bypass #Infostealer #macOS #MacSync #Microsoft Security Report #SHub Stealer #Terminal Malware
Daily CyberSecurity
New "ClickFix" Campaign Bypasses Gatekeeper to Hijack macOS Devices
Microsoft reveals a macOS ClickFix campaign using fake "fixes" to trick users into running Terminal commands that bypass Gatekeeper and steal crypto wallets.
11 views
Daily Writeups
⤷ Title: MiniPlasma Zero-Day: PoC Exploit Code and Vulnerability Details Publicly Disclosed for Windows 11
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Mon, 18 May 2026 00:30:22 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #Chaotic Eclipse #CVE_2020_17103 #Local Privilege Escalation #Microsoft Security #MiniPlasma #proof_of_concept #vulnerability disclosure #Windows 11 Security #Windows Server 2025 #Zero_Day Vulnerability
Daily CyberSecurity
MiniPlasma Zero-Day: PoC Exploit Code and Vulnerability Details Publicly Disclosed for Windows 11
Details and PoC code for the "MiniPlasma" zero-day exploit are now public. See how a 6-year-old flaw grants SYSTEM access on fully patched Windows 11.
16 views
Daily Writeups
⤷ Title: Urgent Patch: Microsoft Defender Update Fixes Critical SYSTEM-Level Privilege Escalation Flaw
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Sat, 23 May 2026 04:05:37 +0000
════════════════════════
⌗ Tags: #Vulnerability #Anti_malware Client Version 4.18.26040.7 #CVE_2026_41091 Update #CVE_2026_45498 Denial of Service #Defender Security Advisory #Microsoft Defender Privilege Escalation #Microsoft Security Updates 2026 #Patch Verification Guide #System Level Privilege Escalation #Windows Endpoint Patch
Information Security News
Urgent Patch: Microsoft Defender Update Fixes Critical SYSTEM-Level Privilege Escalation Flaw
Microsoft has formally disseminated a security advisory detailing the successful remediation of critical vulnerabilities identified within the Microsoft
25 views
Daily Writeups
⤷ Title: The Windows 10 Sunset: HP’s Market Opportunity and the Consumer ESU Deadline
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Mon, 01 Jun 2026 04:37:32 +0000
════════════════════════
⌗ Tags: #Technology #Windows #consumer ESU program #enterprise update costs #HP hardware refresh #IoT LTSC alternatives #Microsoft security lifecycle #Windows 10 extended support
Daily CyberSecurity
The Windows 10 Sunset: HP's Market Opportunity and the Consumer ESU Deadline
Learn about the Windows 10 extended support lifecycle. Discover consumer ESU details, enterprise update costs, and HP hardware trends.
14 views
Daily Writeups
⤷ Title: Microsoft Discovers Crypto Clipper Utilizing Tor for Control
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Fri, 19 Jun 2026 03:50:23 +0000
════════════════════════
⌗ Tags: #Cybercriminals #Crypto Clipper #Microsoft Security #Tor Network #USB Malware
Information Security News
Microsoft Discovers Crypto Clipper Utilizing Tor for Control
Microsoft has detailed a sophisticated crypto clipper utilizing Tor for command and control, spreading via USB drives to hijack cryptocurrency transactions.
24 views
Daily Writeups
⤷ Title: How I Earned $10,000 From Microsoft (From Just 2 Bugs Out of 30+)
════════════════════════
𐀪 Author: Aman Kumar (ak)
════════════════════════
ⴵ Time: Tue, 21 Jul 2026 08:37:56 GMT
════════════════════════
⌗ Tags: #cybersecurity #india #bug_bounty #microsoft_security #microsoft
Medium
How I Earned $10,000 From Microsoft (From Just 2 Bugs Out of 30+)
One year. More than thirty reports to Microsoft, only two of them paid, and a whole security conference built on the side while I did it…
11 views