Daily Writeups
@Daily_Writeups
4.02K subscribers
4 photos
136K links
Daily Bug Bounty / Cybersecurity Writeups
Source Code : https://github.com/Spix0r/writeup-miner
Download Telegram
About
Blog
Apps
Platform
Join
Daily Writeups
4.02K subscribers
Daily Writeups
⤷ Title: Three Incidents. Four Layers. One Week.
════════════════════════
𐀪 Author: Duncan N. Ndegwa
════════════════════════
ⴵ Time: Thu, 25 Jun 2026 07:40:25 GMT
════════════════════════
⌗ Tags: #mastra_ai #servicenow #api_security #security_credentials #fortinet
Medium
Three Incidents. Four Layers. One Week.
The same week the agentic web was declared production-ready, credential exfiltration hit four different layers of the stack. Same root…
38 views
Daily Writeups
⤷ Title: Governance and Detection Tell You What Happened. Design Determines Whether It Matters.
════════════════════════
𐀪 Author: Duncan N. Ndegwa
════════════════════════
ⴵ Time: Fri, 26 Jun 2026 09:12:08 GMT
════════════════════════
⌗ Tags: #security_credentials #ai_agents_in_action #ai_agent #api_security #non_human_identities
Medium
Governance and Detection Tell You What Happened. Design Determines Whether It Matters.
The security industry built the best response tools in history. Then 144 npm packages were backdoored in 88 minutes. A production database…
31 views
Daily Writeups
⤷ Title: The Design Layer and Your Security Stack: A Practical Integration Guide
════════════════════════
𐀪 Author: Duncan N. Ndegwa
════════════════════════
ⴵ Time: Thu, 02 Jul 2026 08:45:47 GMT
════════════════════════
⌗ Tags: #ai_agent #security_credentials #non_human_identities #aws_iam #api_security
Medium
The Design Layer and Your Security Stack: A Practical Integration Guide
The governance layer is well-built. The detection layer is well-funded. The design layer is the upstream question neither answers — and it…
10 views
Daily Writeups
⤷ Title: THE DOWNSTREAM TRAP
════════════════════════
𐀪 Author: Duncan N. Ndegwa
════════════════════════
ⴵ Time: Fri, 10 Jul 2026 07:59:08 GMT
════════════════════════
⌗ Tags: #security_credentials #api_security #ai_governance #ai_agents_in_action #threat_detection
Medium
THE DOWNSTREAM TRAP
Why Patching the Entry Point Never Stops the Credential
32 views
Daily Writeups
⤷ Title: SIX INCIDENTS, ONE ROOT CAUSE: THE CREDENTIAL QUESTION NOBODY’S ANSWERING
════════════════════════
𐀪 Author: Duncan N. Ndegwa
════════════════════════
ⴵ Time: Thu, 16 Jul 2026 08:59:55 GMT
════════════════════════
⌗ Tags: #incident_analysis #governance #ai_agents_in_action #security_credentials #api_security
Medium
SIX INCIDENTS, ONE ROOT CAUSE: THE CREDENTIAL QUESTION NOBODY’S ANSWERING
Look back at the security disclosures from just the last two weeks, and a pattern shows up that’s easy to miss when you read about each one…
19 views
Daily Writeups
⤷ Title: Eleven Organizations in Twenty-Six Seconds: What GreyNoise’s PaperCut Campaign Confirms
════════════════════════
𐀪 Author: Duncan Ndegwa
════════════════════════
ⴵ Time: Tue, 15 Sep 2026 11:31:13 GMT
════════════════════════
⌗ Tags: #security_credentials #papercut #ai #grey_noise #api_security
Medium
Eleven Organizations in Twenty-Six Seconds: What GreyNoise’s PaperCut Campaign Confirms
GreyNoise Traced an AI-Orchestrated Attack Across 395 Organizations. The Credentials It Stole Were Already Real.
32 views
Daily Writeups
⤷ Title: The Nine-Month Mark: Three Eras, One Question That Never Got Answered
════════════════════════
𐀪 Author: Duncan Ndegwa
════════════════════════
ⴵ Time: Tue, 06 Oct 2026 09:54:57 GMT
════════════════════════
⌗ Tags: #cybersecurity #credential_isolation #ai_agents_in_action #api_security #security_credentials
Medium
The Nine-Month Mark: Three Eras, One Question That Never Got Answered
December 2025 through September 2026: from GitGuardian’s 28.6 million exposed secrets to GreyNoise’s 395 organizations, how ‘credential…
62 views