Daily Writeups
@Daily_Writeups
3.56K subscribers
2 photos
130K links
Daily Bug Bounty / Cybersecurity Writeups
Source Code : https://github.com/Spix0r/writeup-miner
Download Telegram
About
Blog
Apps
Platform
Join
Daily Writeups
3.56K subscribers
Daily Writeups
⤷ Title: Mortgage Market Crisis: SitusAMC Breach Exposes Data for Customers of JPMorgan, Citi
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Tue, 25 Nov 2025 03:27:51 +0000
════════════════════════
⌗ Tags: #Data Leak #Citi #cybersecurity #data breach #Financial Services #JPMorgan Chase #Mortgage Market #SitusAMC #third_party risk
Penetration Testing Tools
Mortgage Market Crisis: SitusAMC Breach Exposes Data for Customers of JPMorgan, Citi
SitusAMC, a key mortgage market contractor, suffered a breach that may have exposed client data from major banks like JPMorgan and Citi, raising fears of supply chain risk.
35 views
Daily Writeups
⤷ Title: The Third-Party Breach Epidemic: When vendors become the largest vulnerability
════════════════════════
𐀪 Author: Nikitha Srinivasan
════════════════════════
ⴵ Time: Fri, 28 Nov 2025 21:32:34 GMT
════════════════════════
⌗ Tags: #cloud_security #identity_management #zero_trust_security #cybersecurity #third_party
Medium
The Third-Party Breach Epidemic: When vendors become the largest vulnerability
By: Nikitha Srinivasan
15 views
Daily Writeups
⤷ Title: OpenAI Users Warned of Phishing Risk After Mixpanel Analytics Provider Breach
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Sat, 29 Nov 2025 03:08:27 +0000
════════════════════════
⌗ Tags: #Data Leak #Analytics Leak #API Users #data breach #Mixpanel #OpenAI #Phishing Risk #security incident #Third_Party Vendor
Penetration Testing Tools
OpenAI Users Warned of Phishing Risk After Mixpanel Analytics Provider Breach
OpenAI has disclosed a security incident at the third-party web-analytics provider Mixpanel that affected a subset of users
9 views
Daily Writeups
⤷ Title: The new era of third-party security: The perimeter you don’t control but that defines you
════════════════════════
𐀪 Author: Rodrigo Gutierrez
════════════════════════
ⴵ Time: Tue, 02 Dec 2025 14:43:19 GMT
════════════════════════
⌗ Tags: #infosec #cybersecurity #risk #third_party #grc
Medium
The new era of third-party security: The perimeter you don’t control but that defines you
For nearly two decades, third-party security was treated as an administrative chore — closer to bureaucracy than to cyber defense. Excel…
9 views
Daily Writeups
⤷ Title: One Search, Three Angles: See Employee, Customer And Vendor Leaks At Once With LeakRadar
════════════════════════
𐀪 Author: Alexandre Vandamme
════════════════════════
ⴵ Time: Sat, 06 Dec 2025 09:02:12 GMT
════════════════════════
⌗ Tags: #infosec #threat_intelligence #third_party_risk #cybersecurity #data_breach
Medium
One Search, Three Angles: See Employee, Customer And Vendor Leaks At Once With LeakRadar
Most teams look at leaks in fragments: a few employee hits here, a customer breach there, a vendor incident months later. The risk is the…
10 views
Daily Writeups
⤷ Title: macOS LPE Flaw Resurfaces: .localized Directory Exploited to Hijack Installers and Gain Root Access
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Tue, 16 Dec 2025 00:40:04 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #.localized #CVE_2025_24099 #Installer Hijack #Local Privilege Escalation #LPE #macOS #root access #Third_Party Software
Daily CyberSecurity
macOS LPE Flaw Resurfaces: .localized Directory Exploited to Hijack Installers and Gain Root Access
A macOS LPE flaw resurfaces after 7 years, allowing unprivileged users to hijack third-party installers and gain root access. The exploit leverages the hidden .localized directory to confuse the installation path.
15 views
Daily Writeups
⤷ Title: EU Compliance: iOS 26.3 Adds Notification Forwarding to Third-Party Wearables, Bypassing Apple Watch
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Tue, 16 Dec 2025 02:24:35 +0000
════════════════════════
⌗ Tags: #Technology #Apple Watch #compliance #Digital Markets Act #EU DMA #iOS 26.3 #Notification Forwarding #privacy #Third_Party Wearables
Daily CyberSecurity
EU Compliance: iOS 26.3 Adds Notification Forwarding to Third-Party Wearables, Bypassing Apple Watch
Apple introduced EU-only Notification Forwarding in iOS 26.3, allowing iPhones to selectively relay notifications to third-party smartwatches to comply with the Digital Markets Act.
12 views
Daily Writeups
⤷ Title: The Brazil Breakout: Apple Forced to Unlock iOS for Third-Party App Stores
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Fri, 26 Dec 2025 00:04:24 +0000
════════════════════════
⌗ Tags: #Technology #Antitrust #App Store #Apple #Brazil #CADE #Core Technology Fee #Digital Markets Act #iOS 26.4 #iPhone security #MercadoLibre #Sideloading #Third_Party App Stores
Daily CyberSecurity
The Brazil Breakout: Apple Forced to Unlock iOS for Third-Party App Stores
After the European Union forced iOS to “open up” under the Digital Markets Act (DMA), Brazil has now notched a major win of its own. Brazil’s Administrative Council for Economic Defense (CADE) rec…
16 views
Daily Writeups
⤷ Title: Lens on Liability: Flickr Warns 35 Million Users of Data Exposure via Third-Party Email Leak
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Tue, 10 Feb 2026 09:27:55 +0000
════════════════════════
⌗ Tags: #Data Leak #account security #cybersecurity news 2026 #data breach #data privacy #email service provider #flickr #GDPR #phishing alert #PII exposure #SmugMug #third_party risk
Penetration Testing Tools
Lens on Liability: Flickr Warns 35 Million Users of Data Exposure via Third-Party Email Leak
The ubiquitous photo-hosting platform Flickr has disseminated notifications to its clientele regarding a potential data breach precipitated by
14 views
Daily Writeups
⤷ Title: Beyond Checkboxes: How Quince Reinvented Vendor Security Assessments
════════════════════════
𐀪 Author: Avinash Jain (@logicbomb)
════════════════════════
ⴵ Time: Fri, 13 Feb 2026 10:56:44 GMT
════════════════════════
⌗ Tags: #vendor_security #infosec #information_security #quince #third_party_risk
Medium
Beyond Checkboxes: How Quince Reinvented Vendor Security Assessments
When the Weakest Link Isn’t Human, It’s Your Vendor
43 views
Daily Writeups
⤷ Title: Cultural Crisis: How the Vivaticket Ransomware Attack Paralyzed the Louvre and 3,500 European Landmarks
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Tue, 07 Apr 2026 07:43:03 +0000
════════════════════════
⌗ Tags: #Malware #ANSSI #Cybersecurity 2026 #data breach #Eiffel Tower #France #Irec SAS #Louvre #Museum Security #RansomHouse #ransomware #third_party risk #Vivaticket
Penetration Testing Tools
Cultural Crisis: How the Vivaticket Ransomware Attack Paralyzed the Louvre and 3,500 European Landmarks
The March incursion targeting the Vivaticket ticketing platform did not merely strike a solitary enterprise, but rather convulsed
8 views
Daily Writeups
⤷ Title: The Illusion of the Perimeter: Why Your Biggest Risk Lives in Your Supply Chain
════════════════════════
𐀪 Author: Stephen Adanson Roque
════════════════════════
ⴵ Time: Sun, 12 Apr 2026 11:21:01 GMT
════════════════════════
⌗ Tags: #grc #risk_management #cybersecurity #infosec #third_party_risk
Medium
The Illusion of the Perimeter: Why Your Biggest Risk Lives in Your Supply Chain
Organizations can outsource services, but never accountability. This is why third-party risk is now a matter of operational survival.
13 views
Daily Writeups
⤷ Title: Vimeo Data Exposed in Anodot Supply Chain Attack
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Wed, 29 Apr 2026 01:29:54 +0000
════════════════════════
⌗ Tags: #Data Leak #Anodot #cybersecurity #Data Breach #Google Threat Intelligence #infosec #Metadata Leak #supply chain attack #third_party risk #Vendor Management #Vimeo
Daily CyberSecurity
Vimeo Data Exposed in Anodot Supply Chain Attack
Vimeo metadata and customer emails were exposed via a breach at third-party vendor Anodot. Internal systems remain secure. Learn how to manage vendor risk.
11 views
Daily Writeups
⤷ Title: Vimeo Revokes Access Following Security Breach at Third-Party Partner Anodot
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Thu, 30 Apr 2026 07:21:31 +0000
════════════════════════
⌗ Tags: #Data Leak #Analytics Security #Anodot #Cyber Security 2026 #data breach #data privacy #Infosec #Metadata Exposure #supply chain attack #third_party risk #Vimeo
Penetration Testing Tools
Vimeo Revokes Access Following Security Breach at Third-Party Partner Anodot
The video hosting vanguard Vimeo has disclosed a security transgression impacting its user repository, precipitated by a compromise
9 views
Daily Writeups
⤷ Title: New “TencShell” Malware Weaponizes Open-Source Rshell via Third-Party Access
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Mon, 18 May 2026 12:28:23 +0000
════════════════════════
⌗ Tags: #Malware #C2 Framework #Cato CTRL #Cyber Security #Donut Shellcode #infosec #Malware Analysis #Rshell #supply chain attack #TencShell #third_party risk #threat intelligence
Daily CyberSecurity
New "TencShell" Malware Weaponizes Open-Source Rshell via Third-Party Access
Cato CTRL intercepts "TencShell," a new stealth malware derived from open-source Rshell. Attackers use third-party access to breach networks!
14 views
Daily Writeups
⤷ Title: China-Linked Hackers Deploy “TencShell” Backdoor via Faux Web Font Files
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Wed, 20 May 2026 07:45:33 +0000
════════════════════════
⌗ Tags: #Malware #Cato CTRL Threat Research #Donut Shellcode In_Memory Execution #Fileless Position_Independent Code #Rshell Framework Customization #State_Sponsored Cyber Espionage #Tencent API Impersonation #TencShell Backdoor Malware #Third_Party Identity Compromise #Web Font Masquerading #Windows Registry Persistence
Information Security News
China-Linked Hackers Deploy "TencShell" Backdoor via Faux Web Font Files - Information Security News
In April 2026, threat intelligence specialists at Cato CTRL neutralized a sophisticated network intrusion attempt targeting a major multinational manufacturing enterprise. The adversaries sought to establish a persistent foothold within the corporate perimeter…
19 views
Daily Writeups
⤷ Title: Beyond AirPlay: Apple May Finally Allow Google Cast as System-Default in iOS 27
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Mon, 25 May 2026 08:54:23 +0000
════════════════════════
⌗ Tags: #Apple #Apple AirPlay #Digital Markets Act #DMA interoperability #EU technology regulation #Google Cast #iOS 27 #iPhone streaming #smart home integration #third_party protocol support
30 views
Daily Writeups
⤷ Title: Supply Chain Is the New Front Door: What May 2026 Taught Us About Third-Party Risk
════════════════════════
𐀪 Author: Stanley A.
════════════════════════
ⴵ Time: Thu, 04 Jun 2026 14:06:00 GMT
════════════════════════
⌗ Tags: #penetration_testing #open_source_security #third_party_risk #supply_chain_security #cybersecurity
Medium
Supply Chain Is the New Front Door: What May 2026 Taught Us About Third-Party Risk
“We audited our own code. Our dependencies are someone else’s problem.” — A common assumption. Until it isn’t.
20 views
Daily Writeups
⤷ Title: Sovereign Intervention: EU Mandates Unhindered Third-Party AI Access to WhatsApp API
════════════════════════
𐀪 Author: Do Son
════════════════════════
ⴵ Time: Thu, 11 Jun 2026 06:50:51 +0000
════════════════════════
⌗ Tags: #Technology #market monopoly rules #Meta European Commission order #Tech News #third party AI integration #WhatsApp antitrust API probe #WhatsApp Business gateway tool
Daily CyberSecurity
Sovereign Intervention: EU Mandates Unhindered Third-Party AI Access to WhatsApp API
Discover the latest WhatsApp antitrust API probe. Learn how the European Union forces Meta to reopen its business network to external AI chatbots for free.
20 views
Daily Writeups
⤷ Title: When Trusted Advertising Infrastructure Becomes a Malware Delivery Channel
════════════════════════
𐀪 Author: Jas
════════════════════════
ⴵ Time: Sat, 01 Aug 2026 18:22:25 GMT
════════════════════════
⌗ Tags: #supply_chain_security #application_security #web_security #cybersecurity #third_party_risk
Medium
When Trusted Advertising Infrastructure Becomes a Malware Delivery Channel
A trusted digital advertising platform can reach thousands or even millions of users through websites that depend on its services. That…
17 views