Daily Writeups
@Daily_Writeups
3.53K subscribers
2 photos
130K links
Daily Bug Bounty / Cybersecurity Writeups
Source Code : https://github.com/Spix0r/writeup-miner
Download Telegram
About
Blog
Apps
Platform
Join
Daily Writeups
3.53K subscribers
Daily Writeups
⤷ Title: Offensive AI Security: Essentials You Should Know
════════════════════════
𐀪 Author: Ryan Brooks
════════════════════════
ⴵ Time: Fri, 20 Mar 2026 06:29:30 GMT
════════════════════════
⌗ Tags: #ai_offensive_security #ai_threat_detection #cybersecurity #ethical_hacking
Medium
Offensive AI Security: Essentials You Should Know
Artificial Intelligence (AI) is transforming industries worldwide, but as AI adoption grows, so do the risks associated with it. Offensive…
25 views
Daily Writeups
⤷ Title: Machine-Speed Attacks: The 2026 Era of Zero-Hour Exploitation
════════════════════════
𐀪 Author: Cynox Security LLP.
════════════════════════
ⴵ Time: Fri, 20 Mar 2026 06:09:35 GMT
════════════════════════
⌗ Tags: #ethical_hacking #cybersecurity #cyber_security_awareness #information_security #ai
Medium
Machine-Speed Attacks: The 2026 Era of Zero-Hour Exploitation
In 2026, the traditional window of vulnerability has effectively collapsed. The industry has moved from zero-day threats to zero-hour…
37 views
Daily Writeups
⤷ Title: The System Behind Large-Scale Social Media Operations
════════════════════════
𐀪 Author: Mquy
════════════════════════
ⴵ Time: Fri, 20 Mar 2026 05:13:54 GMT
════════════════════════
⌗ Tags: #twitter_strategy #xs #twitter_marketing #twitter_automation #twitter_tips
Medium
The System Behind Large-Scale Social Media Operations
As social media platforms continue to evolve, the way accounts are managed is also undergoing a fundamental shift. What was once a…
46 views
Daily Writeups
⤷ Title: Developer Alert: “CursorJack” Technique Weaponizes Deeplinks to Hijack Cursor IDE
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Fri, 20 Mar 2026 08:03:02 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #Arbitrary Code Execution #Cursor IDE #CursorJack #cybersecurity #developer security #infosec #MCP Deeplinks #Proofpoint #supply chain attack #threat intelligence
Daily CyberSecurity
Developer Alert: "CursorJack" Technique Weaponizes Deeplinks to Hijack Cursor IDE
Proofpoint details 'CursorJack', a novel exploit using malicious MCP deeplinks in the Cursor AI editor to execute arbitrary code on developer machines.
36 views
Daily Writeups
⤷ Title: Operation Takedown: DOJ and Global Allies Smash 30-Terabit IoT Botnet Empire
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Fri, 20 Mar 2026 07:39:09 +0000
════════════════════════
⌗ Tags: #Malware #AISURU #Botnet Takedown #Cybercrime #cybersecurity #DDoS attacks #DOJ #infosec #IoT Botnets #Kimwolf #threat intelligence
Daily CyberSecurity
Operation Takedown: DOJ and Global Allies Smash 30-Terabit IoT Botnet Empire
The US DOJ, alongside Canada and Germany, has dismantled four massive IoT botnets responsible for record-breaking 30 Tbps DDoS attacks worldwide.
29 views
Daily Writeups
⤷ Title: The AI-Powered Arsenal: How ‘Forbidden Hyena’ Uses Generative AI to Spawn BlackReaperRAT
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Fri, 20 Mar 2026 07:15:31 +0000
════════════════════════
⌗ Tags: #Cybercriminals #AI Malware #BI.ZONE #BlackReaperRAT #cybersecurity #Forbidden Hyena #Generative AI #infosec #living_off_the_land #Milkyway Ransomware #threat intelligence
Daily CyberSecurity
The AI-Powered Arsenal: How 'Forbidden Hyena' Uses Generative AI to Spawn BlackReaperRAT
BI.ZONE uncovers Forbidden Hyena using AI-generated code to deploy the new BlackReaperRAT and Milkyway ransomware in highly evasive cyberattacks.
26 views
Daily Writeups
⤷ Title: The Silent Leak: Critical 9.1 CVSS Spring Security Flaw Strips Away Vital HTTP Headers
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Fri, 20 Mar 2026 07:13:32 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #Cache Poisoning #CVE_2026_22732 #CVSS 9.1 #cybersecurity #data leak #HTTP Headers #infosec #Java security #Spring Security #Vulnerability
Daily CyberSecurity
The Silent Leak: Critical 9.1 CVSS Spring Security Flaw Strips Away Vital HTTP Headers
A critical 9.1 CVSS flaw in Spring Security (CVE-2026-22732) fails to write HTTP headers, exposing Java apps to severe data leaks. Update immediately.
12 views
Daily Writeups
⤷ Title: Is Your Office Fully Locked to Stop Hacking?
════════════════════════
𐀪 Author: Behawk Infosec
════════════════════════
ⴵ Time: Fri, 20 Mar 2026 08:27:09 GMT
════════════════════════
⌗ Tags: #cybersecurity #behawkinfosec #hacking #data_protection
Medium
Is Your Office Fully Locked to Stop Hacking?
Every evening, you lock your office before leaving. It’s routine. It feels safe.
14 views
Daily Writeups
⤷ Title: Attribution Methodology: How to Build, Defend, and Challenge a Threat Actor Attribution
════════════════════════
𐀪 Author: Andrey Pautov
════════════════════════
ⴵ Time: Fri, 20 Mar 2026 08:25:31 GMT
════════════════════════
⌗ Tags: #cybersecurity #hacking #information_security #cyber_threat_intelligence #research
Medium
Attribution Methodology: How to Build, Defend, and Challenge a Threat Actor Attribution
A practitioner’s guide for CTI analysts — from evidence collection to defensible conclusions
16 views
Daily Writeups
⤷ Title: Breaking Templates: Solving an SSTI2 Challenge (Jinja2 Exploit Walkthrough)
════════════════════════
𐀪 Author: Hamza Sajid
════════════════════════
ⴵ Time: Fri, 20 Mar 2026 07:45:54 GMT
════════════════════════
⌗ Tags: #picoctf #ctf #python #hacking #cybersecurity
Medium
Breaking Templates: Solving an SSTI2 Challenge (Jinja2 Exploit Walkthrough)
While working through a Capture The Flag (CTF) challenge named SSTI2, I ran into something that felt confusing at first
21 views
Daily Writeups
⤷ Title: A Day in the Life of a Cyber Security Analyst in Mumbai
════════════════════════
𐀪 Author: Sudarshan Drivedi
════════════════════════
ⴵ Time: Fri, 20 Mar 2026 07:21:38 GMT
════════════════════════
⌗ Tags: #hacking #cybersecurity_jobs #cybersecurity
Medium
A Day in the Life of a Cyber Security Analyst in Mumbai
When people hear “cyber security,” they often imagine hackers typing fast on multiple screens.
18 views
Daily Writeups
⤷ Title: How does your computer gets an IP on the network?
════════════════════════
𐀪 Author: K.
════════════════════════
ⴵ Time: Fri, 20 Mar 2026 07:17:16 GMT
════════════════════════
⌗ Tags: #hacking #networking #low_level_programming
Medium
How does your computer gets an IP on the network?
All systems are connected to the internet via cables. Your devices connect to a router, and those routers connect to other routers through…
18 views
Daily Writeups
⤷ Title: Umbrella | TryHackMe | Walkthrough
════════════════════════
𐀪 Author: Sornphut
════════════════════════
ⴵ Time: Fri, 20 Mar 2026 08:42:58 GMT
════════════════════════
⌗ Tags: #tryhackme_writeup #tryhackme #linux #tryhackme_walkthrough #web_development
Medium
Umbrella | TryHackMe | Walkthrough
Nmap
18 views
Daily Writeups
⤷ Title: Building and Securing a Silly Water Shop with Azure DevOps, Postman, and OWASP ZAP
════════════════════════
𐀪 Author: Jonathan Garcia
════════════════════════
ⴵ Time: Fri, 20 Mar 2026 08:34:34 GMT
════════════════════════
⌗ Tags: #zap #azure_devops #cybersecurity #tryhackme #devsecops
Medium
Building and Securing a Silly Water Shop with Azure DevOps, Postman, and OWASP ZAP
A hands-on DevSecOps project using Azure DevOps, Postman, App Service, Semgrep, and OWASP ZAP.
23 views
Daily Writeups
⤷ Title: SOC (Day 1)- Investigation — PCAP Analysis
════════════════════════
𐀪 Author: Adithya Hettiarachchi
════════════════════════
ⴵ Time: Fri, 20 Mar 2026 06:56:57 GMT
════════════════════════
⌗ Tags: #ethical_hacking #pcap_analysis #soc #cyber_security_awareness #cybersecurity
Medium
SOC (Day 1)- Investigation — PCAP Analysis
Introduction
26 views
Daily Writeups
⤷ Title: Why You Should Build Outside Your Cybersecurity Job
════════════════════════
𐀪 Author: EINITIAL24
════════════════════════
ⴵ Time: Fri, 20 Mar 2026 06:54:35 GMT
════════════════════════
⌗ Tags: #cybersecurity_jobs #jobs #careers #ethical_hacking #cybersecurity
Medium
Why You Should Build Outside Your Cybersecurity Job
Cybersecurity is one of the most intellectually demanding and rapidly evolving fields today. Every day brings new threats, new…
41 views
Daily Writeups
⤷ Title: Secure Your AWS API Gateway with AWS WAF: A Practical Guide
════════════════════════
𐀪 Author: Ashish Prajapat
════════════════════════
ⴵ Time: Fri, 20 Mar 2026 08:47:54 GMT
════════════════════════
⌗ Tags: #cloud_security #aws_waf #api_gateway #api_security #aws
Medium
Secure Your AWS API Gateway with AWS WAF: A Practical Guide
Introduction
47 views
Daily Writeups
⤷ Title: The Importance of Behavioral Analytics in AI-Enabled Cyber Attacks
════════════════════════
𐀪 Author: Unknown
════════════════════════
ⴵ Time: Fri, 20 Mar 2026 15:30:00 +0530
════════════════════════
⌗ Tags: No_Tags
34 views
Daily Writeups
⤷ Title: Game Over: Vidar Stealer 2.0 is Hijacking Gamers with Fake Cheats
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Fri, 20 Mar 2026 10:08:46 +0000
════════════════════════
⌗ Tags: #Malware #Acronis TRU #cybersecurity #Data Breach #Game Cheats Malware #Gaming Security #GitHub Malware #infosec #Infostealer #threat intelligence #Vidar Stealer 2.0
Daily CyberSecurity
Game Over: Vidar Stealer 2.0 is Hijacking Gamers with Fake Cheats
Acronis uncovers a massive campaign targeting gamers with fake cheats to deliver Vidar Stealer 2.0, a highly evasive malware stealing crypto and passwords.
33 views
Daily Writeups
⤷ Title: The Invisible Breach: ‘Operation GhostMail’ Uses Zero-Click XSS to Hijack Ukrainian Webmail
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Fri, 20 Mar 2026 09:11:42 +0000
════════════════════════
⌗ Tags: #Cyber Security #APT28 #CVE_2025_66376 #Cyberespionage #cybersecurity #infosec #Operation GhostMail #Seqrite Labs #threat intelligence #Zero_Click XSS #Zimbra Vulnerability
Daily CyberSecurity
The Invisible Breach: 'Operation GhostMail' Uses Zero-Click XSS to Hijack Ukrainian Webmail
Seqrite Labs uncovers Operation GhostMail, an APT28-linked campaign using a zero-click XSS flaw in Zimbra to silently hijack Ukrainian government webmail.
23 views
Daily Writeups
⤷ Title: Breaking the Checkout: Price Manipulation
════════════════════════
𐀪 Author: Parth Narula
════════════════════════
ⴵ Time: Fri, 20 Mar 2026 10:56:16 GMT
════════════════════════
⌗ Tags: #bug_bounty #bug_bounty_tips #bug_bounty_writeup #cybersecurity #pentesting
Medium
Breaking the Checkout: Price Manipulation
Hey Hackers, I am Parth Narula. A penetration tester, bug hunter, red teamer and overall a security researcher. I live for those moments…
24 views