Daily Writeups
@Daily_Writeups
3.85K subscribers
4 photos
134K links
Daily Bug Bounty / Cybersecurity Writeups
Source Code : https://github.com/Spix0r/writeup-miner
Download Telegram
About
Blog
Apps
Platform
Join
Daily Writeups
3.85K subscribers
Daily Writeups
⤷ Title: Grok’s Struggles
════════════════════════
𐀪 Author: Mitsuaki Matsuoka (松岡光昭)
════════════════════════
ⴵ Time: Tue, 07 Apr 2026 06:29:50 GMT
════════════════════════
⌗ Tags: #xs #grok #ai #xai #grok_ai
Medium
Grok’s Struggles
Hello, I am Grok.
44 views
Daily Writeups
⤷ Title: China-Linked Storm-1175 Exploits Zero-Days to Rapidly Deploy Medusa Ransomware
════════════════════════
𐀪 Author: Unknown
════════════════════════
ⴵ Time: Tue, 07 Apr 2026 12:05:00 +0530
════════════════════════
⌗ Tags: No_Tags
36 views
Daily Writeups
⤷ Title: MFASweep: checking if MFA is enabled on multiple Microsoft Services
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Tue, 07 Apr 2026 08:25:36 +0000
════════════════════════
⌗ Tags: #Open Source Tool #MFASweep #Microsoft services
Penetration Testing Tools
MFASweep: checking if MFA is enabled on multiple Microsoft Services
MFASweep is a PowerShell script that attempts to log in to various Microsoft services using a provided set of credentials
19 views
Daily Writeups
⤷ Title: Zero-Day Chaos: The “BlueHammer” Leak and Microsoft’s High-Stakes Privilege Escalation Crisis
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Tue, 07 Apr 2026 07:54:52 +0000
════════════════════════
⌗ Tags: #Vulnerability #BlueHammer #Chaotic Eclipse #GitHub Leak #InfoSec 2026 #LPE #Microsoft Security #Nightmare_Eclipse #privilege escalation #SAM Database #TOCTOU #Windows Zero_Day
Penetration Testing Tools
Zero-Day Chaos: The "BlueHammer" Leak and Microsoft’s High-Stakes Privilege Escalation Crisis
The unauthorized disclosure of functional code for a nascent Windows vulnerability has presented Microsoft with a formidable new
8 views
Daily Writeups
⤷ Title: The Gemini Trap: How a Fake AI Token Checker Stealthily Hijacks Developer Workstations
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Tue, 07 Apr 2026 07:52:30 +0000
════════════════════════
⌗ Tags: #Malware #Anthropic #Contagious Interview #Cursor AI #Cybersecurity 2026 #Developer Security #gemini_ai_checker #North Korea #NPM Malware #OtterCookie #supply chain attack #Windsurf
Penetration Testing Tools
The Gemini Trap: How a Fake AI Token Checker Stealthily Hijacks Developer Workstations
An ostensibly innocuous package for validating Google Gemini tokens manifested within the npm repository, yet beneath its rudimentary
10 views
Daily Writeups
⤷ Title: The “EvilTokens” Surge: Why Device Code Phishing Exploded 37-Fold in 2026
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Tue, 07 Apr 2026 07:46:02 +0000
════════════════════════
⌗ Tags: #Cybercriminals #Account Takeover #Cybersecurity 2026 #Device Code Phishing #EvilTokens #Infosec #Microsoft 365 #OAuth 2.0 #Phishing_as_a_Service #Push Security #Token Theft
Penetration Testing Tools
The "EvilTokens" Surge: Why Device Code Phishing Exploded 37-Fold in 2026
The architecture of account exploitation is undergoing a profound metamorphosis, as adversaries increasingly eschew traditional subversion in favor
9 views
Daily Writeups
⤷ Title: Cultural Crisis: How the Vivaticket Ransomware Attack Paralyzed the Louvre and 3,500 European Landmarks
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Tue, 07 Apr 2026 07:43:03 +0000
════════════════════════
⌗ Tags: #Malware #ANSSI #Cybersecurity 2026 #data breach #Eiffel Tower #France #Irec SAS #Louvre #Museum Security #RansomHouse #ransomware #third_party risk #Vivaticket
Penetration Testing Tools
Cultural Crisis: How the Vivaticket Ransomware Attack Paralyzed the Louvre and 3,500 European Landmarks
The March incursion targeting the Vivaticket ticketing platform did not merely strike a solitary enterprise, but rather convulsed
8 views
Daily Writeups
⤷ Title: The Claude Code Leak: How a 500,000-Line npm Blunder Became a Golden Ticket for Hackers
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Tue, 07 Apr 2026 07:41:30 +0000
════════════════════════
⌗ Tags: #Malware #Anthropic #Claude Code #Cybersecurity 2026 #GhostSocks #malware #npm Leak #Source Code Disclosure #supply chain attack #Vidar Stealer #Zscaler ThreatLabz
Penetration Testing Tools
The Claude Code Leak: How a 500,000-Line npm Blunder Became a Golden Ticket for Hackers
The recent inadvertent exposure of the internal source code for one of the most prominent artificial intelligence instruments
9 views
Daily Writeups
⤷ Title: Zero-Day Alert: Critical FortiClient EMS Flaw Under Active Exploitation—Patch Now!
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Tue, 07 Apr 2026 07:36:13 +0000
════════════════════════
⌗ Tags: #Vulnerability #CISA KEV #CVE_2026_35616 #Cybersecurity 2026 #endpoint security #FortiClient EMS #FortiGuard #Fortinet #Infosec #PSIRT #remote code execution #zero_day
Penetration Testing Tools
Zero-Day Alert: Critical FortiClient EMS Flaw Under Active Exploitation—Patch Now!
Fortinet has issued a stark admonition regarding a critical vulnerability discovered within its FortiClient EMS (Endpoint Management Server)
10 views
Daily Writeups
⤷ Title: BlueHammer: Researcher Drops Functional 0-Day Exploit Targeting Windows Defender
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Tue, 07 Apr 2026 08:46:23 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #0_day #BlueHammer #BlueHammer Exploit #cybersecurity #infosec #LPE #Microsoft #NTFS Junctions #privilege escalation #RPC Hijacking #TOCTOU #Windows Defender
Daily CyberSecurity
BlueHammer: Researcher Drops Functional 0-Day Exploit Targeting Windows Defender
BlueHammer is a functional 0-day exploit targeting Windows Defender’s update engine to achieve SYSTEM privileges. Here is how the unpatched LPE works.
8 views
Daily Writeups
⤷ Title: UAT-10608 Uses a Next.js “React2Shell” Flaw to Map Your Entire Cloud
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Tue, 07 Apr 2026 08:30:39 +0000
════════════════════════
⌗ Tags: #Cybercriminals #Cisco Talos #Cloud Security #Credential Harvesting #CVE_2025_55182 #infosec #Next.js #NEXUS Listener #React2Shell #supply chain attack #UAT_10608 #Web Security
Daily CyberSecurity
UAT-10608 Uses a Next.js "React2Shell" Flaw to Map Your Entire Cloud
Cisco Talos uncovers UAT-10608, an automated campaign using "NEXUS Listener" to harvest Next.js credentials via React2Shell. Patch your cloud tokens now!
9 views
Daily Writeups
⤷ Title: The Hidden Hand: Why Adobe is Surreptitiously Modifying Your System Hosts File
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Tue, 07 Apr 2026 07:28:04 +0000
════════════════════════
⌗ Tags: #Technology #Adobe #Adobe CCD #Chrome Security #Creative Cloud #Cybersecurity 2026 #Hosts File #macOS #privacy #Software Telemetry #Stealth Tracking #windows
Daily CyberSecurity
The Hidden Hand: Why Adobe is Surreptitiously Modifying Your System Hosts File
Adobe is bypassing Chrome security by quietly editing your hosts file to track Creative Cloud installations. Learn how this stealth telemetry works in 2026.
9 views
Daily Writeups
⤷ Title: The Evolution of an Infostealer: Xloader 8.7 Unmasked
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Tue, 07 Apr 2026 07:26:12 +0000
════════════════════════
⌗ Tags: #Malware #C2 Infrastructure #code obfuscation #Credential Theft #cybersecurity #Formbook #information stealer #infosec #Malware Analysis #RC4 Encryption #ThreatLabz #Xloader
Daily CyberSecurity
The Evolution of an Infostealer: Xloader 8.7 Unmasked
ThreatLabz unmasks Xloader 8.7, the evolved successor to Formbook. Learn how its advanced obfuscation and decoy C2s bypass modern security defenses.
5 views
Daily Writeups
⤷ Title: GPUBreach Rowhammer Hijacks GPUs for Full System Root
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Tue, 07 Apr 2026 07:18:56 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #Cloud Security #CUDA #cybersecurity #ECC Memory #GPU Rowhammer #GPUBreach #Hardware Vulnerability #infosec #IOMMU Bypass #Linux Security #nvidia #privilege escalation #root shell #University of Toronto
Daily CyberSecurity
GPUBreach Rowhammer Hijacks GPUs for Full System Root
GPUBreach: A new GPU Rowhammer attack from UofT that bypasses IOMMU and ECC to achieve full system root on NVIDIA systems. GitHub code arrives April 13.
7 views
Daily Writeups
⤷ Title: End of an Era: Linux Kernel 7.1 Finally Bids Farewell to the Iconic Intel 486
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Tue, 07 Apr 2026 07:11:03 +0000
════════════════════════
⌗ Tags: #Linux #Computing News 2026 #CPU History #i486 #Ingo Molnar #Intel 486 #Legacy Hardware #Linux 7.1 #Linux Kernel 7.1 #open_source #x86 Architecture
Daily CyberSecurity
End of an Era: Linux Kernel 7.1 Finally Bids Farewell to the Iconic Intel 486
After 35 years of support, the Linux Kernel is officially retiring the Intel i486. Linux 7.1 marks the beginning of the end for this ancestral CPU lineage.
9 views
Daily Writeups
⤷ Title: Browser Wars 2026: The “Choice Alliance” Slams Microsoft’s Predatory Edge Auto-Launch
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Tue, 07 Apr 2026 07:07:39 +0000
════════════════════════
⌗ Tags: #Windows #Antitrust #Brave Browser #Browser Choice Alliance #European Union #Gatekeeper Registry #google chrome #microsoft edge #Tech News 2026 #User Sovereignty #Vivaldi #Windows 11
Daily CyberSecurity
Browser Wars 2026: The "Choice Alliance" Slams Microsoft’s Predatory Edge Auto-Launch
The Browser Choice Alliance, including Chrome and Vivaldi, condemns Microsoft’s new Edge auto-startup as "predatory proselytization." Is Edge a Gatekeeper?
11 views
Daily Writeups
⤷ Title: The $4.5 Million Squeeze: How Via LA’s Secret H.264 Fee Hike is Shaking the Streaming Industry
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Tue, 07 Apr 2026 07:03:39 +0000
════════════════════════
⌗ Tags: #Technology #AVC #Digital Intellectual Property #FRAND #H.264 #H.265 HEVC #Patent Royalties #Streaming Media #Tech News 2026 #Via Licensing Alliance #Video Codecs
Daily CyberSecurity
The $4.5 Million Squeeze: How Via LA’s Secret H.264 Fee Hike is Shaking the Streaming Industry
Via LA quietly replaces the $100k H.264 annual cap with a tiered system up to $4.5M. Discover how this 2026 patent pool shift impacts global streaming giants.
7 views
Daily Writeups
⤷ Title: Lateral Movement — Turning One Compromise Into Full Control
════════════════════════
𐀪 Author: ghostyjoe
════════════════════════
ⴵ Time: Tue, 07 Apr 2026 07:57:46 GMT
════════════════════════
⌗ Tags: #cybersecurity #kali_linux #hacking #bug_bounty #linux
Medium
🌐 Lateral Movement — Turning One Compromise Into Full Control
By Ghostyjoe
10 views
Daily Writeups
⤷ Title: Privilege Escalation — From Low Access to Full Control (Real-World Guide)
════════════════════════
𐀪 Author: ghostyjoe
════════════════════════
ⴵ Time: Tue, 07 Apr 2026 07:47:13 GMT
════════════════════════
⌗ Tags: #pentesting #linux #bug_bounty #cybersecurity #hacking
Medium
🔺 Privilege Escalation — From Low Access to Full Control (Real-World Guide)
By Ghostyjoe
8 views
Daily Writeups
⤷ Title: 186ms to Total Paralysis: Why “Security Features” are the New Denial of Service
════════════════════════
𐀪 Author: Xia0checkmate
════════════════════════
ⴵ Time: Tue, 07 Apr 2026 07:46:57 GMT
════════════════════════
⌗ Tags: #cybersecurity #denial_of_service #security #hackerone #bug_bounty
Medium
186ms to Total Paralysis: Why “Security Features” are the New Denial of Service
What is more dangerous: A vulnerability that steals one user’s data, or a ‘Security Feature’ that allows an unauthenticated attacker to…
5 views
Daily Writeups
⤷ Title: Easiest Zero-click Account Takeover you’ll ever find
════════════════════════
𐀪 Author: Prayers Khristi
════════════════════════
ⴵ Time: Tue, 07 Apr 2026 07:21:42 GMT
════════════════════════
⌗ Tags: #account_takeover #articles #ethical_hacking #bug_bounty #hacking
Medium
Easiest Zero-click Account Takeover you’ll ever find
“And the forgot password link was sent to attacker’s mail, instead of victim’s mail” 😈 Oops, maybe we just went too ahead.
8 views