Daily Writeups
@Daily_Writeups
3.58K subscribers
2 photos
130K links
Daily Bug Bounty / Cybersecurity Writeups
Source Code : https://github.com/Spix0r/writeup-miner
Download Telegram
About
Blog
Apps
Platform
Join
Daily Writeups
3.58K subscribers
Daily Writeups
⤷ Title: Security Alert: GitLab Issues Patch for High-Severity Vulnerabilities Across CE and EE
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Thu, 09 Apr 2026 02:52:54 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #API security #Code Integrity #CVE_2026_5173 #DevOps Security #gitlab #GitLab CE #GitLab EE #graphql #infosec #privilege escalation #security update #terraform
Daily CyberSecurity
Security Alert: GitLab Issues Patch for High-Severity Vulnerabilities Across CE and EE
GitLab releases critical patches (18.10.3+) for WebSocket flaws, Terraform DoS, and unauthorized privilege demotions. Update your self-managed instances!
29 views
Daily Writeups
⤷ Title: SonicWall Issues Critical Patch for SMA 1000 Series to Stop SQL Injection and MFA Bypasses
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Thu, 09 Apr 2026 02:44:45 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #CVE_2026_4112 #CVE_2026_4114 #CVE_2026_4116 #cybersecurity #infosec #MFA Bypass #privilege escalation #SMA 1000 #SonicWall #sql injection #TOTP #Unicode Encoding
Daily CyberSecurity
SonicWall Issues Critical Patch for SMA 1000 Series to Stop SQL Injection and MFA Bypasses
SonicWall patches critical SMA 1000 flaws, including a 7.2 SQL injection for privilege escalation and Unicode-based MFA bypasses. Secure your VPN—update now!
19 views
Daily Writeups
⤷ Title: New Phishing Campaign Abuses GitHub to Target South Korea
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Thu, 09 Apr 2026 02:01:21 +0000
════════════════════════
⌗ Tags: #Cybercriminals #Cyberespionage #FortiGuard Labs #Github C2 #infosec #LNK malware #LotL #Mirae Asset 3.0 #phishing #powershell #south korea #VBScript #XenoRAT
Daily CyberSecurity
New Phishing Campaign Abuses GitHub to Target South Korea
FortiGuard Labs unmasks a South Korean espionage wave abusing the GitHub API for C2 and using LNK files to stay invisible. Protect your network from LotL.
15 views
Daily Writeups
⤷ Title: The $86,000 Patch: Chrome 147 Crushes “Critical” WebML Memory Flaws
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Thu, 09 Apr 2026 01:54:41 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #browser security #Chrome 147 #CVE_2026_5858 #CVE_2026_5859 #cybersecurity #Google Chrome Update #Heap Buffer Overflow #integer overflow #memory safety #V8 Engine #WebML
Daily CyberSecurity
The $86,000 Patch: Chrome 147 Crushes "Critical" WebML Memory Flaws
Google Chrome 147 is out with critical security fixes for WebML and V8. Protect your browser from overflows and memory leaks—update to version 147 now!
17 views
Daily Writeups
⤷ Title: CISA Warning: Critical Ivanti EPMM Code Injection Vulnerability Under Active Attack
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Thu, 09 Apr 2026 01:46:54 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #CISA KEV #code_injection #CVE_2026_1340 #cybersecurity #infosec #Ivanti EPMM #Ivanti Security Update #Mobile Device Management #patch management #rce
Daily CyberSecurity
CISA Warning: Critical Ivanti EPMM Code Injection Vulnerability Under Active Attack
CISA adds critical Ivanti EPMM flaw (CVE-2026-1340) to KEV catalog. The 9.8 CVSS code injection allows unauthenticated RCE. Patch mandated by April 11!
20 views
Daily Writeups
⤷ Title: Storm: 2026’s Newest Infostealer Bypasses Chrome to Hijack Your MFA Sessions
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Thu, 09 Apr 2026 01:01:38 +0000
════════════════════════
⌗ Tags: #Malware #App_Bound Encryption #browser security #Chrome 127 #Credential Theft #cybersecurity #infosec #Infostealer #MaaS #MFA Bypass #Session Cookie Theft #Storm Malware #Varonis
Daily CyberSecurity
Storm: 2026’s Newest Infostealer Bypasses Chrome to Hijack Your MFA Sessions
Storm malware bypasses Chrome security by shipping encrypted files for server-side decryption. Learn how it steals session cookies to defeat MFA in 2026.
17 views
Daily Writeups
⤷ Title: My Bug Bounty Journey #8: How an Unintentional Mistake Led to a Floor Plan Leak
════════════════════════
𐀪 Author: awchjimmy
════════════════════════
ⴵ Time: Thu, 09 Apr 2026 02:18:23 GMT
════════════════════════
⌗ Tags: #bug_bounty #web_development #cybersecurity
Medium
My Bug Bounty Journey #8: How an Unintentional Mistake Led to a Floor Plan Leak
The Story
22 views
Daily Writeups
⤷ Title: 403 Forbidden Bypass — Manual Techniques & Tools (Real Bug Bounty Guide)
════════════════════════
𐀪 Author: Pradeeptadi
════════════════════════
ⴵ Time: Thu, 09 Apr 2026 02:11:18 GMT
════════════════════════
⌗ Tags: #cybersecurity #ethical_hacking #technology #403_bypass #bug_bounty
Medium
🚫 403 Forbidden Bypass — Manual Techniques & Tools (Real Bug Bounty Guide)
Step-by-step techniques used by bug hunters to turn 403 responses into real vulnerabilities
32 views
Daily Writeups
⤷ Title: The Day Research Proved Reward Hacking is Fundamental (While Anthropic Bought Goodwill With Apache)
════════════════════════
𐀪 Author: Baozilla, Let's go!
════════════════════════
ⴵ Time: Thu, 09 Apr 2026 02:29:09 GMT
════════════════════════
⌗ Tags: #openai #apache_spark #andrej_karpathy #hacking #fundamental_analysis
Medium
The Day Research Proved Reward Hacking is Fundamental (While Anthropic Bought Goodwill With Apache)
April 9, 2026 — thirty-five days after Nvidia abandoned OpenAI, thirty-one days after Karpathy dropped Autoresearch, fifteen days after…
25 views
Daily Writeups
⤷ Title: How AI-Powered EDR Actually Works
════════════════════════
𐀪 Author: Paritosh
════════════════════════
ⴵ Time: Thu, 09 Apr 2026 00:54:40 GMT
════════════════════════
⌗ Tags: #hacking #threat_intelligence #edr #antivirus #cybersecurity
Medium
How AI-Powered EDR Actually Works
Traditional signature-based security can’t keep up with modern attackers. This is the inside story of how AI-driven endpoint detection…
39 views
Daily Writeups
⤷ Title: Microsoft’s Automated Suspensions Almost Silenced VeraCrypt and WireGuard
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Thu, 09 Apr 2026 03:45:23 +0000
════════════════════════
⌗ Tags: #Technology #Code Signing #Developer Support #Driver Signing #Microsoft #open_source #Scott Hanselman #security vulnerability #VeraCrypt #Windows 11 #WireGuard
Daily CyberSecurity
Microsoft’s Automated Suspensions Almost Silenced VeraCrypt and WireGuard
Microsoft’s sudden suspension of VeraCrypt and WireGuard accounts reveals the dangers of automated bureaucracy in the critical path of security software.
27 views
Daily Writeups
⤷ Title: OpenStack Keystone Flaw Grants Full S3 Access via Restricted Credentials, PoC Available
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Thu, 09 Apr 2026 03:26:21 +0000
════════════════════════
⌗ Tags: #Vulnerability #Cloud Security #EC2 API #Identity Management #Keystone #Object Storage #OpenStack #privilege escalation #S3 Security #Swift3
Daily CyberSecurity
OpenStack Keystone Flaw Grants Full S3 Access via Restricted Credentials, PoC Available
OpenStack Keystone CVE-2026-33551 allows low-privilege users to bypass role restrictions and seize full S3 bucket control. Patch your cloud environment now!
22 views
Daily Writeups
⤷ Title: Palo Alto Networks Patches Trio of Security Flaws: From Agent Disabling to System Privileges
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Thu, 09 Apr 2026 03:11:39 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #ADEM #Cortex XDR #CVE_2026_0232 #CVE_2026_0233 #CVE_2026_0234 #cybersecurity #infosec #Microsoft Teams #Palo Alto Networks #privilege escalation #XSIAM #XSOAR
Daily CyberSecurity
Palo Alto Networks Patches Trio of Security Flaws: From Agent Disabling to System Privileges
Palo Alto Networks patches critical flaws in Cortex XDR and ADEM, including a SYSTEM-level privilege escalation. Secure your security tools—patch today!
20 views
Daily Writeups
⤷ Title: Microsoft Ban Leaves VeraCrypt Unable to Sign Critical Windows Drivers
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Thu, 09 Apr 2026 03:00:45 +0000
════════════════════════
⌗ Tags: #Technology #Bootloader #Code Signing #Driver Signature Enforcement #encryption #Microsoft #Mounir Idrassi #open_source #Tech News 2026 #UEFI #VeraCrypt #Windows 11
Daily CyberSecurity
Microsoft Ban Leaves VeraCrypt Unable to Sign Critical Windows Drivers
Microsoft has suspended VeraCrypt’s developer account, blocking critical driver signatures. Without a fix, future Windows updates and system boots are at risk.
23 views
Daily Writeups
⤷ Title: Web Application Security: Hands-On Practice (Chapter 19 from The Web Application Hacker’s Handbook)
════════════════════════
𐀪 Author: Aditya Kumar
════════════════════════
ⴵ Time: Thu, 09 Apr 2026 02:58:04 GMT
════════════════════════
⌗ Tags: #hacking #cybersecurity #chapter_19 #web_application_security #burpsuite
Medium
Web Application Security: Hands-On Practice (Chapter 19 from The Web Application Hacker’s Handbook)
Note: This write-up reflects my learning and hands-on practice based on the book The Web Application Hacker’s Handbook: Discovering and…
31 views
Daily Writeups
⤷ Title: Simple — VulnHub Writeup
════════════════════════
𐀪 Author: Abacu5
════════════════════════
ⴵ Time: Thu, 09 Apr 2026 04:01:58 GMT
════════════════════════
⌗ Tags: #walkthrough #vulnhub #oscp #cybersecurity #pentesting
Medium
Simple — VulnHub Writeup
Platform: VulnHub | Difficulty: Easy | OS: Linux (Ubuntu) | Author: Abacus
33 views
Daily Writeups
⤷ Title: Ghosts in the Hypervisor: Mandiant Exposes the 400-Day vSphere Takeover
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Thu, 09 Apr 2026 06:39:11 +0000
════════════════════════
⌗ Tags: #Malware #BRICKSTEAM #BRICKSTORM #ESXi #Hypervisor Security #infosec #Mandiant #Photon OS #threat intelligence #VCSA #virtualization #VMware Security #vSphere
Daily CyberSecurity
Ghosts in the Hypervisor: Mandiant Exposes the 400-Day vSphere Takeover
Mandiant uncovers BRICKSTORM, a threat actor hiding in VMware vSphere for 393 days. Learn how to close the visibility gap and harden your ESXi infrastructure.
25 views
Daily Writeups
⤷ Title: ️ The 2026 Web3 Security Roadmap
════════════════════════
𐀪 Author: Tabrez Mukadam
════════════════════════
ⴵ Time: Thu, 09 Apr 2026 05:01:02 GMT
════════════════════════
⌗ Tags: #blockchain #ethereum #web3 #bug_bounty #cybersecurity
Medium
🗺️ The 2026 Web3 Security Roadmap: How to Stop Chasing XSS and Start Auditing Smart Contracts
How to Stop Chasing XSS and Start Auditing Smart Contracts
21 views
Daily Writeups
⤷ Title: Case Study — Lessons from the Bangladesh Bank Heist
════════════════════════
𐀪 Author: ASRBD | Cybersecurity Bangladesh
════════════════════════
ⴵ Time: Thu, 09 Apr 2026 06:37:17 GMT
════════════════════════
⌗ Tags: #bangladesh_bank #bank_heist #hacking #asrbd
Medium
Case Study — Lessons from the Bangladesh Bank Heist
The $81 Million Mistake: What the Bangladesh Bank Heist Teaches Us About Cybersecurity
20 views
Daily Writeups
⤷ Title: Lab: DOM XSS in document.write sink using source location.search
════════════════════════
𐀪 Author: PRiTi.EX
════════════════════════
ⴵ Time: Thu, 09 Apr 2026 05:32:15 GMT
════════════════════════
⌗ Tags: #walkthrough #cybersecurity #hacking #portswigger
Medium
Lab: DOM XSS in document.write sink using source location.search
I solved this lab using a pure practical approach, so I’ll explain exactly what I did and why no unnecessary theory, just what actually…
16 views
Daily Writeups
⤷ Title: The Digital Fortress: Why 2026 is the Year to Master Ethical Hacking in Delhi
════════════════════════
𐀪 Author: Varun Papnai
════════════════════════
ⴵ Time: Thu, 09 Apr 2026 05:30:44 GMT
════════════════════════
⌗ Tags: #ethical_hacking #cybersecurity #hacking
Medium
The Digital Fortress: Why 2026 is the Year to Master Ethical Hacking in Delhi
In the heart of India’s power corridor, a new kind of warfare is being waged. It doesn’t involve physical borders or traditional…
24 views