Daily Writeups
@Daily_Writeups
3.55K subscribers
2 photos
130K links
Daily Bug Bounty / Cybersecurity Writeups
Source Code : https://github.com/Spix0r/writeup-miner
Download Telegram
About
Blog
Apps
Platform
Join
Daily Writeups
3.55K subscribers
Daily Writeups
⤷ Title: The Script Editor Shift: How ClickFix Evades macOS 26.4 Security to Deliver Atomic Stealer
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Mon, 13 Apr 2026 07:00:49 +0000
════════════════════════
⌗ Tags: #Malware #AppleScript #Atomic Stealer #ClickFix #cybersecurity #Infostealer #Jamf #macOS 26.4 #macOS security #malware #Script Editor #social engineering
Daily CyberSecurity
The Script Editor Shift: How ClickFix Evades macOS 26.4 Security to Deliver Atomic Stealer
Jamf identifies a macOS ClickFix pivot: attackers now use the Script Editor to bypass Terminal scans and deliver Atomic Stealer. Learn how to stay protected.
7 views
Daily Writeups
⤷ Title: LLM Injection + Unlimited Approval + RCE: The Coinbase AgentKit Attack Chain
════════════════════════
𐀪 Author: xxmrlnxx
════════════════════════
ⴵ Time: Mon, 13 Apr 2026 07:05:04 GMT
════════════════════════
⌗ Tags: #bug_bounty #prompt_injection_attack #web3_security #cybersecurity #ai_security
Medium
LLM Injection + Unlimited Approval + RCE: The Coinbase AgentKit Attack Chain
A prompt injection that crosses three trust boundaries — and why Coinbase called it Medium
7 views
Daily Writeups
⤷ Title: Why I’m Building a Cyber Intelligence Project From Scratch — And What’s Coming.
════════════════════════
𐀪 Author: hersaintel
════════════════════════
ⴵ Time: Mon, 13 Apr 2026 08:44:55 GMT
════════════════════════
⌗ Tags: #technology #hacking #osint #linux #cybersecurity
Medium
Why I’m Building a Cyber Intelligence Project From Scratch — And What’s Coming.
This is day one. Here’s everything.
11 views
Daily Writeups
⤷ Title: The software industry’s Andromeda Strain — suddenly nothing is safe anymore
════════════════════════
𐀪 Author: Steven Boykey Sidley
════════════════════════
ⴵ Time: Mon, 13 Apr 2026 08:02:09 GMT
════════════════════════
⌗ Tags: #anthropic_claude #cybersecurity #hacking #ai #claude_mythos
Medium
The software industry’s Andromeda Strain — suddenly nothing is safe anymore
(image: FlyD for Unsplash)
10 views
Daily Writeups
⤷ Title: Your AI Dashboard Just Became a Spy. Here’s What the Grafana Attack Actually Means for You.
════════════════════════
𐀪 Author: Dhanush N
════════════════════════
ⴵ Time: Mon, 13 Apr 2026 07:54:25 GMT
════════════════════════
⌗ Tags: #grafana #hacking #ai #cybersecurity #devops
Medium
Your AI Dashboard Just Became a Spy. Here’s What the Grafana Attack Actually Means for You.
GrafanaGhost is real, it’s been patched and most of the headlines are missing the full story. Let’s cut through the noise.
11 views
Daily Writeups
⤷ Title: WGEL CTF Write-Up: From Enumeration to Root (Full Walkthrough)
════════════════════════
𐀪 Author: Masresha(rexwho) Habtamu
════════════════════════
ⴵ Time: Mon, 13 Apr 2026 07:28:51 GMT
════════════════════════
⌗ Tags: #hacking #ctf #writeup #cybersecurity #tryhackme
Medium
WGEL CTF Write-Up: From Enumeration to Root (Full Walkthrough)
CTF Name: Wgel ctf CTF
10 views
Daily Writeups
⤷ Title: Advanced Penetration Testing Summer Training Internship Program in Delhi NCR
════════════════════════
𐀪 Author: Crawsec
════════════════════════
ⴵ Time: Mon, 13 Apr 2026 07:38:09 GMT
════════════════════════
⌗ Tags: #penetration_testing #summer_training #summer_training_in_vapt #ethical_hacking #vapt_training
Medium
Advanced Penetration Testing Summer Training Internship Program in Delhi NCR
Firewalls and antivirus software are no longer the only tools available for cybersecurity. Cybercriminals constantly search for security…
14 views
Daily Writeups
⤷ Title: Inside a Web Shell Attack: TryHackMe First Shift CTF — Task 5: Portal Drop
════════════════════════
𐀪 Author: Citadel Cybersec
════════════════════════
ⴵ Time: Mon, 13 Apr 2026 08:41:48 GMT
════════════════════════
⌗ Tags: #incident_response #cybersecurity #tryhackme #soc_analyst #threat_hunting
Medium
Inside a Web Shell Attack: TryHackMe First Shift CTF — Task 5: Portal Drop
A SOC Threat Intelligence Investigation into Brute Force, File Upload Exploitation, and Web Shell Persistence
16 views
Daily Writeups
⤷ Title: The Subdomain Someone Else Owned Before You Noticed
════════════════════════
𐀪 Author: Fateyaly
════════════════════════
ⴵ Time: Mon, 13 Apr 2026 08:06:13 GMT
════════════════════════
⌗ Tags: #cybersecurity #ethical_hacking #coding #programming #technology
Medium
The Subdomain Someone Else Owned Before You Noticed
“That DNS record pointed to nothing… until someone claimed it”
28 views
Daily Writeups
⤷ Title: Discover What’s Trending in Real-Time: The Ultimate Tool for Creators & Marketers
════════════════════════
𐀪 Author: Xtrends
════════════════════════
ⴵ Time: Mon, 13 Apr 2026 07:21:01 GMT
════════════════════════
⌗ Tags: #xs #trend_x #twitter #trending #twitter_marketing
Medium
Discover What’s Trending in Real-Time: The Ultimate Tool for Creators & Marketers
In today’s fast-paced digital world, staying ahead of trends is no longer optional — it’s essential. Whether you’re a content creator…
33 views
Daily Writeups
⤷ Title: North Korea's APT37 Uses Facebook Social Engineering to Deliver RokRAT Malware
════════════════════════
𐀪 Author: Unknown
════════════════════════
ⴵ Time: Mon, 13 Apr 2026 14:45:00 +0530
════════════════════════
⌗ Tags: No_Tags
28 views
Daily Writeups
⤷ Title: Alleged German DDoS-for-Hire Kingpin Behind Fluxstress Caught in Thailand
════════════════════════
𐀪 Author: Deeba Ahmed
════════════════════════
ⴵ Time: Mon, 13 Apr 2026 10:27:31 +0000
════════════════════════
⌗ Tags: #Cyber Crime #Security #Bangkok #CaaS #Cybersecurity #DDOS #Fluxstress #Germany #Malware #Noah Christopher #Ransomware #Thailand
Hackread
Alleged German DDoS-for-Hire Kingpin Behind Fluxstress Caught in Thailand
Alleged German cybercrime figure behind Fluxstress and Neldowner arrested in Thailand after years running global DDoS-for-hire services across countries.
20 views
Daily Writeups
⤷ Title: Beyond the Firewall: How TailVNC Fuses WireGuard and VNC for Untraceable Access
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Mon, 13 Apr 2026 09:05:25 +0000
════════════════════════
⌗ Tags: #Open Source Tool #cybersecurity #Headscale #Penetration Testing #red teaming #Remote Desktop #Tailscale #TailVNC #VNC Server #Windows PERSISTENCE #WireGuard
Penetration Testing Tools
Beyond the Firewall: How TailVNC Fuses WireGuard and VNC for Untraceable Access
TailVNC combines Tailscale’s mesh network with a stealthy VNC server. Bypass Windows Session 0 and secure desktops without ever opening a public port.
13 views
Daily Writeups
⤷ Title: The End of Phone Activation: How to Activate Windows and Office Offline in 2026
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Mon, 13 Apr 2026 10:14:57 +0000
════════════════════════
⌗ Tags: #Technology #Entra ID #Microsoft #Microsoft Product Activation Portal #Office Activation #Offline Activation #Software Licensing #Tech News #Windows 10 #Windows 11 #Windows Server
Daily CyberSecurity
The End of Phone Activation: How to Activate Windows and Office Offline in 2026
Microsoft has retired its legacy telephone activation system. Learn how to use the new Web Activation Portal to license Windows and Office without an internet connection.
11 views
Daily Writeups
⤷ Title: The CPUID Watering Hole Attack Turning CPU-Z into a Trojan
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Mon, 13 Apr 2026 09:15:24 +0000
════════════════════════
⌗ Tags: #Malware #CPU_Z #CPUID #DLL Sideloading #HWMonitor #infosec #kaspersky #malware #STX RAT #Supply Chain Security #watering hole attack
Daily CyberSecurity
The CPUID Watering Hole Attack Turning CPU-Z into a Trojan
In the world of system administration, few tools are as ubiquitous as CPU-Z and HWMonitor. These utilities are the “old reliables” for monitoring hardware health. However, on April 9, …
18 views
Daily Writeups
⤷ Title: OpenAI’s Silent Breach: Why You Must Update Your macOS ChatGPT App Before May 8
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Mon, 13 Apr 2026 09:10:56 +0000
════════════════════════
⌗ Tags: #Malware #Axios #Certificate Revocation #ChatGPT #Codex #cybersecurity #Data Privacy #macOS security #OpenAI #software update #supply chain attack
Daily CyberSecurity
OpenAI’s Silent Breach: Why You Must Update Your macOS ChatGPT App Before May 8
OpenAI revokes legacy macOS certificates after a malicious @Axios library incursion. Update ChatGPT and Codex by May 8, 2026, to avoid software failure.
15 views
Daily Writeups
⤷ Title: Vanished Without a Trace: Why Microsoft is Secretly Purging Open-Source Developer Accounts
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Mon, 13 Apr 2026 09:07:25 +0000
════════════════════════
⌗ Tags: #Technology #cybersecurity #DevRel #Kernel Drivers #Microsoft #open_source #software development #UTM #VeraCrypt #Windows Driver Signing #WireGuard
Daily CyberSecurity
Vanished Without a Trace: Why Microsoft is Secretly Purging Open-Source Developer Accounts
Microsoft is under fire for "expunging" developer accounts for projects like WireGuard and UTM. Learn how these silent bans are paralyzing open-source drivers.
9 views
Daily Writeups
⤷ Title: STX RAT: The New Financial Predator Hiding in the “Start of Text”
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Mon, 13 Apr 2026 09:00:35 +0000
════════════════════════
⌗ Tags: #Malware #AMSI Ghosting #encryption #eSentire #Financial Cybersecurity #HVNC #infosec #malware #rat #Stealth Malware #STX RAT #threat intelligence
Daily CyberSecurity
STX RAT: The New Financial Predator Hiding in the "Start of Text"
eSentire TRU uncovers STX RAT, a modular Trojan targeting finance with HVNC, AMSI Ghosting, and advanced encryption. Secure your perimeter—learn how it works.
9 views
Daily Writeups
⤷ Title: Tek Bir Link ile Uygulamayı Ele Geçirmek: Deep Link ve WebView İstismarı
════════════════════════
𐀪 Author: Mustafa AĞYAR
════════════════════════
ⴵ Time: Mon, 13 Apr 2026 09:08:45 GMT
════════════════════════
⌗ Tags: #webview #application_security #cybersecurity #mobile_security #deeplink
Medium
Tek Bir Link ile Uygulamayı Ele Geçirmek: Deep Link ve WebView İstismarı
Mobil Dünyanın Arka Kapıları: WebView ve DeepLink Zafiyetleri
6 views
Daily Writeups
⤷ Title: The Warning Anthropic’s Claude Mythos Sends and Cybersecurity in the Age of AI
════════════════════════
𐀪 Author: David SEHYEON Baek
════════════════════════
ⴵ Time: Mon, 13 Apr 2026 10:49:35 GMT
════════════════════════
⌗ Tags: #ai #artificial_intelligence #hacking #cybercrime #cyberattack
Medium
The Warning Anthropic’s Claude Mythos Sends and Cybersecurity in the Age of AI
The Warning Anthropic’s Claude Mythos Sends and Cybersecurity in the Age of AI Reports have continued to emerge that U.S. Vice President JD Vance and Treasury Secretary Scott Bessent recently held …
9 views
Daily Writeups
⤷ Title: Putting the “World’s Best EDR” to Sleep: A Journey Through Kernel Chaos
════════════════════════
𐀪 Author: Owais
════════════════════════
ⴵ Time: Mon, 13 Apr 2026 09:23:18 GMT
════════════════════════
⌗ Tags: #infosec #edr #offensive_security #defense_evasion #cybersecurity
Medium
Putting the “World’s Best EDR” to Sleep: A Journey Through Kernel Chaos 😴
Disclaimer ⚠️
11 views