Daily Writeups
@Daily_Writeups
3.53K subscribers
2 photos
130K links
Daily Bug Bounty / Cybersecurity Writeups
Source Code : https://github.com/Spix0r/writeup-miner
Download Telegram
About
Blog
Apps
Platform
Join
Daily Writeups
3.53K subscribers
Daily Writeups
⤷ Title: Alleged German DDoS-for-Hire Kingpin Behind Fluxstress Caught in Thailand
════════════════════════
𐀪 Author: Deeba Ahmed
════════════════════════
ⴵ Time: Mon, 13 Apr 2026 10:27:31 +0000
════════════════════════
⌗ Tags: #Cyber Crime #Security #Bangkok #CaaS #Cybersecurity #DDOS #Fluxstress #Germany #Malware #Noah Christopher #Ransomware #Thailand
Hackread
Alleged German DDoS-for-Hire Kingpin Behind Fluxstress Caught in Thailand
Alleged German cybercrime figure behind Fluxstress and Neldowner arrested in Thailand after years running global DDoS-for-hire services across countries.
20 views
Daily Writeups
⤷ Title: Beyond the Firewall: How TailVNC Fuses WireGuard and VNC for Untraceable Access
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Mon, 13 Apr 2026 09:05:25 +0000
════════════════════════
⌗ Tags: #Open Source Tool #cybersecurity #Headscale #Penetration Testing #red teaming #Remote Desktop #Tailscale #TailVNC #VNC Server #Windows PERSISTENCE #WireGuard
Penetration Testing Tools
Beyond the Firewall: How TailVNC Fuses WireGuard and VNC for Untraceable Access
TailVNC combines Tailscale’s mesh network with a stealthy VNC server. Bypass Windows Session 0 and secure desktops without ever opening a public port.
13 views
Daily Writeups
⤷ Title: The End of Phone Activation: How to Activate Windows and Office Offline in 2026
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Mon, 13 Apr 2026 10:14:57 +0000
════════════════════════
⌗ Tags: #Technology #Entra ID #Microsoft #Microsoft Product Activation Portal #Office Activation #Offline Activation #Software Licensing #Tech News #Windows 10 #Windows 11 #Windows Server
Daily CyberSecurity
The End of Phone Activation: How to Activate Windows and Office Offline in 2026
Microsoft has retired its legacy telephone activation system. Learn how to use the new Web Activation Portal to license Windows and Office without an internet connection.
11 views
Daily Writeups
⤷ Title: The CPUID Watering Hole Attack Turning CPU-Z into a Trojan
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Mon, 13 Apr 2026 09:15:24 +0000
════════════════════════
⌗ Tags: #Malware #CPU_Z #CPUID #DLL Sideloading #HWMonitor #infosec #kaspersky #malware #STX RAT #Supply Chain Security #watering hole attack
Daily CyberSecurity
The CPUID Watering Hole Attack Turning CPU-Z into a Trojan
In the world of system administration, few tools are as ubiquitous as CPU-Z and HWMonitor. These utilities are the “old reliables” for monitoring hardware health. However, on April 9, …
18 views
Daily Writeups
⤷ Title: OpenAI’s Silent Breach: Why You Must Update Your macOS ChatGPT App Before May 8
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Mon, 13 Apr 2026 09:10:56 +0000
════════════════════════
⌗ Tags: #Malware #Axios #Certificate Revocation #ChatGPT #Codex #cybersecurity #Data Privacy #macOS security #OpenAI #software update #supply chain attack
Daily CyberSecurity
OpenAI’s Silent Breach: Why You Must Update Your macOS ChatGPT App Before May 8
OpenAI revokes legacy macOS certificates after a malicious @Axios library incursion. Update ChatGPT and Codex by May 8, 2026, to avoid software failure.
15 views
Daily Writeups
⤷ Title: Vanished Without a Trace: Why Microsoft is Secretly Purging Open-Source Developer Accounts
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Mon, 13 Apr 2026 09:07:25 +0000
════════════════════════
⌗ Tags: #Technology #cybersecurity #DevRel #Kernel Drivers #Microsoft #open_source #software development #UTM #VeraCrypt #Windows Driver Signing #WireGuard
Daily CyberSecurity
Vanished Without a Trace: Why Microsoft is Secretly Purging Open-Source Developer Accounts
Microsoft is under fire for "expunging" developer accounts for projects like WireGuard and UTM. Learn how these silent bans are paralyzing open-source drivers.
9 views
Daily Writeups
⤷ Title: STX RAT: The New Financial Predator Hiding in the “Start of Text”
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Mon, 13 Apr 2026 09:00:35 +0000
════════════════════════
⌗ Tags: #Malware #AMSI Ghosting #encryption #eSentire #Financial Cybersecurity #HVNC #infosec #malware #rat #Stealth Malware #STX RAT #threat intelligence
Daily CyberSecurity
STX RAT: The New Financial Predator Hiding in the "Start of Text"
eSentire TRU uncovers STX RAT, a modular Trojan targeting finance with HVNC, AMSI Ghosting, and advanced encryption. Secure your perimeter—learn how it works.
9 views
Daily Writeups
⤷ Title: Tek Bir Link ile Uygulamayı Ele Geçirmek: Deep Link ve WebView İstismarı
════════════════════════
𐀪 Author: Mustafa AĞYAR
════════════════════════
ⴵ Time: Mon, 13 Apr 2026 09:08:45 GMT
════════════════════════
⌗ Tags: #webview #application_security #cybersecurity #mobile_security #deeplink
Medium
Tek Bir Link ile Uygulamayı Ele Geçirmek: Deep Link ve WebView İstismarı
Mobil Dünyanın Arka Kapıları: WebView ve DeepLink Zafiyetleri
6 views
Daily Writeups
⤷ Title: The Warning Anthropic’s Claude Mythos Sends and Cybersecurity in the Age of AI
════════════════════════
𐀪 Author: David SEHYEON Baek
════════════════════════
ⴵ Time: Mon, 13 Apr 2026 10:49:35 GMT
════════════════════════
⌗ Tags: #ai #artificial_intelligence #hacking #cybercrime #cyberattack
Medium
The Warning Anthropic’s Claude Mythos Sends and Cybersecurity in the Age of AI
The Warning Anthropic’s Claude Mythos Sends and Cybersecurity in the Age of AI Reports have continued to emerge that U.S. Vice President JD Vance and Treasury Secretary Scott Bessent recently held …
9 views
Daily Writeups
⤷ Title: Putting the “World’s Best EDR” to Sleep: A Journey Through Kernel Chaos
════════════════════════
𐀪 Author: Owais
════════════════════════
ⴵ Time: Mon, 13 Apr 2026 09:23:18 GMT
════════════════════════
⌗ Tags: #infosec #edr #offensive_security #defense_evasion #cybersecurity
Medium
Putting the “World’s Best EDR” to Sleep: A Journey Through Kernel Chaos 😴
Disclaimer ⚠️
11 views
Daily Writeups
⤷ Title: The Cybersecurity Gap No One Is Talking About: Claude Mythos vs Opus 4.6
════════════════════════
𐀪 Author: Lakshita Gulliya
════════════════════════
ⴵ Time: Mon, 13 Apr 2026 09:13:23 GMT
════════════════════════
⌗ Tags: #cybersecurity #technology_trends #ai_security #infosec #artificial_intelligence
Medium
The Cybersecurity Gap No One Is Talking About: Claude Mythos vs Opus 4.6
Most people think AI in cybersecurity is just getting better.
10 views
Daily Writeups
⤷ Title: TryHackMe “Light” Odasında SQLite Injection ve Filtre Atlatma
════════════════════════
𐀪 Author: Mevlüt Kamalı
════════════════════════
ⴵ Time: Mon, 13 Apr 2026 10:09:54 GMT
════════════════════════
⌗ Tags: #cybersecurity #ctf #sql_injection #ethical_hacking #penetration_testing
Medium
TryHackMe “Light” Odasında SQLite Injection ve Filtre Atlatma
Bugün, TryHackMe platformunda yer alan ve temel veritabanı güvenliğini anlamak için harika bir pratik sunan Light odasını ele aldım. Çözüm…
10 views
Daily Writeups
⤷ Title: TRANSITIVE-TRUST-CHAIN
════════════════════════
𐀪 Author: Clement Da Cruz
════════════════════════
ⴵ Time: Mon, 13 Apr 2026 09:27:09 GMT
════════════════════════
⌗ Tags: #cybersecurity #cloud_security #penetration_testing #aws
Medium
TRANSITIVE-TRUST-CHAIN
How I Broke Into Cloud Admin by Chaining Three Delegations Nobody Audited
10 views
Daily Writeups
⤷ Title: TryHackMe | Chain Reaction | WriteUp
════════════════════════
𐀪 Author: Axoloth
════════════════════════
ⴵ Time: Mon, 13 Apr 2026 10:06:15 GMT
════════════════════════
⌗ Tags: #tryhackme_walkthrough #tryhackme #cyber_security_awareness #cybersecurity #tryhackme_writeup
Medium
TryHackMe | Chain Reaction | WriteUp
Hunt down an Axios chain attack before the chain reaction spreads.
10 views
Daily Writeups
⤷ Title: Building a Pentesting Lab on Apple Silicon: Installing Kali Linux with UTM on MacBook M4
════════════════════════
𐀪 Author: Nauval Dzakwan Baihaqi
════════════════════════
ⴵ Time: Mon, 13 Apr 2026 09:31:25 GMT
════════════════════════
⌗ Tags: #kali_linux_on_virtualbox #virtualization #ethical_hacking #pentesting #cybersecurity
Medium
Building a Pentesting Lab on Apple Silicon: Installing Kali Linux with UTM on MacBook M4
Halo semuanya! Saya Nauval Dzakwan Baihaqi, mahasiswa Universitas Pendidikan Indonesia yang saat ini sedang mendalami dunia Cybersecurity…
21 views
Daily Writeups
⤷ Title: EspoCRM v9.3.4: From Extension Upload to Remote Code Execution (RCE)
════════════════════════
𐀪 Author: Ali İltizar
════════════════════════
ⴵ Time: Mon, 13 Apr 2026 09:28:55 GMT
════════════════════════
⌗ Tags: #cms #rce
Medium
EspoCRM v9.3.4: From Extension Upload to Remote Code Execution (RCE)
In this article, I will detail an Authenticated Remote Code Execution (RCE) vulnerability I discovered in EspoCRM (<= v9.3.4). This flaw…
30 views
Daily Writeups
⤷ Title: Your MTTD Looks Great. Your Post-Alert Gap Doesn't
════════════════════════
𐀪 Author: Unknown
════════════════════════
ⴵ Time: Mon, 13 Apr 2026 17:11:00 +0530
════════════════════════
⌗ Tags: No_Tags
29 views
Daily Writeups
⤷ Title: OpenSSF Flags Malware Campaign on Slack Posing as Linux Foundation Figures
════════════════════════
𐀪 Author: Deeba Ahmed
════════════════════════
ⴵ Time: Mon, 13 Apr 2026 12:51:14 +0000
════════════════════════
⌗ Tags: #Security #Phishing Scam #Scams and Fraud #Cyber Attack #Cybersecurity #Google Workspace #Linux Foundation #Malware #OpenSSF #Phishing #Scam #Slack
Hackread
OpenSSF Flags Malware Campaign on Slack Posing as Linux Foundation Figures
OpenSSF warns hackers impersonate Linux Foundation leaders on Slack, tricking developers into installing malware that can compromise entire systems.
23 views
Daily Writeups
⤷ Title: Why Your Deprecated Endpoints Are an Attacker’s Best Friend: The Rise of Ghost APIs
════════════════════════
𐀪 Author: Arunkumar Mathiyazhagan
════════════════════════
ⴵ Time: Mon, 13 Apr 2026 11:04:54 +0000
════════════════════════
⌗ Tags: #Security #API #Cyber Attack #Cybersecurity #data breach #Ghost API #Vulnerability
Hackread
Why Your Deprecated Endpoints Are an Attacker’s Best Friend: The Rise of Ghost APIs
Ghost APIs are deprecated endpoints left active, exposing systems to attack. Learn how they differ from shadow APIs and why they create hidden security risks.
30 views
Daily Writeups
⤷ Title: High-Severity RCE and XSS Vulnerabilities Patched in Apache Storm 2.8.6
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Mon, 13 Apr 2026 12:17:43 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #Apache Storm #big data #CVE_2026_35337 #CVE_2026_35565 #cybersecurity #Distributed Computing #infosec #Nimbus #Patch Alert #rce #XSS
Daily CyberSecurity
High-Severity RCE and XSS Vulnerabilities Patched in Apache Storm 2.8.6
Apache Storm patches a critical RCE via unsafe deserialization and a stored XSS in its UI. Secure your data streams—upgrade to version 2.8.6 today!
16 views
Daily Writeups
⤷ Title: LiteLLM Under Fire: Triple Threat Vulnerabilities Expose AI Gateways to Total Takeover
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Mon, 13 Apr 2026 12:02:16 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #AI security #Authentication Bypass #CVE_2026_35029 #CVE_2026_35030 #cybersecurity #infosec #LiteLLM #LLM Proxy #OIDC #Python #rce
Daily CyberSecurity
LiteLLM Under Fire: Triple Threat Vulnerabilities Expose AI Gateways to Total Takeover
LiteLLM patches critical 9.4 CVSS flaws, including OIDC cache collisions and pass-the-hash attacks. Secure your AI infrastructure—upgrade to v1.83.0 now!
14 views