Daily Writeups
@Daily_Writeups
3.53K subscribers
2 photos
130K links
Daily Bug Bounty / Cybersecurity Writeups
Source Code : https://github.com/Spix0r/writeup-miner
Download Telegram
About
Blog
Apps
Platform
Join
Daily Writeups
3.53K subscribers
Daily Writeups
⤷ Title: OpenSSF Flags Malware Campaign on Slack Posing as Linux Foundation Figures
════════════════════════
𐀪 Author: Deeba Ahmed
════════════════════════
ⴵ Time: Mon, 13 Apr 2026 12:51:14 +0000
════════════════════════
⌗ Tags: #Security #Phishing Scam #Scams and Fraud #Cyber Attack #Cybersecurity #Google Workspace #Linux Foundation #Malware #OpenSSF #Phishing #Scam #Slack
Hackread
OpenSSF Flags Malware Campaign on Slack Posing as Linux Foundation Figures
OpenSSF warns hackers impersonate Linux Foundation leaders on Slack, tricking developers into installing malware that can compromise entire systems.
23 views
Daily Writeups
⤷ Title: Why Your Deprecated Endpoints Are an Attacker’s Best Friend: The Rise of Ghost APIs
════════════════════════
𐀪 Author: Arunkumar Mathiyazhagan
════════════════════════
ⴵ Time: Mon, 13 Apr 2026 11:04:54 +0000
════════════════════════
⌗ Tags: #Security #API #Cyber Attack #Cybersecurity #data breach #Ghost API #Vulnerability
Hackread
Why Your Deprecated Endpoints Are an Attacker’s Best Friend: The Rise of Ghost APIs
Ghost APIs are deprecated endpoints left active, exposing systems to attack. Learn how they differ from shadow APIs and why they create hidden security risks.
30 views
Daily Writeups
⤷ Title: High-Severity RCE and XSS Vulnerabilities Patched in Apache Storm 2.8.6
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Mon, 13 Apr 2026 12:17:43 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #Apache Storm #big data #CVE_2026_35337 #CVE_2026_35565 #cybersecurity #Distributed Computing #infosec #Nimbus #Patch Alert #rce #XSS
Daily CyberSecurity
High-Severity RCE and XSS Vulnerabilities Patched in Apache Storm 2.8.6
Apache Storm patches a critical RCE via unsafe deserialization and a stored XSS in its UI. Secure your data streams—upgrade to version 2.8.6 today!
16 views
Daily Writeups
⤷ Title: LiteLLM Under Fire: Triple Threat Vulnerabilities Expose AI Gateways to Total Takeover
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Mon, 13 Apr 2026 12:02:16 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #AI security #Authentication Bypass #CVE_2026_35029 #CVE_2026_35030 #cybersecurity #infosec #LiteLLM #LLM Proxy #OIDC #Python #rce
Daily CyberSecurity
LiteLLM Under Fire: Triple Threat Vulnerabilities Expose AI Gateways to Total Takeover
LiteLLM patches critical 9.4 CVSS flaws, including OIDC cache collisions and pass-the-hash attacks. Secure your AI infrastructure—upgrade to v1.83.0 now!
14 views
Daily Writeups
⤷ Title: How I Found 0-Click Account-Takeover
════════════════════════
𐀪 Author: Athul MS
════════════════════════
ⴵ Time: Mon, 13 Apr 2026 11:37:46 GMT
════════════════════════
⌗ Tags: #penetration_testing #infosec #bug_bounty #bug_bounty_tips #hacking
Medium
How I Found 0-Click Account-Takeover
Hello Hackers!! i’m back with new a finding grab a cup of coffee and enjoy.
20 views
Daily Writeups
⤷ Title: OSWE vs CWEE: Which Web Pentesting Certification Should You Choose?
════════════════════════
𐀪 Author: Andrew Kutuzov
════════════════════════
ⴵ Time: Mon, 13 Apr 2026 11:45:26 GMT
════════════════════════
⌗ Tags: #offensive_security #security #pentesting #hackthebox #application_security
Medium
OSWE vs CWEE: Which Web Pentesting Certification Should You Choose?
Hi everyone,
27 views
Daily Writeups
⤷ Title: AD Pentesting 01: Getting your head right
════════════════════════
𐀪 Author: Niklas Heringer
════════════════════════
ⴵ Time: Mon, 13 Apr 2026 12:03:00 GMT
════════════════════════
⌗ Tags: #pentesting #hacking #active_directory #windows
Medium
AD Pentesting 01: Getting your head right
Hello there! Last year i made a series on the HTB AD intro module, to get an introductionary overview on the whole of “Windows Security”…
15 views
Daily Writeups
⤷ Title: From CVE to Digital Apocalypse: Dissecting CVE-2026–1340 and the Art of Extreme Threat Modeling
════════════════════════
𐀪 Author: Frank Mccausland
════════════════════════
ⴵ Time: Mon, 13 Apr 2026 11:23:18 GMT
════════════════════════
⌗ Tags: #ethical_hacking #apt #cybersecurity #hacking
Medium
From CVE to Digital Apocalypse: Dissecting CVE-2026–1340 and the Art of Extreme Threat Modeling
A journey from an Apache bug to the theoretical collapse of global systems — and the defenses that prevent it.
11 views
Daily Writeups
⤷ Title: HackStar Is the USB Automation Device That’s Changing the Game — Here’s Why Developers Are Going…
════════════════════════
𐀪 Author: Harshal Vij
════════════════════════
ⴵ Time: Mon, 13 Apr 2026 11:20:36 GMT
════════════════════════
⌗ Tags: #ai #raspberry_pi #kickstarter #technology #hacking
Medium
HackStar Is the USB Automation Device That’s Changing the Game — Here’s Why Developers Are Going…
There is a moment in every hardware enthusiast’s life when they encounter a device and think — finally, someone built this.
9 views
Daily Writeups
⤷ Title: Writeup for picoCTF challenge “JAuth”
════════════════════════
𐀪 Author: Walter Moar
════════════════════════
ⴵ Time: Mon, 13 Apr 2026 11:01:01 GMT
════════════════════════
⌗ Tags: #ctf_writeup #picoctf #hacking #ctf #cybersecurity
Medium
Writeup for picoCTF challenge “JAuth”
Manipulate a JWT authentication token to escalate privileges and learn why the “none” algorithm should rarely be used
12 views
Daily Writeups
⤷ Title: Happening This Week: “CVE/FIRST VulnCon 2026,” April 13–16, 2026
════════════════════════
𐀪 Author: CVE Program Blog
════════════════════════
ⴵ Time: Mon, 13 Apr 2026 12:28:38 GMT
════════════════════════
⌗ Tags: #information_technology #cybersecurity #vulnerability #infosec #information_security
Medium
Happening This Week: “CVE/FIRST VulnCon 2026,” April 13–16, 2026
The CVE Program and FIRST are co-hosting VulnCon 2026 this week at the DoubleTree Resort by Hilton Hotel Paradise Valley — Scottsdale, in…
14 views
Daily Writeups
⤷ Title: The Ghost in the Wire
════════════════════════
𐀪 Author: Salena Lark
════════════════════════
ⴵ Time: Mon, 13 Apr 2026 11:21:01 GMT
════════════════════════
⌗ Tags: #supply_chain_attack #cybersecurity #infosec #incident_response #security_culture
Medium
The Ghost in the Wire
For 11 months, something was living inside our network. It breathed quietly, moved carefully, and waited. We never heard it — until the…
17 views
Daily Writeups
⤷ Title: AI Cyber Shockwave: Claude Mythos Triggers Urgent UK Security Response
════════════════════════
𐀪 Author: Cybervolt
════════════════════════
ⴵ Time: Mon, 13 Apr 2026 12:50:18 GMT
════════════════════════
⌗ Tags: #ethical_hacking #artificial_intelligence #cybersecurity #cyberattack #penetration_testing
Medium
AI Cyber Shockwave: Claude Mythos Triggers Urgent UK Security Response
The emergence of AI cybersecurity threats, AI-driven cyber attacks, Claude Mythos, AI security risks, penetration testing, cybersecurity…
17 views
Daily Writeups
⤷ Title: VulnHub DC-8 Walkthrough: The Ultimate Learning Experience
════════════════════════
𐀪 Author: Kalash Kundaliya
════════════════════════
ⴵ Time: Mon, 13 Apr 2026 12:27:07 GMT
════════════════════════
⌗ Tags: #vulnhub #cybersecurity #ethical_hacking #penetration_testing #dc
Medium
VulnHub DC-8 Walkthrough: The Ultimate Learning Experience
This walkthrough is strictly for educational purposes only. Use the knowledge gained responsibly and legally.
18 views
Daily Writeups
⤷ Title: Attacktive Directory: Full Active Directory Compromise Walkthrough
════════════════════════
𐀪 Author: Anonymousas
════════════════════════
ⴵ Time: Mon, 13 Apr 2026 11:52:28 GMT
════════════════════════
⌗ Tags: #ethical_hacking #cybersecurity #penetration_testing #tryhackme #active_directory
Medium
Attacktive Directory: Full Active Directory Compromise Walkthrough
🛡️ Attacktive Directory — A Complete Active Directory Compromise (TryHackMe Walkthrough)
16 views
Daily Writeups
⤷ Title: Mr Robot CTF | TryHackMe CTF Writeup
════════════════════════
𐀪 Author: Debmalya Mondal⚡
════════════════════════
ⴵ Time: Mon, 13 Apr 2026 12:41:35 GMT
════════════════════════
⌗ Tags: #tryhackme #tryhackme_walkthrough #mr_robot #ctf #ctf_writeup
Medium
Mr Robot CTF | TryHackMe CTF Writeup
The world is a dangerous place, Elliott, not because of those who do evil, but because of those who look on and do nothing
29 views
Daily Writeups
⤷ Title: TryHackMeWriteup: Have A Break
════════════════════════
𐀪 Author: Melisa Nyamukondiwa
════════════════════════
ⴵ Time: Mon, 13 Apr 2026 12:13:10 GMT
════════════════════════
⌗ Tags: #cybersecurity #tryhackme #tryhackme_writeup #osint
Medium
TryHackMeWriteup: Have A Break
Writeup for the TryHackMe challenge: Have a Break, inspired by the missing Kit Kat incident.
50 views
Daily Writeups
⤷ Title: ⚡ Weekly Recap: Fiber Optic Spying, Windows Rootkit, AI Vulnerability Hunting and More
════════════════════════
𐀪 Author: Unknown
════════════════════════
ⴵ Time: Mon, 13 Apr 2026 18:31:00 +0530
════════════════════════
⌗ Tags: No_Tags
40 views
Daily Writeups
⤷ Title: Log4j’s “Silent” Security Gap: New Advisories Warn of Data Loss and TLS Bypasses
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Mon, 13 Apr 2026 14:03:19 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #Apache Log4j #CVE_2026_34477 #CVE_2026_34480 #cybersecurity #infosec #Java security #Log Injection #Log4j 2.25.4 #Syslog Security #TLS Bypass
Daily CyberSecurity
Log4j’s "Silent" Security Gap: New Advisories Warn of Data Loss and TLS Bypasses
Apache Log4j 2.25.4 fixes 4 "silent" flaws, including TLS bypasses and log injection. Secure your infrastructure—upgrade now to prevent data loss.
32 views
Daily Writeups
⤷ Title: Apache ActiveMQ Patches “OOM” and MQTT Protocol Flaws
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Mon, 13 Apr 2026 13:30:30 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #Apache ActiveMQ #Broker Security #CVE_2026_39304 #CVE_2026_40046 #Denial of Service #infosec #integer overflow #memory exhaustion #MQTT #TLSv1.3
Daily CyberSecurity
Apache ActiveMQ Patches "OOM" and MQTT Protocol Flaws
Apache ActiveMQ patches critical TLSv1.3 memory exhaustion (CVE-2026-39304) and an MQTT regression. Upgrade to 6.2.4 or 5.19.5 to secure your broker!
15 views
Daily Writeups
⤷ Title: Triple Security Advisory Prompts Immediate Upgrade to Apache OpenMeetings Version 9.0.0
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Mon, 13 Apr 2026 13:03:45 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #Apache Software Foundation #cryptography #CVE_2026_33266 #infosec #OpenMeetings #REST Security #security update #Video Conferencing Security #vulnerability management
Daily CyberSecurity
Triple Security Advisory Prompts Immediate Upgrade to Apache OpenMeetings Version 9.0.0
Apache OpenMeetings 9.0.0 fixes critical flaws including hard-coded "remember-me" keys and REST login credential exposure. Secure your video suite today!
21 views