Daily Writeups
@Daily_Writeups
3.54K subscribers
2 photos
130K links
Daily Bug Bounty / Cybersecurity Writeups
Source Code : https://github.com/Spix0r/writeup-miner
Download Telegram
About
Blog
Apps
Platform
Join
Daily Writeups
3.54K subscribers
Daily Writeups
⤷ Title: The $500 Countermove: Can Microsoft’s College Bundle Stop the MacBook Neo Defection?
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Thu, 16 Apr 2026 04:37:12 +0000
════════════════════════
⌗ Tags: #Technology #Back to School 2026 #HP Omnibook #Lenovo IdeaPad Slim 3x #MacBook Neo #Microsoft 365 Premium #Microsoft College Offer #Student Laptops #Tech Deals #Windows 11 #Xbox Game Pass Ultimate
Daily CyberSecurity
The $500 Countermove: Can Microsoft’s College Bundle Stop the MacBook Neo Defection?
Microsoft fights back! Buy a Windows 11 laptop and get $500 in perks, including Xbox Game Pass and Microsoft 365. Is it enough to beat the $500 MacBook Neo?
30 views
Daily Writeups
⤷ Title: Desktop AI War: Google Launches Native Gemini for Mac with “Screen Awareness” and Video Gen
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Thu, 16 Apr 2026 04:32:27 +0000
════════════════════════
⌗ Tags: #Technology #AI Desktop Assistant #Apple Intelligence #Google Gemini #Google Workspace #macOS Sequoia #Microsoft Copilot #Nano Banana 2 #Productivity Tools #Tech News #Veo AI
Daily CyberSecurity
Desktop AI War: Google Launches Native Gemini for Mac with "Screen Awareness" and Video Gen
Google releases Gemini for Mac. With Option+Space shortcuts, screen awareness, and Nano Banana 2 integration, it’s a direct challenge to Apple Intelligence.
24 views
Daily Writeups
⤷ Title: Windows Active Directory Flaw Enables Remote Code Execution (CVE-2026-33826)
════════════════════════
𐀪 Author: Aju Deb
════════════════════════
ⴵ Time: Thu, 16 Apr 2026 04:36:19 GMT
════════════════════════
⌗ Tags: #programming #bug_bounty #cybersecurity #technology #active_directory
Medium
🚨 Windows Active Directory Flaw Enables Remote Code Execution (CVE-2026-33826)
Published: April 15, 2026
16 views
Daily Writeups
⤷ Title: day -4 Cross-site request forgery (CSRF)
════════════════════════
𐀪 Author: zero_day
════════════════════════
ⴵ Time: Thu, 16 Apr 2026 03:29:59 GMT
════════════════════════
⌗ Tags: #bug_bounty_writeup #bug_bounty_tips #cybersecurity #bug_bounty #penetration_testing
Medium
day -4 Cross-site request forgery (CSRF)
First of all, don’t think like: “What? He learned XSS in just 3 days and is already moving to another vulnerability?”
9 views
Daily Writeups
⤷ Title: Step-by-Step Guide to Bug Bounty Hunting for Beginners (2026)
════════════════════════
𐀪 Author: Karanam Shrivasta
════════════════════════
ⴵ Time: Thu, 16 Apr 2026 03:12:30 GMT
════════════════════════
⌗ Tags: #bug_bounty #cybersecurity #ethical_hacking #beginners_guide #penetration_testing
Medium
Step-by-Step Guide to Bug Bounty Hunting for Beginners (2026)
By Karanam Shrivasta — 15-year-old cybersecurity enthusiast LinkedIn · GitHub
8 views
Daily Writeups
⤷ Title: 750GB of Exposure, 25 Million Records at Risk: Inside Nigeria’s Alleged CAC Mega Breach
════════════════════════
𐀪 Author: Epistemus
════════════════════════
ⴵ Time: Thu, 16 Apr 2026 04:36:10 GMT
════════════════════════
⌗ Tags: #business #hacking #nigeria #data
Medium
750GB of Exposure, 25 Million Records at Risk: Inside Nigeria’s Alleged CAC Mega Breach
In April 2026, claims began circulating within cyber-intelligence circles that Nigeria’s Corporate Affairs Commission (CAC) — the statutory…
7 views
Daily Writeups
⤷ Title: I Found Hardcoded Credentials in a Single Command Line (APT29 Part 4)
════════════════════════
𐀪 Author: Manish Rawat
════════════════════════
ⴵ Time: Thu, 16 Apr 2026 02:55:41 GMT
════════════════════════
⌗ Tags: #cybersecurity #medium #threat_hunting #hacking #cyber_security_awareness
Medium
I Found Hardcoded Credentials in a Single Command Line (APT29 Part 4)
Inside The Breach
9 views
Daily Writeups
⤷ Title: Session Fixation: The Attack Before Login Happens
════════════════════════
𐀪 Author: Cybersphere Official
════════════════════════
ⴵ Time: Thu, 16 Apr 2026 04:51:02 GMT
════════════════════════
⌗ Tags: #web_security #cybersecurity #authentication #infosec #session_management
Medium
Session Fixation: The Attack Before Login Happens
Context
10 views
Daily Writeups
⤷ Title: When Network Scanning Crosses the Line: Nmap Mistakes That Can Land You in Trouble
════════════════════════
𐀪 Author: pavani
════════════════════════
ⴵ Time: Thu, 16 Apr 2026 04:44:04 GMT
════════════════════════
⌗ Tags: #ethical_hacking #cybersecurity #cybersecurity_awareness #nmap #penetration_testing
Medium
When Network Scanning Crosses the Line: Nmap Mistakes That Can Land You in Trouble
Introduction
9 views
Daily Writeups
⤷ Title: Prompt Engineering — THM Write-ups
════════════════════════
𐀪 Author: Piyush Dhakad
════════════════════════
ⴵ Time: Thu, 16 Apr 2026 04:33:07 GMT
════════════════════════
⌗ Tags: #prompt_engineering #writeup #ai_security #tryhackme_walkthrough #tryhackme
Medium
Prompt Engineering — THM Write-ups
Prompt Engineering — AI Security : THM Write-ups
12 views
Daily Writeups
⤷ Title: AI/ML Security Threats: What Every Cybersecurity Professional Needs to Know
════════════════════════
𐀪 Author: Funmilola Fagbola
════════════════════════
ⴵ Time: Thu, 16 Apr 2026 03:39:41 GMT
════════════════════════
⌗ Tags: #tryhackme #tryhackme_walkthrough #ai_security #security_threat
Medium
AI/ML Security Threats: What Every Cybersecurity Professional Needs to Know
This post explores key ideas from the TryHackMe AI/ML Security Threats learning room, which provides a practical introduction to how AI…
21 views
Daily Writeups
⤷ Title: HTB Craft Machine Walkthrough Easy HackTheBox Guide for Beginners
════════════════════════
𐀪 Author: SeverSerenity
════════════════════════
ⴵ Time: Wed, 15 Apr 2026 00:00:17 GMT
════════════════════════
⌗ Tags: #hackthebox_walkthrough #ethical_hacking #hacking #hackthebox #hackthebox_writeup
Medium
HTB Craft Machine Walkthrough Easy HackTheBox Guide for Beginners
Welcome to the WhyWriteUps articles, where we explain every step we made and why we made it. I have been solving machines for quite a bit…
33 views
Daily Writeups
⤷ Title: UAC-0247 Targets Ukrainian Clinics and Government in Data-Theft Malware Campaign
════════════════════════
𐀪 Author: Unknown
════════════════════════
ⴵ Time: Thu, 16 Apr 2026 11:50:00 +0530
════════════════════════
⌗ Tags: No_Tags
30 views
Daily Writeups
⤷ Title: The $9.5 Million Blind Spot: How a Fake Ledger App Evaded Apple’s Vetting to Empty User Wallets
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Thu, 16 Apr 2026 06:55:17 +0000
════════════════════════
⌗ Tags: #Cybercriminals #Apple Security #Bitcoin Theft #crypto scam #cryptocurrency #cybersecurity #financial fraud #Ledger Live #Ledger Wallet #Mac App Store #ZachXBT
Daily CyberSecurity
The $9.5 Million Blind Spot: How a Fake Ledger App Evaded Apple’s Vetting to Empty User Wallets
A malicious fake Ledger Live app on the Mac App Store has stolen $9.5M from users. Learn how the scam bypassed Apple's security and why your seed phrase is at risk.
22 views
Daily Writeups
⤷ Title: Open Access: How a Simple Fiverr Config Error Exposed 30,000 Private Documents to Google
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Thu, 16 Apr 2026 06:48:03 +0000
════════════════════════
⌗ Tags: #Data Leak #Cloudinary #cybersecurity #Data Exposure #data leak #Fiverr #freelance security #Google Indexing #infosec #PDF Security #Privacy Breach
Daily CyberSecurity
Open Access: How a Simple Fiverr Config Error Exposed 30,000 Private Documents to Google
Fiverr fails to fix a critical flaw exposing 30,000+ private PDFs, including taxpayer info, to Google Search. Learn how public Cloudinary URLs caused the leak.
13 views
Daily Writeups
⤷ Title: Microsoft Opens “Expedited Channel” After Open-Source Developer Accounts Vanish
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Thu, 16 Apr 2026 06:46:19 +0000
════════════════════════
⌗ Tags: #Technology #cybersecurity #Developer News #Hardware Dev Center #Kernel Signing #Microsoft #open_source #UTM #VeraCrypt #Windows Drivers #WireGuard
Daily CyberSecurity
Microsoft Opens "Expedited Channel" After Open-Source Developer Accounts Vanish
Microsoft launches a manual review channel to restore suspended developer accounts. If your driver signing is paralyzed, find out how to reclaim your access.
17 views
Daily Writeups
⤷ Title: North Korea’s “OtterCookie” Hides Inside Benign npm Wrappers
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Thu, 16 Apr 2026 06:45:27 +0000
════════════════════════
⌗ Tags: #Data Leak #big.js #cybersecurity #DPRK #Famous Chollima #Infostealer #Node.js #North Korea #npm #OtterCookie #Panther #ssh backdoor #supply chain attack
Daily CyberSecurity
North Korea’s "OtterCookie" Hides Inside Benign npm Wrappers
Panther uncovers "OtterCookie," a North Korean npm campaign hiding malware in benign wrappers. It steals crypto wallets and installs SSH backdoors. Audit now!
9 views
Daily Writeups
⤷ Title: Hardened Signals: Google’s Pixel 10 Uses Rust to Kill Modem Exploits
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Thu, 16 Apr 2026 06:10:36 +0000
════════════════════════
⌗ Tags: #Android #android #Cellular Baseband #DNS Parser #google #Hickory_proto #memory safety #Modem Security #Pigweed #Pixel 10 #Rust #Smartphone Security
Daily CyberSecurity
Hardened Signals: Google’s Pixel 10 Uses Rust to Kill Modem Exploits
Google’s Pixel 10 series is the first to use a memory-safe Rust DNS parser in its modem. Learn how this proactive shift eliminates critical cellular exploits.
12 views
Daily Writeups
⤷ Title: DevVortex | HackTheBox | OSCP Preparation
════════════════════════
𐀪 Author: SilentExploit
════════════════════════
ⴵ Time: Thu, 16 Apr 2026 06:12:13 GMT
════════════════════════
⌗ Tags: #bug_hunting #ctf #hacking #bug_bounty #technology
Medium
DevVortex | HackTheBox | OSCP Preparation
I started off with a basic nmap scan of the target which yielded the following result (condensed for purposes of the walk through)
9 views
Daily Writeups
⤷ Title: How I Accidentally Became an API Archaeologist (and Found a Data Leak)
════════════════════════
𐀪 Author: Shrivarshan
════════════════════════
ⴵ Time: Thu, 16 Apr 2026 06:02:08 GMT
════════════════════════
⌗ Tags: #bug_bounty #cybersecurity #security #research #hacking
Medium
How I Accidentally Became an API Archaeologist (and Found a Data Leak)
It was just another day.
10 views
Daily Writeups
⤷ Title: Server-Side Request Forgery (SSRF) — Accessing Internal Systems Like an Insider
════════════════════════
𐀪 Author: ghostyjoe
════════════════════════
ⴵ Time: Thu, 16 Apr 2026 05:30:58 GMT
════════════════════════
⌗ Tags: #linux #cybersecurity #security #bug_bounty #hacking
Medium
🌐 Server-Side Request Forgery (SSRF) — Accessing Internal Systems Like an Insider
✍️ Introduction
12 views