Daily Writeups
@Daily_Writeups
3.53K subscribers
2 photos
130K links
Daily Bug Bounty / Cybersecurity Writeups
Source Code : https://github.com/Spix0r/writeup-miner
Download Telegram
About
Blog
Apps
Platform
Join
Daily Writeups
3.53K subscribers
Daily Writeups
⤷ Title: 750GB of Exposure, 25 Million Records at Risk: Inside Nigeria’s Alleged CAC Mega Breach
════════════════════════
𐀪 Author: Epistemus
════════════════════════
ⴵ Time: Thu, 16 Apr 2026 04:36:10 GMT
════════════════════════
⌗ Tags: #business #hacking #nigeria #data
Medium
750GB of Exposure, 25 Million Records at Risk: Inside Nigeria’s Alleged CAC Mega Breach
In April 2026, claims began circulating within cyber-intelligence circles that Nigeria’s Corporate Affairs Commission (CAC) — the statutory…
7 views
Daily Writeups
⤷ Title: I Found Hardcoded Credentials in a Single Command Line (APT29 Part 4)
════════════════════════
𐀪 Author: Manish Rawat
════════════════════════
ⴵ Time: Thu, 16 Apr 2026 02:55:41 GMT
════════════════════════
⌗ Tags: #cybersecurity #medium #threat_hunting #hacking #cyber_security_awareness
Medium
I Found Hardcoded Credentials in a Single Command Line (APT29 Part 4)
Inside The Breach
9 views
Daily Writeups
⤷ Title: Session Fixation: The Attack Before Login Happens
════════════════════════
𐀪 Author: Cybersphere Official
════════════════════════
ⴵ Time: Thu, 16 Apr 2026 04:51:02 GMT
════════════════════════
⌗ Tags: #web_security #cybersecurity #authentication #infosec #session_management
Medium
Session Fixation: The Attack Before Login Happens
Context
10 views
Daily Writeups
⤷ Title: When Network Scanning Crosses the Line: Nmap Mistakes That Can Land You in Trouble
════════════════════════
𐀪 Author: pavani
════════════════════════
ⴵ Time: Thu, 16 Apr 2026 04:44:04 GMT
════════════════════════
⌗ Tags: #ethical_hacking #cybersecurity #cybersecurity_awareness #nmap #penetration_testing
Medium
When Network Scanning Crosses the Line: Nmap Mistakes That Can Land You in Trouble
Introduction
9 views
Daily Writeups
⤷ Title: Prompt Engineering — THM Write-ups
════════════════════════
𐀪 Author: Piyush Dhakad
════════════════════════
ⴵ Time: Thu, 16 Apr 2026 04:33:07 GMT
════════════════════════
⌗ Tags: #prompt_engineering #writeup #ai_security #tryhackme_walkthrough #tryhackme
Medium
Prompt Engineering — THM Write-ups
Prompt Engineering — AI Security : THM Write-ups
12 views
Daily Writeups
⤷ Title: AI/ML Security Threats: What Every Cybersecurity Professional Needs to Know
════════════════════════
𐀪 Author: Funmilola Fagbola
════════════════════════
ⴵ Time: Thu, 16 Apr 2026 03:39:41 GMT
════════════════════════
⌗ Tags: #tryhackme #tryhackme_walkthrough #ai_security #security_threat
Medium
AI/ML Security Threats: What Every Cybersecurity Professional Needs to Know
This post explores key ideas from the TryHackMe AI/ML Security Threats learning room, which provides a practical introduction to how AI…
21 views
Daily Writeups
⤷ Title: HTB Craft Machine Walkthrough Easy HackTheBox Guide for Beginners
════════════════════════
𐀪 Author: SeverSerenity
════════════════════════
ⴵ Time: Wed, 15 Apr 2026 00:00:17 GMT
════════════════════════
⌗ Tags: #hackthebox_walkthrough #ethical_hacking #hacking #hackthebox #hackthebox_writeup
Medium
HTB Craft Machine Walkthrough Easy HackTheBox Guide for Beginners
Welcome to the WhyWriteUps articles, where we explain every step we made and why we made it. I have been solving machines for quite a bit…
33 views
Daily Writeups
⤷ Title: UAC-0247 Targets Ukrainian Clinics and Government in Data-Theft Malware Campaign
════════════════════════
𐀪 Author: Unknown
════════════════════════
ⴵ Time: Thu, 16 Apr 2026 11:50:00 +0530
════════════════════════
⌗ Tags: No_Tags
30 views
Daily Writeups
⤷ Title: The $9.5 Million Blind Spot: How a Fake Ledger App Evaded Apple’s Vetting to Empty User Wallets
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Thu, 16 Apr 2026 06:55:17 +0000
════════════════════════
⌗ Tags: #Cybercriminals #Apple Security #Bitcoin Theft #crypto scam #cryptocurrency #cybersecurity #financial fraud #Ledger Live #Ledger Wallet #Mac App Store #ZachXBT
Daily CyberSecurity
The $9.5 Million Blind Spot: How a Fake Ledger App Evaded Apple’s Vetting to Empty User Wallets
A malicious fake Ledger Live app on the Mac App Store has stolen $9.5M from users. Learn how the scam bypassed Apple's security and why your seed phrase is at risk.
22 views
Daily Writeups
⤷ Title: Open Access: How a Simple Fiverr Config Error Exposed 30,000 Private Documents to Google
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Thu, 16 Apr 2026 06:48:03 +0000
════════════════════════
⌗ Tags: #Data Leak #Cloudinary #cybersecurity #Data Exposure #data leak #Fiverr #freelance security #Google Indexing #infosec #PDF Security #Privacy Breach
Daily CyberSecurity
Open Access: How a Simple Fiverr Config Error Exposed 30,000 Private Documents to Google
Fiverr fails to fix a critical flaw exposing 30,000+ private PDFs, including taxpayer info, to Google Search. Learn how public Cloudinary URLs caused the leak.
13 views
Daily Writeups
⤷ Title: Microsoft Opens “Expedited Channel” After Open-Source Developer Accounts Vanish
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Thu, 16 Apr 2026 06:46:19 +0000
════════════════════════
⌗ Tags: #Technology #cybersecurity #Developer News #Hardware Dev Center #Kernel Signing #Microsoft #open_source #UTM #VeraCrypt #Windows Drivers #WireGuard
Daily CyberSecurity
Microsoft Opens "Expedited Channel" After Open-Source Developer Accounts Vanish
Microsoft launches a manual review channel to restore suspended developer accounts. If your driver signing is paralyzed, find out how to reclaim your access.
17 views
Daily Writeups
⤷ Title: North Korea’s “OtterCookie” Hides Inside Benign npm Wrappers
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Thu, 16 Apr 2026 06:45:27 +0000
════════════════════════
⌗ Tags: #Data Leak #big.js #cybersecurity #DPRK #Famous Chollima #Infostealer #Node.js #North Korea #npm #OtterCookie #Panther #ssh backdoor #supply chain attack
Daily CyberSecurity
North Korea’s "OtterCookie" Hides Inside Benign npm Wrappers
Panther uncovers "OtterCookie," a North Korean npm campaign hiding malware in benign wrappers. It steals crypto wallets and installs SSH backdoors. Audit now!
9 views
Daily Writeups
⤷ Title: Hardened Signals: Google’s Pixel 10 Uses Rust to Kill Modem Exploits
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Thu, 16 Apr 2026 06:10:36 +0000
════════════════════════
⌗ Tags: #Android #android #Cellular Baseband #DNS Parser #google #Hickory_proto #memory safety #Modem Security #Pigweed #Pixel 10 #Rust #Smartphone Security
Daily CyberSecurity
Hardened Signals: Google’s Pixel 10 Uses Rust to Kill Modem Exploits
Google’s Pixel 10 series is the first to use a memory-safe Rust DNS parser in its modem. Learn how this proactive shift eliminates critical cellular exploits.
12 views
Daily Writeups
⤷ Title: DevVortex | HackTheBox | OSCP Preparation
════════════════════════
𐀪 Author: SilentExploit
════════════════════════
ⴵ Time: Thu, 16 Apr 2026 06:12:13 GMT
════════════════════════
⌗ Tags: #bug_hunting #ctf #hacking #bug_bounty #technology
Medium
DevVortex | HackTheBox | OSCP Preparation
I started off with a basic nmap scan of the target which yielded the following result (condensed for purposes of the walk through)
9 views
Daily Writeups
⤷ Title: How I Accidentally Became an API Archaeologist (and Found a Data Leak)
════════════════════════
𐀪 Author: Shrivarshan
════════════════════════
ⴵ Time: Thu, 16 Apr 2026 06:02:08 GMT
════════════════════════
⌗ Tags: #bug_bounty #cybersecurity #security #research #hacking
Medium
How I Accidentally Became an API Archaeologist (and Found a Data Leak)
It was just another day.
10 views
Daily Writeups
⤷ Title: Server-Side Request Forgery (SSRF) — Accessing Internal Systems Like an Insider
════════════════════════
𐀪 Author: ghostyjoe
════════════════════════
ⴵ Time: Thu, 16 Apr 2026 05:30:58 GMT
════════════════════════
⌗ Tags: #linux #cybersecurity #security #bug_bounty #hacking
Medium
🌐 Server-Side Request Forgery (SSRF) — Accessing Internal Systems Like an Insider
✍️ Introduction
12 views
Daily Writeups
⤷ Title: Authentication Vulnerabilities Lab 05
════════════════════════
𐀪 Author: Mohammed Fahad
════════════════════════
ⴵ Time: Thu, 16 Apr 2026 05:21:42 GMT
════════════════════════
⌗ Tags: #pentesting #bug_bounty #learning #cybersecurity #web_app_pentesting
Medium
Authentication Vulnerabilities Lab 05
The App Blocked My IP. So I Used Time Against It.
15 views
Daily Writeups
⤷ Title: ⚙️ 08. — User ID controlled by request parameter with password disclosure
════════════════════════
𐀪 Author: The4v1
════════════════════════
ⴵ Time: Thu, 16 Apr 2026 05:21:01 GMT
════════════════════════
⌗ Tags: #portswigger #web_security #cybersecurity #bug_bounty
Medium
⚙️ 08. — User ID controlled by request parameter with password disclosure
Difficulty: 🟢 Apprentice
10 views
Daily Writeups
⤷ Title: Inside GPT-5.4-Cyber: OpenAI’s New Secret Weapon for Security Defenders
════════════════════════
𐀪 Author: Divanshu
════════════════════════
ⴵ Time: Thu, 16 Apr 2026 05:38:51 GMT
════════════════════════
⌗ Tags: #openai #cybersecurity #infosec #technology #artificial_intelligence
Medium
Inside GPT-5.4-Cyber: OpenAI’s New Secret Weapon for Security Defenders
In the ever-evolving cat-and-mouse game of cybersecurity, artificial intelligence has increasingly become a double-edged sword. While…
15 views
Daily Writeups
⤷ Title: Modern Authentication Attacks: How MFA, SSO, and OAuth Are Actually Bypassed in Real Engagements
════════════════════════
𐀪 Author: Prem N
════════════════════════
ⴵ Time: Thu, 16 Apr 2026 06:46:37 GMT
════════════════════════
⌗ Tags: #cybersecurity #penetration_testing #oauth #web_security #authentication
15 views
Daily Writeups
⤷ Title: Penetration Testing as a Service Market Size Projected to Hit $1.98 billion by 2031
════════════════════════
𐀪 Author: Sheetalbhusari
════════════════════════
ⴵ Time: Thu, 16 Apr 2026 06:33:23 GMT
════════════════════════
⌗ Tags: #penetration_testing_tools #penetration_testing
Medium
Penetration Testing as a Service Market Size Projected to Hit $1.98 billion by 2031
The global Penetration Testing as a Service Market is poised for significant expansion, projected to grow from USD 0.72 billion in 2026 to…
16 views