Daily Writeups
@Daily_Writeups
4.06K subscribers
4 photos
137K links
Daily Bug Bounty / Cybersecurity Writeups
Source Code : https://github.com/Spix0r/writeup-miner
Download Telegram
About
Blog
Apps
Platform
Join
Daily Writeups
4.06K subscribers
Daily Writeups
⤷ Title: The AI Agent Attack Surface in 2026: From MCP Tools to Webhook-Exposed Runners
════════════════════════
𐀪 Author: Sky Zhang
════════════════════════
ⴵ Time: Fri, 17 Apr 2026 07:16:15 GMT
════════════════════════
⌗ Tags: #mcp_server #application_security #ai_agents_in_action #cybersecurity
Medium
The AI Agent Attack Surface in 2026: From MCP Tools to Webhook-Exposed Runners
If you build with AI agents in 2026, you have, mostly without noticing, integrated a new class of internet-reachable software with full…
12 views
Daily Writeups
⤷ Title: Ethical Hacking Summer Internship for Freshers with Live Projects
════════════════════════
𐀪 Author: cyber security Updates
════════════════════════
ⴵ Time: Fri, 17 Apr 2026 08:01:13 GMT
════════════════════════
⌗ Tags: #education #hacking #cybersecurity #ethical_ai #ethical_hacking
Medium
Ethical Hacking Summer Internship for Freshers with Live Projects
What is Ethical Hacking?
12 views
Daily Writeups
⤷ Title: Cheese CTF — Complete Walkthrough & Writeup
════════════════════════
𐀪 Author: Whiteghst
════════════════════════
ⴵ Time: Fri, 17 Apr 2026 07:29:56 GMT
════════════════════════
⌗ Tags: #ctf #hacking #tryhackme #cybersecurity
Medium
Cheese CTF — Complete Walkthrough & Writeup
Step by Step with Explanations
23 views
Daily Writeups
⤷ Title: AI Models & Data: AI Security TryHackMe
════════════════════════
𐀪 Author: Shubham Kumar
════════════════════════
ⴵ Time: Fri, 17 Apr 2026 08:36:44 GMT
════════════════════════
⌗ Tags: #data #tryhackme_walkthrough #ai_security #tryhackme #ai_model
Medium
AI Models & Data: AI Security TryHackMe
Room: https://tryhackme.com/room/aimodelsdata
10 views
Daily Writeups
⤷ Title: Introduction to the World of OT/ICS (THM) Tryhackme Walkthrough
════════════════════════
𐀪 Author: Lawvye
════════════════════════
ⴵ Time: Fri, 17 Apr 2026 08:31:49 GMT
════════════════════════
⌗ Tags: #industrial_control_system #tryhackme_walkthrough #ics_security #operational_technology #tryhackme
Medium
Introduction to the World of OT/ICS (THM) Tryhackme Walkthrough
Description : Learn what Operational Technology (OT) and Industrial Control Systems (ICS) are, and how they function.
14 views
Daily Writeups
⤷ Title: How is AI Changing SOC Operations?
════════════════════════
𐀪 Author: InfosecTrain
════════════════════════
ⴵ Time: Fri, 17 Apr 2026 07:25:11 GMT
════════════════════════
⌗ Tags: #ethical_hacking #cybersecurity #soc #information_security #artificial_intelligence
Medium
How is AI Changing SOC Operations?
Cyber threats are changing rapidly today, and SOC teams are the ones dealing with it every day. There are just too many alerts coming in…
18 views
Daily Writeups
⤷ Title: Silent Threat in the Avatar: Unmasking a Stored XSS via File Uploads
════════════════════════
𐀪 Author: Shreyash Mall
════════════════════════
ⴵ Time: Fri, 17 Apr 2026 07:20:05 GMT
════════════════════════
⌗ Tags: #software_development #cybersecurity #web_development #software_engineering #ethical_hacking
Medium
Silent Threat in the Avatar: Unmasking a Stored XSS via File Uploads
It often starts with the most unassuming features. The simple, everyday conveniences we take for granted. You are auditing a Server…
22 views
Daily Writeups
⤷ Title: You Were Never Hidden,You Were Just Unobserved
════════════════════════
𐀪 Author: Fateyaly
════════════════════════
ⴵ Time: Fri, 17 Apr 2026 07:05:35 GMT
════════════════════════
⌗ Tags: #coding #technology #programming #ethical_hacking #cybersecurity
Medium
You Were Never Hidden,You Were Just Unobserved
What silent recon teaches us about the internet we think we control
34 views
Daily Writeups
⤷ Title: New CGrabber and Direct-Sys Malware Spread Through GitHub ZIP Files
════════════════════════
𐀪 Author: Deeba Ahmed
════════════════════════
ⴵ Time: Fri, 17 Apr 2026 09:25:45 +0000
════════════════════════
⌗ Tags: #Security #Malware #CGrabber #Cyber Attack #Cybersecurity #Developers #Direct_Sys #GitHub
Hackread
New CGrabber and Direct-Sys Malware Spread Through GitHub ZIP Files
Hackers spread CGrabber and Direct-Sys malware through GitHub ZIP files, bypassing security tools to steal passwords, crypto wallets, and user data.
26 views
Daily Writeups
⤷ Title: go-exploit: Go Exploit Framework
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Fri, 17 Apr 2026 09:24:15 +0000
════════════════════════
⌗ Tags: #Open Source Tool #exploit framework
Penetration Testing Tools
go-exploit: Go Exploit Framework
go-exploit is an exploit development framework for Go. The framework helps exploit developers create small, self-contained, portable, and consistent exploits
17 views
Daily Writeups
⤷ Title: The “RedSun” Zero-Day That Turns Microsoft Defender into a Malware Installer
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Fri, 17 Apr 2026 09:15:44 +0000
════════════════════════
⌗ Tags: #Vulnerability #cybersecurity #EICAR #exploit #Microsoft Defender #privilege escalation #RedSun #SYSTEM privileges #Will Dormann #Windows 11 #Windows Server #zero_day
Penetration Testing Tools
The "RedSun" Zero-Day That Turns Microsoft Defender into a Malware Installer
A novel method to acquire total systemic hegemony over Windows has surfaced, and remarkably, it eschews complex kernel
9 views
Daily Writeups
⤷ Title: The 0APT “Doxxing” Campaign That’s Tearing the Ransomware Underworld Apart
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Fri, 17 Apr 2026 09:11:50 +0000
════════════════════════
⌗ Tags: #Cybercriminals #0APT #Barricade Cyber Solutions #cyber extortion #Dark Web #Doxxing #DragonForce #Infosec News #Krybit #ransomware #threat intelligence
Penetration Testing Tools
The 0APT "Doxxing" Campaign That’s Tearing the Ransomware Underworld Apart
A rare internecine conflict has erupted within the dark web’s underbelly, as one ransomware syndicate has chosen to
7 views
Daily Writeups
⤷ Title: The Unstoppable Ghost: How Triad Nexus Uses “Infrastructure Laundering” to Bypass U.S. Sanctions
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Fri, 17 Apr 2026 09:07:17 +0000
════════════════════════
⌗ Tags: #Cybercriminals #Brand Impersonation #cloud security #CNAME Chains #Cryptocurrency Fraud #cybercrime #FinSec #Infrastructure Laundering #Pig Butchering Scam #Silent Push #Triad Nexus
Penetration Testing Tools
The Unstoppable Ghost: How Triad Nexus Uses "Infrastructure Laundering" to Bypass U.S. Sanctions
Following the high-profile sanctions imposed by the United States against the Triad Nexus cybercriminal syndicate, it appeared that
6 views
Daily Writeups
⤷ Title: The Invisible ID: Why Chrome’s Failure to Block Fingerprinting is a Gift to Global Surveillance
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Fri, 17 Apr 2026 09:05:27 +0000
════════════════════════
⌗ Tags: #Data Leak #AdTech #Alexander Hanff #Browser Fingerprinting #Citizen Lab #data privacy #Digital Surveillance #Google Chrome #privacy sandbox #Tracking Protection #web security
Penetration Testing Tools
The Invisible ID: Why Chrome’s Failure to Block Fingerprinting is a Gift to Global Surveillance
While Chrome has long been marketed as a bastion of digital security, Google’s efficacy in thwarting clandestine surveillance
6 views
Daily Writeups
⤷ Title: The Breaking Point: NIST Abandons Universal Data for the National Vulnerability Database
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Fri, 17 Apr 2026 09:03:10 +0000
════════════════════════
⌗ Tags: #Vulnerability #AI Weaponization #CISA KEV #CVE #cybersecurity #Infosec News #NIST #NIST Backlog #NVD #Patch Management #vulnerability management
Penetration Testing Tools
The Breaking Point: NIST Abandons Universal Data for the National Vulnerability Database
The deluge of vulnerability reports has reached such an overwhelming crescendo that even governmental infrastructures struggle to maintain
8 views
Daily Writeups
⤷ Title: Opera’s “Browser Connector” Gives ChatGPT and Claude the Power to “See” Your Tabs
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Fri, 17 Apr 2026 09:34:45 +0000
════════════════════════
⌗ Tags: #Technology #AI #Browser Connector #ChatGPT #Claude #Multimodal AI #Opera #Opera GX #Productivity Tools #Tech News #web browser
Daily CyberSecurity
Opera’s "Browser Connector" Gives ChatGPT and Claude the Power to "See" Your Tabs
Opera shatters vendor lock-in with "Browser Connector." Now, ChatGPT and Claude can read your active tabs and summarize web content directly within Opera One.
7 views
Daily Writeups
⤷ Title: Gemini vs. GenAI Fraud: How Google Blocked 8.3 Billion Malicious Ads in 2025
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Fri, 17 Apr 2026 09:31:41 +0000
════════════════════════
⌗ Tags: #Malware #Ad Fraud #Ads Safety Report 2025 #Cyber Security #digital advertising #Gemini AI #Generative AI #Google Ads #Keerat Sharma #machine_learning #Online Safety
Daily CyberSecurity
Gemini vs. GenAI Fraud: How Google Blocked 8.3 Billion Malicious Ads in 2025
Google’s 2025 Ads Safety Report reveals how Gemini AI intercepted 99% of bad ads and reduced false account suspensions by 80%. Read the full scale of the defense.
11 views
Daily Writeups
⤷ Title: Triad Nexus’ $300M “Infrastructure Laundering” Machine Exposed
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Fri, 17 Apr 2026 09:01:08 +0000
════════════════════════
⌗ Tags: #Cybercriminals #AS16509 #AS8075 #AWS #brand impersonation #Cloud Security #CNAME Mapping #cyber fraud #Google Cloud #infrastructure laundering #Pig Butchering #Silent Push #Triad Nexus
Daily CyberSecurity
Triad Nexus’ $300M "Infrastructure Laundering" Machine Exposed
Triad Nexus has built a $300M fraud engine using "Infrastructure Laundering" on AWS and Google. See how they use geo-fencing and CNAME chains to evade the law.
8 views
Daily Writeups
⤷ Title: Common misconceptions debugged!
════════════════════════
𐀪 Author: Greg Jenkins
════════════════════════
ⴵ Time: Fri, 17 Apr 2026 00:00:00 GMT
════════════════════════
⌗ Tags: #Business Insights
Intigriti
Common AI misconceptions debugged!
AI and the growing ecosystem of tools built around it have now moved beyond early experimentation and into everyday use across the bug bounty community.
5 views
Daily Writeups
⤷ Title: ⚙️ 11. — Method-based Access Control Can Be Circumvented
════════════════════════
𐀪 Author: The4v1
════════════════════════
ⴵ Time: Fri, 17 Apr 2026 10:51:01 GMT
════════════════════════
⌗ Tags: #web_security #portswigger #cybersecurity #bug_bounty
Medium
⚙️ 11. — Method-based Access Control Can Be Circumvented
Difficulty: 🟡 Practitioner
17 views
Daily Writeups
⤷ Title: ⚙️ 10. — URL-based Access Control Can Be Circumvented — X -Original-URL
════════════════════════
𐀪 Author: The4v1
════════════════════════
ⴵ Time: Fri, 17 Apr 2026 10:39:02 GMT
════════════════════════
⌗ Tags: #portswigger #bug_bounty #cybersecurity #web_security
Medium
⚙️ 10. — URL-based Access Control Can Be Circumvented — X -Original-URL
Difficulty: 🟡 Practitioner
12 views