Daily Writeups
@Daily_Writeups
3.48K subscribers
2 photos
127K links
Daily Bug Bounty / Cybersecurity Writeups
Source Code : https://github.com/Spix0r/writeup-miner
Download Telegram
About
Blog
Apps
Platform
Join
Daily Writeups
3.48K subscribers
Daily Writeups
⤷ Title: One Scan to Zero: The QR Code Trap Wiping Trust Wallets via Telegram
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Mon, 20 Apr 2026 06:11:26 +0000
════════════════════════
⌗ Tags: #Cybercriminals #BNB Smart Chain #crypto drainer #Cyfirma #Drainer_as_a_Service #ERC_20 Approve #infosec #QR Code Scam #Telegram Phishing #Trust Wallet #USDT #Web3 security
Daily CyberSecurity
One Scan to Zero: The QR Code Trap Wiping Trust Wallets via Telegram
A new QR code "drainer" targets Trust Wallet users on Telegram. It exploits the ERC-20 approve mechanism to wipe USDT. Learn how to protect your assets now.
15 views
Daily Writeups
⤷ Title: The High-End Interregnum: Why Global Part Shortages Just Pushed the New Mac Studio to October
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Mon, 20 Apr 2026 05:49:11 +0000
════════════════════════
⌗ Tags: #Technology #Apple #Creative Professionals #M4 Max #M5 Ultra #Mac mini #Mac Studio #MacBook Pro #Mark Gurman #Semiconductor Shortage #Supply Chain #WWDC 2026
Daily CyberSecurity
The High-End Interregnum: Why Global Part Shortages Just Pushed the New Mac Studio to October
Apple’s next Mac Studio is reportedly delayed until October. Global memory shortages and a pivot toward MacBook production have left power users in the lurch.
13 views
Daily Writeups
⤷ Title: That’s how I turned a simple parameter into full email content injection in a trusted password…
════════════════════════
𐀪 Author: mickoz
════════════════════════
ⴵ Time: Mon, 20 Apr 2026 06:06:13 GMT
════════════════════════
⌗ Tags: #penetration_testing #cybersecurity #bug_bounty #api_security #web_security
Medium
That’s how I turned a simple parameter into full email content injection in a trusted password reset flow
بِسْمِ اللَّـهِ الرَّحْمَٰنِ الرَّحِيمِ، وَالصَّلَاةُ وَالسَّلَامُ عَلَىٰ الْمَبْعُوثِ رَحْمَةً لِلْعَالَمِينَ ﷺ
11 views
Daily Writeups
⤷ Title: API Vulnerabilities — The Modern Attack Surface Most Hunters Underestimate
════════════════════════
𐀪 Author: ghostyjoe
════════════════════════
ⴵ Time: Mon, 20 Apr 2026 05:39:47 GMT
════════════════════════
⌗ Tags: #security #hacking #bug_bounty #linux #cybersecurity
Medium
🔗 API Vulnerabilities — The Modern Attack Surface Most Hunters Underestimate
✍️ Introduction
11 views
Daily Writeups
⤷ Title: How I Found a GraphQL Endpoint Leaking Millions
════════════════════════
𐀪 Author: Prateekpulastya
════════════════════════
ⴵ Time: Mon, 20 Apr 2026 05:29:43 GMT
════════════════════════
⌗ Tags: #data_leak_prevention #graphql #bug_bounty #vulnerability_management #bug_bounty_writeup
Medium
How I Found a GraphQL Endpoint Leaking Millions
User Records Without Authentication
13 views
Daily Writeups
⤷ Title: From Alert Lists to Exploit Graphs: How Auditor Core Changes the Security Calculus
════════════════════════
𐀪 Author: Eldor Zufarov
════════════════════════
ⴵ Time: Mon, 20 Apr 2026 06:21:38 GMT
════════════════════════
⌗ Tags: #cybersecurity #application_security #devsecops #risk_management #software_architecture
Medium
From Alert Lists to Exploit Graphs: How Auditor Core Changes the Security Calculus
By Eldor Zufarov, Founder of Auditor Core
17 views
Daily Writeups
⤷ Title: Fui a un Congreso de Ciberseguridad
════════════════════════
𐀪 Author: FN8
════════════════════════
ⴵ Time: Mon, 20 Apr 2026 06:47:12 GMT
════════════════════════
⌗ Tags: #hacking #cybersecurity #español #ciberseguridad
Medium
Fui a un Congreso de Ciberseguridad
Fui a un congreso de ciberseguridad ViCONgal… y salí con más hambre que nunca.
17 views
Daily Writeups
⤷ Title: Best Telegram OSINT Tools
════════════════════════
𐀪 Author: Sumit Raj
════════════════════════
ⴵ Time: Mon, 20 Apr 2026 05:40:40 GMT
════════════════════════
⌗ Tags: #cybersecurity #osint_tool #infosec #osint
Medium
Best Telegram OSINT Tools
Hi you might know me on twitter by 0xsumitttt ,so recently I was discovering OSINT tools and i came through some amazing OSINT tools to…
19 views
Daily Writeups
⤷ Title: Shadow AI in the Workplace: The Hidden Security Risks of Unauthorized AI Tool Usage
════════════════════════
𐀪 Author: Cynox Security LLP.
════════════════════════
ⴵ Time: Mon, 20 Apr 2026 06:14:44 GMT
════════════════════════
⌗ Tags: #cyber_security_awareness #information_security #cybersecurity #ethical_hacking #ai
Medium
Shadow AI in the Workplace: The Hidden Security Risks of Unauthorized AI Tool Usage
Introduction: The Silent Rise of Uncontrolled AI
38 views
Daily Writeups
⤷ Title: Uncovering Port Scanning Activity: Network Analysis with Nmap & Wireshark
════════════════════════
𐀪 Author: Nadia Fairuz
════════════════════════
ⴵ Time: Mon, 20 Apr 2026 04:49:39 GMT
════════════════════════
⌗ Tags: #network_security #nmap #wireshark #ethical_hacking #cybersecurity
Medium
Uncovering Port Scanning Activity: Network Analysis with Nmap & Wireshark
Abstract
42 views
Daily Writeups
⤷ Title: Researchers Detect ZionSiphon Malware Targeting Israeli Water, Desalination OT Systems
════════════════════════
𐀪 Author: Unknown
════════════════════════
ⴵ Time: Mon, 20 Apr 2026 13:04:00 +0530
════════════════════════
⌗ Tags: No_Tags
38 views
Daily Writeups
⤷ Title: systeminformer: monitor system resources, debug software and detect malware
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Mon, 20 Apr 2026 08:15:43 +0000
════════════════════════
⌗ Tags: #Open Source Tool #systeminformer
Penetration Testing Tools
systeminformer: monitor system resources, debug software and detect malware
systeminformer is a free, powerful, multi-purpose tool that helps you monitor system resources, debug software and detect malware
29 views
Daily Writeups
⤷ Title: The “Covered List” Reprieve: How FCC Notice DA-26-351 Is Reshaping National Network Security
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Mon, 20 Apr 2026 08:13:39 +0000
════════════════════════
⌗ Tags: #Technology
Penetration Testing Tools
The "Covered List" Reprieve: How FCC Notice DA-26-351 Is Reshaping National Network Security
FCC directive DA-26-351 grants conditional approval for select routers and drones, exempting them from the Covered List. Explore the impact on network security.
13 views
Daily Writeups
⤷ Title: The Open Vault: How a Flaw in the Rhadamanthys Control Panel Saved 70,000 Victims
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Mon, 20 Apr 2026 08:10:08 +0000
════════════════════════
⌗ Tags: #Malware #API Vulnerability #C2 Server #Command and Control #cybersecurity #Infostealer #malware #Rhadamanthys #SANS CTI Summit 2026 #threat intelligence #Victim Notification
Penetration Testing Tools
The Open Vault: How a Flaw in the Rhadamanthys Control Panel Saved 70,000 Victims
A vulnerability within the control panel of the Rhadamanthys infostealer unexpectedly provided a rare opportunity to safeguard victims,
14 views
Daily Writeups
⤷ Title: The $10,000 Pocket Pick: How Hackers Can Drain Your iPhone Without Unlocking It
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Mon, 20 Apr 2026 08:04:04 +0000
════════════════════════
⌗ Tags: #Cybercriminals #Apple Wallet #Contactless Payment #cybersecurity #Express Transit Mode #Fraud Prevention #iPhone security #Marques Brownlee #NFC Attack #Veritasium #visa
Penetration Testing Tools
The $10,000 Pocket Pick: How Hackers Can Drain Your iPhone Without Unlocking It
A disconcerting narrative regarding the iPhone and the surreptitious theft of funds from a locked device has once
13 views
Daily Writeups
⤷ Title: The Phantom Hypervisor: How Payouts King Uses QEMU to Hide Ransomware Inside Virtual Machines
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Mon, 20 Apr 2026 08:01:37 +0000
════════════════════════
⌗ Tags: #Malware #3AM Ransomware #Alpine Linux #CitrixBleed 2 #Cyber Security #EDR evasion #GOLD ENCOUNTER #Payouts King #QEMU #ransomware #Sophos #Virtualization Security
Penetration Testing Tools
The Phantom Hypervisor: How Payouts King Uses QEMU to Hide Ransomware Inside Virtual Machines
Ransomware syndicates are increasingly adopting the clandestine practice of concealing their malicious artifacts not merely adjacent to the
13 views
Daily Writeups
⤷ Title: Digital Squatters in the Ivory Tower: How “Hazy Hawk” Hijacked Harvard, MIT, and Stanford Subdomains
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Mon, 20 Apr 2026 07:58:55 +0000
════════════════════════
⌗ Tags: #Cybercriminals #.edu domains #CNAME records #cybersecurity #Dangling DNS #DNS hijacking #DNS Sanitation #Hazy Hawk #Higher Education Security #Infoblox #Subdomain Takeover
Penetration Testing Tools
Digital Squatters in the Ivory Tower: How "Hazy Hawk" Hijacked Harvard, MIT, and Stanford Subdomains
A network of American universities has become ensnared in a pervasive assault that targeted not their instructional infrastructures
12 views
Daily Writeups
⤷ Title: The Malvertising Trap: How the SmokedHam Backdoor Is Opening European Doors for Qilin Ransomware
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Mon, 20 Apr 2026 07:57:46 +0000
════════════════════════
⌗ Tags: #Malware #Backdoor Malware #Cloudflare Workers #European Cybersecurity #Malvertising #Orange Cyberdefense #Qilin Ransomware #Remote Desktop Manager #RVTools #SmokedHam #UNC2465
Penetration Testing Tools
The Malvertising Trap: How the SmokedHam Backdoor Is Opening European Doors for Qilin Ransomware
In the incipient months of 2026, search engine advertisements have once again emerged as a convenient veil for
10 views
Daily Writeups
⤷ Title: Cyber-Actors are “Laundering Trust” to Hijack the Global Supply Chain
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Mon, 20 Apr 2026 08:04:03 +0000
════════════════════════
⌗ Tags: #Cybercriminals #Cargo Diversion #Cyber Reconnaissance #Fleet Payments #infosec #Load Board Phishing #powershell #Proofpoint #RMM Abuse #ScreenConnect #Signing_as_a_Service #Transportation Security
Daily CyberSecurity
Cyber-Actors are "Laundering Trust" to Hijack the Global Supply Chain
Proofpoint monitors a 30-day supply chain attack using "signing-as-a-service" to bypass Windows security. Protect your load boards and fleet payments now.
13 views
Daily Writeups
⤷ Title: Critical 9.1 Auth Bypass Hits Budibase Operations Platform
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Mon, 20 Apr 2026 08:02:42 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #API security #Authentication Bypass #Budibase #CVSS 9.1 #DevOps #infosec #Koa Framework #Patch Alert #Regex Security #user_enumeration #Web Security
Daily CyberSecurity
Critical 9.1 Auth Bypass Hits Budibase Operations Platform
A critical 9.1 CVSS flaw in Budibase lets attackers bypass auth via unanchored regex. Protect your user database—update to version 3.35.4 immediately.
10 views
Daily Writeups
⤷ Title: Beyond the Glow: How iOS 27’s “Snow Leopard” Focus and Siri App Will Redefine the iPhone in 2026
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Mon, 20 Apr 2026 07:11:54 +0000
════════════════════════
⌗ Tags: #Technology #Apple Intelligence #Apple Rumors #Dynamic Island #Home Screen Customization #iOS 27 #iOS Stability #iPhone 15 Pro #Mark Gurman #Siri Redesign #WWDC 2026
Daily CyberSecurity
Beyond the Glow: How iOS 27’s "Snow Leopard" Focus and Siri App Will Redefine the iPhone in 2026
iOS 27 is coming to WWDC 2026! Discover the new Siri "Search or Ask" interface, the standalone Siri App, and the long-awaited Home Screen Undo functionality.
7 views