Daily Writeups
@Daily_Writeups
3.56K subscribers
2 photos
130K links
Daily Bug Bounty / Cybersecurity Writeups
Source Code : https://github.com/Spix0r/writeup-miner
Download Telegram
About
Blog
Apps
Platform
Join
Daily Writeups
3.56K subscribers
Daily Writeups
⤷ Title: The Malvertising Trap: How the SmokedHam Backdoor Is Opening European Doors for Qilin Ransomware
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Mon, 20 Apr 2026 07:57:46 +0000
════════════════════════
⌗ Tags: #Malware #Backdoor Malware #Cloudflare Workers #European Cybersecurity #Malvertising #Orange Cyberdefense #Qilin Ransomware #Remote Desktop Manager #RVTools #SmokedHam #UNC2465
Penetration Testing Tools
The Malvertising Trap: How the SmokedHam Backdoor Is Opening European Doors for Qilin Ransomware
In the incipient months of 2026, search engine advertisements have once again emerged as a convenient veil for
11 views
Daily Writeups
⤷ Title: Cyber-Actors are “Laundering Trust” to Hijack the Global Supply Chain
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Mon, 20 Apr 2026 08:04:03 +0000
════════════════════════
⌗ Tags: #Cybercriminals #Cargo Diversion #Cyber Reconnaissance #Fleet Payments #infosec #Load Board Phishing #powershell #Proofpoint #RMM Abuse #ScreenConnect #Signing_as_a_Service #Transportation Security
Daily CyberSecurity
Cyber-Actors are "Laundering Trust" to Hijack the Global Supply Chain
Proofpoint monitors a 30-day supply chain attack using "signing-as-a-service" to bypass Windows security. Protect your load boards and fleet payments now.
13 views
Daily Writeups
⤷ Title: Critical 9.1 Auth Bypass Hits Budibase Operations Platform
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Mon, 20 Apr 2026 08:02:42 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #API security #Authentication Bypass #Budibase #CVSS 9.1 #DevOps #infosec #Koa Framework #Patch Alert #Regex Security #user_enumeration #Web Security
Daily CyberSecurity
Critical 9.1 Auth Bypass Hits Budibase Operations Platform
A critical 9.1 CVSS flaw in Budibase lets attackers bypass auth via unanchored regex. Protect your user database—update to version 3.35.4 immediately.
10 views
Daily Writeups
⤷ Title: Beyond the Glow: How iOS 27’s “Snow Leopard” Focus and Siri App Will Redefine the iPhone in 2026
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Mon, 20 Apr 2026 07:11:54 +0000
════════════════════════
⌗ Tags: #Technology #Apple Intelligence #Apple Rumors #Dynamic Island #Home Screen Customization #iOS 27 #iOS Stability #iPhone 15 Pro #Mark Gurman #Siri Redesign #WWDC 2026
Daily CyberSecurity
Beyond the Glow: How iOS 27’s "Snow Leopard" Focus and Siri App Will Redefine the iPhone in 2026
iOS 27 is coming to WWDC 2026! Discover the new Siri "Search or Ask" interface, the standalone Siri App, and the long-awaited Home Screen Undo functionality.
7 views
Daily Writeups
⤷ Title: The 32GB Ceiling Shatters: Microsoft Finally Ends the “Arbitrary” FAT32 Limit After 30 Years
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Mon, 20 Apr 2026 07:11:29 +0000
════════════════════════
⌗ Tags: #Windows #command_line #Dave Plummer #FAT32 #File Systems #formatting #Microsoft #powershell #Storage Compatibility #Tech History #Windows 11 #Windows Insider
Daily CyberSecurity
The 32GB Ceiling Shatters: Microsoft Finally Ends the "Arbitrary" FAT32 Limit After 30 Years
Microsoft has officially raised the FAT32 formatting limit to 2TB in Windows 11. Say goodbye to the 32GB restriction and third-party tools like Rufus.
8 views
Daily Writeups
⤷ Title: Fabricked: The 100% Deterministic Attack Breaking AMD’s Confidential Computing Vault
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Mon, 20 Apr 2026 07:05:07 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #AMD SEV_SNP #Cloud Security #Confidential Computing #CVE_2025_54510 #EPYC #ETH Zurich #Fabricked #Hardware Security #Hypervisor #Infinity Fabric #infosec #Zen 5
Daily CyberSecurity
Fabricked: The 100% Deterministic Attack Breaking AMD’s Confidential Computing Vault
ETH Zurich researchers unmasked "Fabricked" (CVE-2025-54510), a flaw in AMD Infinity Fabric that bypasses SEV-SNP memory isolation. Patch your firmware today!
18 views
Daily Writeups
⤷ Title: The Forbidden Model: Why the NSA is Secretly Using Anthropic’s Mythos AI Despite a Federal Ban
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Mon, 20 Apr 2026 07:00:10 +0000
════════════════════════
⌗ Tags: #Technology #AI Safeguards #Anthropic #Cyber Warfare #cybersecurity #Dario Amodei #Department of Defense #Federal Ban #Mythos Preview #NSA #supply chain risk #Trump Administration
Daily CyberSecurity
The Forbidden Model: Why the NSA is Secretly Using Anthropic’s Mythos AI Despite a Federal Ban
The NSA is bypassing Trump’s federal ban to use Anthropic’s Mythos Preview. Discover how this restricted "cyber-weapon" AI is transforming U.S. intelligence.
13 views
Daily Writeups
⤷ Title: ⏱️ Race Conditions — Exploiting Timing for Real Impact
════════════════════════
𐀪 Author: ghostyjoe
════════════════════════
ⴵ Time: Mon, 20 Apr 2026 07:22:28 GMT
════════════════════════
⌗ Tags: #cybersecurity #security #linux #bug_bounty #hacking
Medium
⏱️ Race Conditions — Exploiting Timing for Real Impact
✍️ Introduction
11 views
Daily Writeups
⤷ Title: TryHackMe: Enumeration & Brute Force — Complete Walkthrough
════════════════════════
𐀪 Author: 5um1t0x
════════════════════════
ⴵ Time: Mon, 20 Apr 2026 07:12:56 GMT
════════════════════════
⌗ Tags: #bug_bounty #hacking #cybersecurity #penetration_testing #infosec
Medium
TryHackMe: Enumeration & Brute Force — Complete Walkthrough
Task 1 — Introduction
11 views
Daily Writeups
⤷ Title: The Anatomy of a Real SBOM (CycloneDX Explained)
════════════════════════
𐀪 Author: Dimitar K.
════════════════════════
ⴵ Time: Mon, 20 Apr 2026 08:38:19 GMT
════════════════════════
⌗ Tags: #application_security #cybersecurity #software_engineering #software_development #devsecops
Medium
The Anatomy of a Real SBOM (CycloneDX Explained)
In the previous article, we clarified a common misconception:
11 views
Daily Writeups
⤷ Title: Performans Ölçütlerine Dayalı Gelişmiş Olay Müdahalesi
════════════════════════
𐀪 Author: Perform Yazılım
════════════════════════
ⴵ Time: Mon, 20 Apr 2026 08:37:14 GMT
════════════════════════
⌗ Tags: #dynatrace #application_security
Medium
Performans Ölçütlerine Dayalı Gelişmiş Olay Müdahalesi
Dynatrace Security Investigator, Dynatrace ile birlikte gelen yerleşik uygulamalardan biridir. Dynatrace Grail® veri havuzuna alınan…
18 views
Daily Writeups
⤷ Title: Vercel got hacked. Here’s what happened.
════════════════════════
𐀪 Author: Rachana Gupta
════════════════════════
ⴵ Time: Mon, 20 Apr 2026 08:50:30 GMT
════════════════════════
⌗ Tags: #vercel #cybersecurity #hacking #security
Medium
Vercel got hacked. Here’s what happened.
Last weekend, Vercel the company that hosts a huge chunk of the modern web put up a short note on their site saying someone broke into…
11 views
Daily Writeups
⤷ Title: 167 Bugs Fixed, Two Already Being Used Against You, and One Deadline That Could Brick Your PC
════════════════════════
𐀪 Author: MayhemCode
════════════════════════
ⴵ Time: Mon, 20 Apr 2026 08:15:51 GMT
════════════════════════
⌗ Tags: #technology #windows #programming #hacking #cybersecurity
Medium
167 Bugs Fixed, Two Already Being Used Against You, and One Deadline That Could Brick Your PC
Microsoft’s second-largest security update ever is out — and buried inside it is a SharePoint flaw attackers were already exploiting, a…
23 views
Daily Writeups
⤷ Title: Exploiting SSRF to Access AWS EC2 Instance Metadata
════════════════════════
𐀪 Author: Sumeet Mahadik
════════════════════════
ⴵ Time: Mon, 20 Apr 2026 07:28:03 GMT
════════════════════════
⌗ Tags: #cybersecurity #hacking
Medium
Exploiting SSRF to Access AWS EC2 Instance Metadata
Hello friends, I hope you’re doing well.
9 views
Daily Writeups
⤷ Title: Pentesting Android en claro: del Manifest al hallazgo
════════════════════════
𐀪 Author: FN8
════════════════════════
ⴵ Time: Mon, 20 Apr 2026 06:50:49 GMT
════════════════════════
⌗ Tags: #android #cybersecurity #ciberseguridad #technology #hacking
Medium
Pentesting Android en claro: del Manifest al hallazgo
Ayer tuve la oportunidad de asistir a un taller de Pentesting Android en la ViCONgal impartido por Carolina Gómez Uriarte, y la verdad… fue…
14 views
Daily Writeups
⤷ Title: Why Nmap Fails When Enumerating Websites — And What to Do About It
════════════════════════
𐀪 Author: Ahi&Hacking
════════════════════════
ⴵ Time: Mon, 20 Apr 2026 08:17:39 GMT
════════════════════════
⌗ Tags: #nmap #networking #infosec #cybersecurity
Medium
Why Nmap Fails When Enumerating Websites — And What to Do About It
The tool is legendary. The results are sometimes not. Here’s what silently kills your scans.
9 views
Daily Writeups
⤷ Title: Ffuf: The Tool That Helps You Find What Others Miss
════════════════════════
𐀪 Author: m0cha_
════════════════════════
ⴵ Time: Mon, 20 Apr 2026 07:19:39 GMT
════════════════════════
⌗ Tags: #cybersecurity #kali_linux #vapt #offensive_security #penetration_testing
Medium
Ffuf: The Tool That Helps You Find What Others Miss
When you start testing web applications, it feels like everything is visible.
10 views
Daily Writeups
⤷ Title: IP Address Classes in Ethical Hacking Explained
════════════════════════
𐀪 Author: Redfox Security
════════════════════════
ⴵ Time: Mon, 20 Apr 2026 07:14:22 GMT
════════════════════════
⌗ Tags: #penetration_testing #cybersecurity #ethical_hacking #ip_address #network_security
Medium
IP Address Classes in Ethical Hacking Explained
Understanding IP addressing is a fundamental skill for anyone entering the world of ethical hacking. Before scanning networks, identifying…
8 views
Daily Writeups
⤷ Title: LLMborghini | TryHackMe Write-up
════════════════════════
𐀪 Author: iIyas
════════════════════════
ⴵ Time: Mon, 20 Apr 2026 08:31:02 GMT
════════════════════════
⌗ Tags: #ai #llm #ctf #tryhackme #cybersecurity
Medium
LLMborghini | TryHackMe Write-up
Hello everyone! In this write-up, we’ll walk through how to solve the LLMborghini challenge on TryHackMe.
15 views
Daily Writeups
⤷ Title: How I Passed OSCP and OSCP+ on My First Attempt with 90/100 Points
════════════════════════
𐀪 Author: Adlurijanakivallabh
════════════════════════
ⴵ Time: Mon, 20 Apr 2026 08:03:25 GMT
════════════════════════
⌗ Tags: #offsec #tryhackme #provinggrounds #hackthebox #oscp
Medium
How I Passed OSCP and OSCP+ on My First Attempt with 90/100 Points
A complete guide — preparation, exam experience and every resource that actually helped.
24 views
Daily Writeups
⤷ Title: Shodan: Uncovering the Hidden Layer of the Internet
════════════════════════
𐀪 Author: Sumit
════════════════════════
ⴵ Time: Mon, 20 Apr 2026 08:28:21 GMT
════════════════════════
⌗ Tags: #cybersecurity #shodan_search_engine #ethical_hacking #osint_investigation #osint
Medium
📝 Shodan: Uncovering the Hidden Layer of the Internet
Homepage of Shodan
36 views