Daily Writeups
@Daily_Writeups
3.49K subscribers
2 photos
128K links
Daily Bug Bounty / Cybersecurity Writeups
Source Code : https://github.com/Spix0r/writeup-miner
Download Telegram
About
Blog
Apps
Platform
Join
Daily Writeups
3.49K subscribers
Daily Writeups
⤷ Title: Why “I’ve Got Nothing to Hide” Is the Most Dangerous Lie You Tell Yourself
════════════════════════
𐀪 Author: Viral Parmar
════════════════════════
ⴵ Time: Tue, 21 Apr 2026 08:05:40 GMT
════════════════════════
⌗ Tags: #mindset #privacy #infosec #data_analysis #cybersecurity
Medium
Why “I’ve Got Nothing to Hide” Is the Most Dangerous Lie You Tell Yourself
Just imagine you’re sitting on sofa with a checking account balance of €10, a digital gallery full of dogs & random what not photos, and an…
7 views
Daily Writeups
⤷ Title: Top 8 Talks from [un]prompted 2026 Every Security Practitioner Should Know
════════════════════════
𐀪 Author: The Cyber Archive
════════════════════════
ⴵ Time: Tue, 21 Apr 2026 07:39:49 GMT
════════════════════════
⌗ Tags: #cybersecurity #ai_conference #infosec #ai_security
Medium
Top 8 Talks from [un]prompted 2026 Every Security Practitioner Should Know
The first major conference dedicated to securing AI delivered a concentrated body of research. Here are the talks practitioners should read…
9 views
Daily Writeups
⤷ Title: Membongkar Isi Database Non-Oracle Menggunakan SQL Injection (UNION Attack)
════════════════════════
𐀪 Author: Hasbi Anakguru
════════════════════════
ⴵ Time: Tue, 21 Apr 2026 07:47:51 GMT
════════════════════════
⌗ Tags: #web_security #sql_injection #ethical_hacking #cybersecurity #penetration_testing
Medium
Membongkar Isi Database Non-Oracle Menggunakan SQL Injection (UNION Attack)
SQL Injection (SQLi) masih menjadi salah satu kerentanan yang paling sering ditemui dan memiliki dampak yang sangat fatal. Pada artikel…
12 views
Daily Writeups
⤷ Title: Click, Install, Compromise: Abusing ClickOnce in Modern Enterprises
════════════════════════
𐀪 Author: Redfox Security
════════════════════════
ⴵ Time: Tue, 21 Apr 2026 06:55:45 GMT
════════════════════════
⌗ Tags: #cybersecurity #red_teaming #enterprise_security #clickonce #penetration_testing
Medium
Click, Install, Compromise: Abusing ClickOnce in Modern Enterprises
Modern enterprises deploy a wide range of security tools to detect malicious attachments, macro-enabled documents, and suspicious…
12 views
Daily Writeups
⤷ Title: Investigating a Multi-Stage Attack: TryHackMe First Shift CTF — Task 6: Zero Tolerance
════════════════════════
𐀪 Author: Citadel Cybersec
════════════════════════
ⴵ Time: Tue, 21 Apr 2026 08:40:17 GMT
════════════════════════
⌗ Tags: #threat_hunting #cybersecurity #soc_analyst #tryhackme #splunk
Medium
Investigating a Multi-Stage Attack: TryHackMe First Shift CTF — Task 6: Zero Tolerance
Hands-on Splunk analysis covering initial access, persistence, credential dumping, and lateral movement
20 views
Daily Writeups
⤷ Title: TryHackMe | Slingshot — Walk Through
════════════════════════
𐀪 Author: ocharek
════════════════════════
ⴵ Time: Tue, 21 Apr 2026 07:52:27 GMT
════════════════════════
⌗ Tags: #tryhackme_walkthrough #tryhackme_writeup #elasticsearch #tryhackme #cybersecurity
Medium
TryHackMe | Slingshot — Walk Through
Hello! This is my another walk through. This time we will use Kibana to answer the questions from Slingshot room provided by TryHackMe.
25 views
Daily Writeups
⤷ Title: AI Models & Data (TRYHACKME WALKTHROUGH)
════════════════════════
𐀪 Author: Kaustubh A
════════════════════════
ⴵ Time: Tue, 21 Apr 2026 07:51:18 GMT
════════════════════════
⌗ Tags: #aimodeldata_tryhackme #ai_model_data #tryhackme #aimodelsdata
Medium
AI Models & Data (TRYHACKME WALKTHROUGH)
Explore how data is fundamental to AI security, and the models which power it.
29 views
Daily Writeups
⤷ Title: Grinex crypto exchange shuts down, blames Western agencies for $13.7M breach
════════════════════════
𐀪 Author: Deeba Ahmed
════════════════════════
ⴵ Time: Tue, 21 Apr 2026 09:31:16 +0000
════════════════════════
⌗ Tags: #Data Breaches #Crypto #Cyber Crime #Security #Cyber Attack #Cybersecurity #data breach #Grinex #Kyrgyzstan #Russia
Hackread
Grinex crypto exchange shuts down, blames Western agencies for $13.7M breach
Grinex exchange collapses after $13.7M breach, blames Western spies as Chainalysis flags possible exit scam and sanctions evasion network links claims.
27 views
Daily Writeups
⤷ Title: hollows_hunter: Recognizes and dumps a variety of potentially malicious implants
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Tue, 21 Apr 2026 09:18:31 +0000
════════════════════════
⌗ Tags: #Open Source Tool
Penetration Testing Tools
hollows_hunter: Recognizes and dumps a variety of potentially malicious implants
Scans all running processes. Recognizes and dumps a variety of potentially malicious implants (replaced/implanted PEs, shellcodes, hooks, in-memory patches).
23 views
Daily Writeups
⤷ Title: The AI Weak Link: How a Third-Party Breach Exposed Vercel Customer Secrets
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Tue, 21 Apr 2026 09:17:43 +0000
════════════════════════
⌗ Tags: #Data Leak #API Keys #cloud security #Context.ai #Cybersecurity 2026 #data breach #Environment Variables #Mandiant #Next.js #OAuth Security #supply chain attack #Vercel
Penetration Testing Tools
The AI Weak Link: How a Third-Party Breach Exposed Vercel Customer Secrets
The month of April concluded for the American firm Vercel with a distressing incident that precipitously transcended the
22 views
Daily Writeups
⤷ Title: The Invisible Workforce: How North Korea’s “NKITW” Program Infiltrates Western Tech Giants
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Tue, 21 Apr 2026 09:15:35 +0000
════════════════════════
⌗ Tags: #Cybercriminals #Cyber Espionage #Flare Research #identity theft #IT Recruitment Fraud #LinkedIn Scams #NKITW #North Korea #Sanctions Evasion #Supply Chain Security #Workforce Security
Penetration Testing Tools
The Invisible Workforce: How North Korea’s "NKITW" Program Infiltrates Western Tech Giants
North Korea, long regarded as the quintessential symbol of isolationism, has devised a sophisticated stratagem to permeate the
15 views
Daily Writeups
⤷ Title: Shadow Nodes: Deciphering the Rise of Ashab al-Yamin in the European Cyber Landscape
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Tue, 21 Apr 2026 09:14:15 +0000
════════════════════════
⌗ Tags: #Cybercriminals #Ashab al_Yamin #BreachForums #ChaCha20_Poly1305 #CI/CD Security #Cyber Propaganda #Cybercrime 2026 #Double Extortion #European Security #Geopolitical Threats #Harakat Ashab al_Yamin al_Islamia #Information Warfare #Iranian Proxy #LiteLLM #RaaS #Sabereen News #supply chain attack #TeamPCP #Tech Against Terrorism #Telegram Security #Trivy #Vect Ransomware
Penetration Testing Tools
Shadow Nodes: Deciphering the Rise of Ashab al-Yamin in the European Cyber Landscape
The emergence of the nascent hacking collective Harakat Ashab al-Yamin al-Islamia has piqued the curiosity of security analysts
17 views
Daily Writeups
⤷ Title: The Assembly Line of Extortion: How Vect and TeamPCP Weaponized the Global Software Supply Chain
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Tue, 21 Apr 2026 09:11:14 +0000
════════════════════════
⌗ Tags: #Cybercriminals #BreachForums #ChaCha20_Poly1305 #CI/CD Security #Cybercrime 2026 #Double Extortion #LiteLLM #RaaS #supply chain attack #TeamPCP #Trivy #Vect Ransomware
Penetration Testing Tools
The Assembly Line of Extortion: How Vect and TeamPCP Weaponized the Global Software Supply Chain
Vect ransomware and TeamPCP have joined forces to industrialize cybercrime. Discover how they poisoned Trivy and LiteLLM to hijack 1,000+ corporate networks.
13 views
Daily Writeups
⤷ Title: The Invisible Storefront: How Obfuscated PHP Scripts Hijack Joomla Sites for SEO Spam
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Tue, 21 Apr 2026 09:07:16 +0000
════════════════════════
⌗ Tags: #Malware #Cloaking #Command and Control #Cyber Forensics #Index.php Hack #joomla #malware analysis #PHP Obfuscation #Search Engine Penalty #SEO Spam #web security
Penetration Testing Tools
The Invisible Storefront: How Obfuscated PHP Scripts Hijack Joomla Sites for SEO Spam
A website administrator utilizing the Joomla platform observed a perplexing phenomenon: myriad surreptitious links to third-party merchandise had
18 views
Daily Writeups
⤷ Title: Almaty Takedown: The Inside Story of the International Sting That Toppled a Ransomware Kingpin
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Tue, 21 Apr 2026 09:02:58 +0000
════════════════════════
⌗ Tags: #Cybercriminals #Almaty #Cybercrime Arrest #cybersecurity #Data Extortion #Gyeonggi Bukbu Police #International Cooperation #Kazakhstan #KISA #ransomware #South Korea
Penetration Testing Tools
Almaty Takedown: The Inside Story of the International Sting That Toppled a Ransomware Kingpin
South Korean authorities, in concert with law enforcement in Kazakhstan, have apprehended the purported mastermind behind a series
15 views
Daily Writeups
⤷ Title: Nexcorium Botnet Turns Unpatched DVRs into DDoS Foot Soldiers
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Tue, 21 Apr 2026 09:10:56 +0000
════════════════════════
⌗ Tags: #Malware #botnet #CVE_2024_3721 #ddos #Huawei Exploit #infosec #IoT security #malware #Mirai #Nexcorium #Nexus Team #TBK DVR #Telnet Brute Force
Daily CyberSecurity
Nexcorium Botnet Turns Unpatched DVRs into DDoS Foot Soldiers
FortiGuard unmasks Nexcorium, a Mirai variant targeting DVRs via CVE-2024-3721. Secure your IoT devices against this multi-arch DDoS botnet. Patch now!
14 views
Daily Writeups
⤷ Title: What This Series Will Be About — From Bug Hunter to Operator
════════════════════════
𐀪 Author: ghostyjoe
════════════════════════
ⴵ Time: Tue, 21 Apr 2026 09:42:42 GMT
════════════════════════
⌗ Tags: #hacking #vulnerability #linux #bug_bounty #cybersecurity
Medium
🧠 What This Series Will Be About — From Bug Hunter to Operator
✍️ Introduction
14 views
Daily Writeups
⤷ Title: They Didn’t Break In, They Logged In: How the Vercel Breach Happened
════════════════════════
𐀪 Author: CSI MJCET
════════════════════════
ⴵ Time: Tue, 21 Apr 2026 10:18:37 GMT
════════════════════════
⌗ Tags: #vercel #data_breach #cybersecurity #hacking #vercel_breach
Medium
They Didn’t Break In, They Logged In: How the Vercel Breach Happened
Author: Syedmoinuddinhussaini
16 views
Daily Writeups
⤷ Title: Vercel Got Hacked — Everything That Happened (April 2026)
════════════════════════
𐀪 Author: Atul Programmer
════════════════════════
ⴵ Time: Tue, 21 Apr 2026 09:36:13 GMT
════════════════════════
⌗ Tags: #software_development #programming #vercel #hacking #devops
Medium
Vercel Got Hacked — Everything That Happened (April 2026)
One of the most used developer platforms on the internet just got HACKED!
15 views
Daily Writeups
⤷ Title: Untitled
════════════════════════
𐀪 Author: Nina
════════════════════════
ⴵ Time: Tue, 21 Apr 2026 08:37:13 GMT
════════════════════════
⌗ Tags: #ai_regulation #cybersecurity #hacking #mytho
Medium
Untitled
The Great AI Reckoning: How April 2026 Changed Everything *Governments worldwide finally said “no” to unchecked AI development. Here’s why it matters.* — - April 2026 was the month the world …
17 views
Daily Writeups
⤷ Title: Why You Should Think Twice Before Using a Hardware Key with KeePassXC — And What to Use Instead
════════════════════════
𐀪 Author: Lalatendu Keshari Swain
════════════════════════
ⴵ Time: Tue, 21 Apr 2026 09:21:28 GMT
════════════════════════
⌗ Tags: #yubikey #keepassxc #password_manager #cybersecurity #infosec
Medium
Why You Should Think Twice Before Using a Hardware Key with KeePassXC — And What to Use Instead
Published: April 21, 2026 Reading Time: ~10 minutes Category: Cybersecurity / Password Management / Linux
17 views