Daily Writeups
@Daily_Writeups
3.53K subscribers
2 photos
130K links
Daily Bug Bounty / Cybersecurity Writeups
Source Code : https://github.com/Spix0r/writeup-miner
Download Telegram
About
Blog
Apps
Platform
Join
Daily Writeups
3.53K subscribers
Daily Writeups
⤷ Title: Cohere AI Terrarium Sandbox Flaw Enables Root Code Execution, Container Escape
════════════════════════
𐀪 Author: Unknown
════════════════════════
ⴵ Time: Wed, 22 Apr 2026 12:46:00 +0530
════════════════════════
⌗ Tags: No_Tags
25 views
Daily Writeups
⤷ Title: Command Injection Vulnerability (CVE-2025-29635) Exploited in the Wild
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Wed, 22 Apr 2026 08:57:34 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #Akamai SIRT #Command Injection #CVE_2025_29635 #D_Link #ddos #EOL Hardware #infosec #IoT security #Mirai botnet #rce #vulnerability management
Daily CyberSecurity
Command Injection Vulnerability (CVE-2025-29635) Exploited in the Wild
Akamai SIRT warns of a new Mirai campaign weaponizing EOL D-Link routers via CVE-2025-29635. Protect your network from zombie botnets—retire old hardware now.
20 views
Daily Writeups
⤷ Title: “FakeWallet” Trojan Masquerades as Crypto Wallets to Drain Assets
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Wed, 22 Apr 2026 08:09:18 +0000
════════════════════════
⌗ Tags: #Malware #Apple App Store #coinbase #Cold Wallet #crypto phishing #Enterprise Provisioning Profiles #FakeWallet #hot wallet #iOS security #kaspersky #Ledger #MetaMask #Seed Phrase Theft
Daily CyberSecurity
"FakeWallet" Trojan Masquerades as Crypto Wallets to Drain Assets
Kaspersky unmasks "FakeWallet," a Trojan on the Apple App Store using stubs & enterprise profiles to steal crypto seed phrases. Learn how to protect your keys.
16 views
Daily Writeups
⤷ Title: The Rise of Payouts King and the Resurrection of BlackBasta
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Wed, 22 Apr 2026 07:20:48 +0000
════════════════════════
⌗ Tags: #Malware #AES_256 #BlackBasta #cybersecurity #Direct Syscalls #infosec #Payouts King #Quick Assist #ransomware #RSA Encryption #Spam Bombing #Vishing #Zscaler ThreatLabz
Daily CyberSecurity
The Rise of Payouts King and the Resurrection of BlackBasta
Payouts King, the successor to BlackBasta, uses vishing and direct syscalls to bypass EDR and strike global targets. Learn how to defend your enterprise.
15 views
Daily Writeups
⤷ Title: CORS Misconfiguration: When Websites Leak Data to Attackers
════════════════════════
𐀪 Author: Cybersphere Official
════════════════════════
ⴵ Time: Wed, 22 Apr 2026 07:47:01 GMT
════════════════════════
⌗ Tags: #cybersecurity #application_security #infosec #cors #web_security
Medium
CORS Misconfiguration: When Websites Leak Data to Attackers
Context
11 views
Daily Writeups
⤷ Title: This Wasn’t Just a Hack, It Was a Systemic Stress Test for DeFi
════════════════════════
𐀪 Author: Cwallet
════════════════════════
ⴵ Time: Wed, 22 Apr 2026 08:36:57 GMT
════════════════════════
⌗ Tags: #cryptocurrency #cwallet #hacking
Medium
This Wasn’t Just a Hack, It Was a Systemic Stress Test for DeFi
A $292M exploit didn’t just hit one protocol — it exposed how deeply connected (and fragile) DeFi really is.
11 views
Daily Writeups
⤷ Title: How a CISSP Certification Training Course Can Boost Your Cybersecurity Career
════════════════════════
𐀪 Author: cyber security Updates
════════════════════════
ⴵ Time: Wed, 22 Apr 2026 06:59:57 GMT
════════════════════════
⌗ Tags: #cybersecurity #cissp_certification #education #ethical_hacking #hacking
Medium
How a CISSP Certification Training Course Can Boost Your Cybersecurity Career
In today’s rapidly evolving digital landscape, cybersecurity is no longer optional — it’s essential. A CISSP Certification Training Course…
12 views
Daily Writeups
⤷ Title: CARTP Attack Labs
════════════════════════
𐀪 Author: Joshua Goossen
════════════════════════
ⴵ Time: Wed, 22 Apr 2026 02:30:49 GMT
════════════════════════
⌗ Tags: #adversarial_architect #security_architecture #security_education #penetration_testing #hacking
Medium
CARTP ATTACK LABS
Recon & Initial Access — A Layered Reading of the Easy Labs from Altered Security
19 views
Daily Writeups
⤷ Title: Module 1 | Foundations of Cybersecurity | Google
════════════════════════
𐀪 Author: Aruldeshwal
════════════════════════
ⴵ Time: Wed, 22 Apr 2026 08:20:08 GMT
════════════════════════
⌗ Tags: #cybersecurity_training #cybersecurity_analyst #information_security #cybersecurity #infosec
Medium
Module 1 | Foundations of Cybersecurity | Google
Module 1: Welcome to the exciting world of cybersecurity.
12 views
Daily Writeups
⤷ Title: The 10-Second Script That Exposes Windows Security Gaps
════════════════════════
𐀪 Author: Thewatchdog13
════════════════════════
ⴵ Time: Wed, 22 Apr 2026 08:13:01 GMT
════════════════════════
⌗ Tags: #ethical_hacking #infosec #homelab #cybersecurity #windows_security
Medium
The 10-Second Script That Exposes Windows Security Gaps
Why I Built This
15 views
Daily Writeups
⤷ Title: CTF Write-up: Information Gathering (Web Reconnaissance)
════════════════════════
𐀪 Author: Geerhan Sentanu, CH, CHt.
════════════════════════
ⴵ Time: Wed, 22 Apr 2026 08:28:16 GMT
════════════════════════
⌗ Tags: #ethical_hacking #penetration_testing #capture_the_flag #cybersecurity_training #offensive_security
Medium
CTF Write-up: Information Gathering (Web Reconnaissance)
Information gathering (or reconnaissance) is the most important phase of penetration testing. Before launching any attacks, we need to…
19 views
Daily Writeups
⤷ Title: SQL Injection: The Simple Bug That Can Break Entire Systems
════════════════════════
𐀪 Author: Prajwali Landge
════════════════════════
ⴵ Time: Wed, 22 Apr 2026 07:09:18 GMT
════════════════════════
⌗ Tags: #cybersecurity #sql_injection #web_security #penetration_testing #sql
Medium
SQL Injection: The Simple Bug That Can Break Entire Systems
Most developers think their application is secure… until someone logs in without a password.
26 views
Daily Writeups
⤷ Title: TryHackMe White Rabbit — All 3 Flags via Prompt Injection (2026)
════════════════════════
𐀪 Author: Sayedrahman
════════════════════════
ⴵ Time: Wed, 22 Apr 2026 07:27:56 GMT
════════════════════════
⌗ Tags: #artificial_intelligence #cybersecurity #ethical_hacking #prompt_injection_attack #tryhackme
Medium
TryHackMe White Rabbit — All 3 Flags via Prompt Injection (2026)
This room took me about 20 minutes. No ports to scan. No CVE to chase. No shell to pop. Just you, a restricted AI terminal, and one…
34 views
Daily Writeups
⤷ Title: Microsoft Patches Critical ASP.NET Core CVE-2026-40372 Privilege Escalation Bug
════════════════════════
𐀪 Author: Unknown
════════════════════════
ⴵ Time: Wed, 22 Apr 2026 14:59:00 +0530
════════════════════════
⌗ Tags: No_Tags
28 views
Daily Writeups
⤷ Title: JA4+: A suite of network fingerprinting standards
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Wed, 22 Apr 2026 10:11:03 +0000
════════════════════════
⌗ Tags: #Open Source Tool
Penetration Testing Tools
JA4+: A suite of network fingerprinting standards
JA4+ is a suite of network fingerprinting methods that are easy to use and easy to share. These methods are both human and machine-readable
21 views
Daily Writeups
⤷ Title: CISA Issues Emergency Deadline as Hackers Weaponize Cisco SD-WAN Flaws
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Wed, 22 Apr 2026 10:09:13 +0000
════════════════════════
⌗ Tags: #Vulnerability #Catalyst #CISA #Cisco #CVE_2026_20122 #CVE_2026_20128 #Federal Mandate #Infosec #KEV Catalog #network security #SD_WAN #zero_day
Penetration Testing Tools
CISA Issues Emergency Deadline as Hackers Weaponize Cisco SD-WAN Flaws
Cyber intruders are already exploiting vulnerabilities within Cisco networking hardware, prompting United States authorities to grant federal agencies
13 views
Daily Writeups
⤷ Title: The Keys to the Kingdom: Unauthorized Users Infiltrate Anthropic’s “Mythos” Cyber-Weapon
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Wed, 22 Apr 2026 10:07:54 +0000
════════════════════════
⌗ Tags: #Cybercriminals #AI security #Anthropic #Claude Mythos #Cybersecurity 2026 #Dario Amodei #data breach #Project Glasswing #Supply Chain Risk #Vulnerability Discovery #zero_day exploits
Penetration Testing Tools
The Keys to the Kingdom: Unauthorized Users Infiltrate Anthropic’s "Mythos" Cyber-Weapon
While certain enterprises are merely initiating the evaluation of nascent artificial intelligence architectures, others have already devised surreptitious
8 views
Daily Writeups
⤷ Title: Under the Ransom Countdown: Everest Group Threatens to Leak Sensitive Data of Major U.S. Banks
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Wed, 22 Apr 2026 10:03:19 +0000
════════════════════════
⌗ Tags: #Data Leak #Citizens Financial Group #cyber extortion #data breach #data leak #Everest Group #Financial Security #Frost Bank #identity theft #RaaS #ransomware
Penetration Testing Tools
Under the Ransom Countdown: Everest Group Threatens to Leak Sensitive Data of Major U.S. Banks
Cyber adversaries have issued a menacing ultimatum to disclose sensitive telemetry belonging to two prominent American financial institutions.
9 views
Daily Writeups
⤷ Title: Broken Blueprint: The 4-Million-Euro “Zero-Knowledge” Failure of the EU’s Age Verification App
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Wed, 22 Apr 2026 10:01:41 +0000
════════════════════════
⌗ Tags: #Vulnerability #cybersecurity #data privacy #Deutsche Telekom #Digital Services Act #EU Age Verification App #EUDI Wallet #Markéta Gregorová #Scytáles #Ursula von der Leyen #Zero_Knowledge Proof
Penetration Testing Tools
Broken Blueprint: The 4-Million-Euro "Zero-Knowledge" Failure of the EU’s Age Verification App
The debut of the nascent internet age-verification application, an endeavor upon which Brussels had bestowed considerable aspirations, has
9 views
Daily Writeups
⤷ Title: The $600 Billion Orbit: SpaceX and xAI Join Forces with Cursor to Command the Future of Coding
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Wed, 22 Apr 2026 09:48:29 +0000
════════════════════════
⌗ Tags: #Technology #AI Coding #artificial intelligence #Colossus Supercomputer #Cursor #Elon Musk #Software Engineering #SpaceX #SpaceX IPO #Tech Mergers 2026 #Vibe Coding #xAI
Daily CyberSecurity
The $600 Billion Orbit: SpaceX and xAI Join Forces with Cursor to Command the Future of Coding
SpaceX secures a $600 billion option to acquire Cursor AI. Discover how the "Vibe Coding" pioneer is leveraging xAI’s Colossus supercomputer to build the world's most powerful models.
10 views
Daily Writeups
⤷ Title: The 271-Zero-Day Sweep: How Anthropic’s “Project Glasswing” Just Saved Firefox
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Wed, 22 Apr 2026 09:46:17 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #AI Code Audit #Anthropic #browser security #Claude Mythos #cybersecurity #firefox #infosec #Mozilla Foundation #Project Glasswing #zero_day vulnerabilities
Daily CyberSecurity
The 271-Zero-Day Sweep: How Anthropic’s "Project Glasswing" Just Saved Firefox
Mozilla used Anthropic’s Claude Mythos to fix 271 Firefox vulnerabilities. Discover how AI is finally flipping the script on the cybersecurity "cost asymmetry."
16 views