Daily Writeups
@Daily_Writeups
4.2K subscribers
4 photos
139K links
Daily Bug Bounty / Cybersecurity Writeups
Source Code : https://github.com/Spix0r/writeup-miner
Download Telegram
About
Blog
Apps
Platform
Join
Daily Writeups
4.2K subscribers
Daily Writeups
⤷ Title: No Payment Without Approval
════════════════════════
𐀪 Author: Shubhojit Dasgupta
════════════════════════
ⴵ Time: Sun, 08 Nov 2026 14:43:40 GMT
════════════════════════
⌗ Tags: #ai_agent #api_gateway #fintech #open_policy_agent #api_security
Medium
No Payment Without Approval: Sequence Rules for AI Agents, Enforced at the Gateway
Sequence rules for AI agents, enforced at the gateway
2 views
Daily Writeups
⤷ Title: Revoked, Yet Still Acting
════════════════════════
𐀪 Author: Shubhojit Dasgupta
════════════════════════
ⴵ Time: Sun, 08 Nov 2026 12:47:17 GMT
════════════════════════
⌗ Tags: #ai_agent #oauth #api_gateway #cybersecurity #api_security
Medium
Revoked, Yet Still Acting: Enforcing Revocation for AI Agents at the Kong Gateway
How many calls a stopped AI agent still gets
3 views
Daily Writeups
⤷ Title: Safe Isn’t the Default: Hardening an AI Agent Route on Kong
════════════════════════
𐀪 Author: Shubhojit Dasgupta
════════════════════════
ⴵ Time: Sun, 08 Nov 2026 12:32:29 GMT
════════════════════════
⌗ Tags: #api_security #api_gateway #oauth #platform_engineering #ai_agent
Medium
Safe Isn’t the Default: Hardening an AI Agent Route on Kong, Tested in a Lab
Four gaps, three plugins, tested in a lab
3 views
Daily Writeups
⤷ Title: Kong and Gravitee in One AI Agent Architecture
════════════════════════
𐀪 Author: Shubhojit Dasgupta
════════════════════════
ⴵ Time: Sun, 08 Nov 2026 12:23:46 GMT
════════════════════════
⌗ Tags: #identity_management #api_security #api_gateway #ai_agent #oauth
Medium
Kong and Gravitee in One AI Agent Architecture
Gravitee issues the agent’s authority. Kong enforces it
3 views
Daily Writeups
⤷ Title: Who Enforces an AI Agent’s Permissions, and Where?
════════════════════════
𐀪 Author: Shubhojit Dasgupta
════════════════════════
ⴵ Time: Sun, 08 Nov 2026 12:04:06 GMT
════════════════════════
⌗ Tags: #ai_agent #software_architecture #oauth #api_security #cybersecurity
Medium
Who Enforces an AI Agent’s Permissions, and Where?
Five points, one gateway on every call
4 views
Daily Writeups
⤷ Title: Securing the Edge: Implementing JWT Blacklisting and Resilient Authentication in Node.js & Express
════════════════════════
𐀪 Author: Emmanuel Christopher Jallay
════════════════════════
ⴵ Time: Fri, 06 Nov 2026 22:00:19 GMT
════════════════════════
⌗ Tags: #nodejs #api_security #backend_development #software_engineering #javascript
Medium
Securing the Edge: Implementing JWT Blacklisting and Resilient Authentication in Node.js & Express
When building backend APIs, authentication is usually one of the first things we implement. We set up user registration, issue a JSON Web…
2 views
Daily Writeups
⤷ Title: Secure API Gateway connection to AWS
════════════════════════
𐀪 Author: Cabdukayumova
════════════════════════
ⴵ Time: Fri, 06 Nov 2026 12:24:39 GMT
════════════════════════
⌗ Tags: #aws #aws_api_gateway #aws_iam #aws_lambda #api_security
Medium
Secure API Gateway connection to AWS
We all know how an API can be a lifesaver when you want to integrate a few tools together. But how can you be sure you can provide…
3 views
Daily Writeups
⤷ Title: API-P-5: Token Attacks: Breaking Weak Authentication, Predictable Tokens, and JWT Misconfigurations…
════════════════════════
𐀪 Author: Bilal k. Mohammed
════════════════════════
ⴵ Time: Fri, 06 Nov 2026 05:31:01 GMT
════════════════════════
⌗ Tags: #api_token #cybersecurity #api_security #jwt_authentication
Medium
API-P-5: Token Attacks: Breaking Weak Authentication, Predictable Tokens, and JWT Misconfigurations with Burp Suite
A hands-on guide to identifying weak token generation, JWT validation flaws, algorithm confusion, and authentication vulnerabilities using…
4 views
Daily Writeups
⤷ Title: The request that never asked who I was
════════════════════════
𐀪 Author: Dmytro Khirnyi
════════════════════════
ⴵ Time: Tue, 10 Nov 2026 13:45:30 GMT
════════════════════════
⌗ Tags: #application_security #cybersecurity #software_engineering #access_control #api_security
Medium
The request that never asked who I was
I sent a POST to a scheduling tool without any credentials. It held a slot on another user’s calendar.
27 views
Daily Writeups
⤷ Title: The request that never asked who I was
════════════════════════
𐀪 Author: Dmytro Khirnyi
════════════════════════
ⴵ Time: Tue, 10 Nov 2026 13:45:30 GMT
════════════════════════
⌗ Tags: #application_security #cybersecurity #software_engineering #access_control #api_security
Medium
The request that never asked who I was
I sent a POST to a scheduling tool without any credentials. It held a slot on another user’s calendar.
5 views