Daily Writeups
@Daily_Writeups
3.52K subscribers
2 photos
129K links
Daily Bug Bounty / Cybersecurity Writeups
Source Code : https://github.com/Spix0r/writeup-miner
Download Telegram
About
Blog
Apps
Platform
Join
Daily Writeups
3.52K subscribers
Daily Writeups
⤷ Title: Are We Truly Secure , or Just Untested?
════════════════════════
𐀪 Author: Abraham MB Selebay
════════════════════════
ⴵ Time: Fri, 01 May 2026 15:31:59 GMT
════════════════════════
⌗ Tags: #malware #hacking #technology #data_breach #liberia
Medium
Are We Truly Secure , or Just Untested?
A Cybersecurity Reality Check (Liberia vs Nigeria and others)
16 views
Daily Writeups
⤷ Title: Cryptography challenges on FlagYard
════════════════════════
𐀪 Author: Cyb0rgBytes
════════════════════════
ⴵ Time: Fri, 01 May 2026 16:46:50 GMT
════════════════════════
⌗ Tags: #cybersecurity #cyber_security_awareness #ctf #infosec #cryptography
Medium
Cryptography challenges on FlagYard
CTF Cryptography Writeup
16 views
Daily Writeups
⤷ Title: Chess, Not Checkers: Why Cybersecurity Is a Multi-Move Game
════════════════════════
𐀪 Author: Eric Vanderburg
════════════════════════
ⴵ Time: Fri, 01 May 2026 16:03:34 GMT
════════════════════════
⌗ Tags: #cybersecurity #infosec #chess #threat_intelligence #strategy
Medium
Chess, Not Checkers: Why Cybersecurity Is a Multi-Move Game
An unfortunate reality is that many cybersecurity programs are built to react. A vulnerability is discovered and patched. An alert is…
39 views
Daily Writeups
⤷ Title: Pentest AI Agents: 28 Specialized AI Subagents That Turn Claude Code Into a Cybersecurity…
════════════════════════
𐀪 Author: TechLatest.Net
════════════════════════
ⴵ Time: Fri, 01 May 2026 15:37:56 GMT
════════════════════════
⌗ Tags: #pentesting #penetration_testing #claude_code #ai_agent #open_source
Medium
Pentest AI Agents: 28 Specialized AI Subagents That Turn Claude Code Into a Cybersecurity…
AI is no longer just assisting developers — it’s now stepping deep into offensive security.
26 views
Daily Writeups
⤷ Title: Stored XSS to Privilege Escalation in Azuriom CMS — When “Trusted Users” Become a Security…
════════════════════════
𐀪 Author: CradS
════════════════════════
ⴵ Time: Fri, 01 May 2026 15:14:40 GMT
════════════════════════
⌗ Tags: #cms #cybersecurity #penetration_testing #appsec #cross_site_scripting
Medium
Stored XSS to Privilege Escalation in Azuriom CMS — When “Trusted Users” Become a Security Assumption
During a recent review of the Azuriom CMS, I identified a behavior involving SVG file uploads that can lead to privilege escalation through…
23 views
Daily Writeups
⤷ Title: Pentest’e Giriş
════════════════════════
𐀪 Author: Asude Gökçenaz Ev
════════════════════════
ⴵ Time: Fri, 01 May 2026 15:07:03 GMT
════════════════════════
⌗ Tags: #siber_guvenlik #penetration_testing #cybersecurity
Medium
Pentest’e Giriş
Bir şirketin sistemine yasal olarak saldırabileceğinizi biliyor muydunuz? Üstelik amacınız zarar vermek değil, sistemi kurtarmak. İşte tam…
31 views
Daily Writeups
⤷ Title: PS Eclipse — Write-Up
════════════════════════
𐀪 Author: Tamerlan Shabanov
════════════════════════
ⴵ Time: Fri, 01 May 2026 16:45:20 GMT
════════════════════════
⌗ Tags: #ransomware #soc #tryhackme #cybersecurity #splunk
Medium
PS Eclipse — Write-Up
Room: https://tryhackme.com/room/posheclipse
34 views
Daily Writeups
⤷ Title: Professional Design: AI-Powered API Monitoring System
════════════════════════
𐀪 Author: Engr. Md. Hasan Monsur
════════════════════════
ⴵ Time: Fri, 01 May 2026 16:07:18 GMT
════════════════════════
⌗ Tags: #api #ai #ai_powered_tools #api_security #programming
Medium
Professional Design: AI-Powered API Monitoring System
Design a secure, enterprise-grade AI-powered API monitoring system that delivers real-time observability, intelligent anomaly detection…
77 views
Daily Writeups
⤷ Title: The Hidden Open Door: Securing Your Android Content Providers Against SQL Injection
════════════════════════
𐀪 Author: Android Expert
════════════════════════
ⴵ Time: Fri, 01 May 2026 16:49:49 GMT
════════════════════════
⌗ Tags: #sql_injection #contentprovider #android_app_development #android_security #kotlin
Medium
The Hidden Open Door: Securing Your Android Content Providers Against SQL Injection
Why selectionArgs is a mandatory defense, not an option, for protecting your app’s SQLite database from malicious data leaks.
124 views
Daily Writeups
⤷ Title: CISA Adds Actively Exploited Linux Root Access Bug CVE-2026-31431 to KEV
════════════════════════
𐀪 Author: Unknown
════════════════════════
ⴵ Time: Sun, 03 May 2026 11:56:00 +0530
════════════════════════
⌗ Tags: No_Tags
100 views
Daily Writeups
⤷ Title: Trellix Confirms Source Code Breach With Unauthorized Repository Access
════════════════════════
𐀪 Author: Unknown
════════════════════════
ⴵ Time: Sat, 02 May 2026 12:11:00 +0530
════════════════════════
⌗ Tags: No_Tags
102 views
Daily Writeups
⤷ Title: 30,000 Facebook Accounts Hacked via Google AppSheet Phishing Campaign
════════════════════════
𐀪 Author: Unknown
════════════════════════
ⴵ Time: Fri, 01 May 2026 23:39:00 +0530
════════════════════════
⌗ Tags: No_Tags
91 views
Daily Writeups
⤷ Title: Paying Ransom Won’t Help as VECT 2.0 Ransomware Destroys Data Irreversibly
════════════════════════
𐀪 Author: Deeba Ahmed
════════════════════════
ⴵ Time: Sun, 03 May 2026 16:07:49 +0000
════════════════════════
⌗ Tags: #Security #Cyber Attacks #Cyber Crime #Check Point #Cyber Attack #Cybersecurity #RaaS #Ransomware #VECT #Windows
Hackread
Paying Ransom Won’t Help as VECT 2.0 Ransomware Destroys Data Irreversibly
VECT 2.0 ransomware contains fatal flaws that permanently destroy files, making recovery impossible and rendering ransom payments useless for victims.
59 views
Daily Writeups
⤷ Title: Google AppSheet Exploited in 30,000-User Facebook Phishing Operation
════════════════════════
𐀪 Author: Deeba Ahmed
════════════════════════
ⴵ Time: Sat, 02 May 2026 18:07:25 +0000
════════════════════════
⌗ Tags: #Security #Phishing Scam #AccountDumpling #AppSheet #Cyber Attack #Cybersecurity #Facebook #Fraud #Google #Google Drive #Phishing #Scam
Hackread
Google AppSheet Exploited in 30,000-User Facebook Phishing Operation
Scammers are abusing Google AppSheet and Google Drive to bypass security filters and steal thousands of Facebook Business accounts globally.
31 views
Daily Writeups
⤷ Title: 2 US Cybersecurity Experts Jailed for Aiding ALPHV (BlackCat) Ransomware
════════════════════════
𐀪 Author: Deeba Ahmed
════════════════════════
ⴵ Time: Sat, 02 May 2026 12:28:23 +0000
════════════════════════
⌗ Tags: #Cyber Crime #Cyber Attacks #Security #ALPHV #BlackCat #cyber attacks #Cybersecurity #FBI #Kevin Martin #Ransomware #Ryan Goldberg
Hackread
2 US Cybersecurity Experts Jailed for Aiding ALPHV (BlackCat) Ransomware
Two US cybersecurity experts jailed for aiding BlackCat ransomware group, extorting victims worldwide and exploiting insider access for profit.
26 views
Daily Writeups
⤷ Title: 45,000 Attacks, 5,300+ Backdoors Tied to China-Linked Cybercrime Operation
════════════════════════
𐀪 Author: Deeba Ahmed
════════════════════════
ⴵ Time: Fri, 01 May 2026 19:38:50 +0000
════════════════════════
⌗ Tags: #Cyber Crime #Malware #Security #backdoor #China #Cyber Attack #Cybersecurity #OpenClaw #SOCRadar
Hackread
45,000 Attacks, 5,300+ Backdoors Tied to China-Linked Cybercrime Operation
SOCRadar researchers have uncovered a massive Chinese cybercrime operation using the OpenClaw and Paperclip systems to automate global attacks.
20 views
Daily Writeups
⤷ Title: Hackers Use Jenkins Access to Deploy DDoS Botnet Against Gaming Servers
════════════════════════
𐀪 Author: Deeba Ahmed
════════════════════════
ⴵ Time: Fri, 01 May 2026 17:21:29 +0000
════════════════════════
⌗ Tags: #Security #Cyber Attacks #Botnet #Cyber Attack #Cybersecurity #Darktrace #DDOS #Malware #RCE
Hackread
Hackers Use Jenkins Access to Deploy DDoS Botnet Against Gaming Servers
A new campaign shows misconfigured Jenkins servers abused to deploy a DDoS botnet targeting gaming systems, with Valve Corporation infrastructure in focus.
19 views
Daily Writeups
⤷ Title: The Tadashi Files: Inside the xlabs_v1 Botnet Targeting 4 Million Android Devices
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Sun, 03 May 2026 02:17:23 +0000
════════════════════════
⌗ Tags: #Malware #ADB Exploit #Android Malware #cybersecurity #DDoS_for_hire #Hunt Intelligence #IoT security #Mirai botnet #Port 5555 #RakNet Flood #Tadashi #xlabs_v1
Daily CyberSecurity
The Tadashi Files: Inside the xlabs_v1 Botnet Targeting 4 Million Android Devices
Hunt Intelligence dismantles xlabs_v1, a Mirai-derived botnet targeting 4M Android devices via port 5555. See how an exposed server leaked the entire toolkit.
16 views
Daily Writeups
⤷ Title: 40,000+ Sites Exposed: Critical 9.8 CVSS Flaw Grants Total WordPress Account Takeover
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Sat, 02 May 2026 09:17:45 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #Account Takeover #Authentication Bypass #CVE_2026_7567 #CVSS 9.8 #infosec #PHP Logic Bypass #Plugin Vulnerability #Temporary Login #wordpress #wordpress security
Daily CyberSecurity
40,000+ Sites Exposed: Critical 9.8 CVSS Flaw Grants Total WordPress Account Takeover
A critical 9.8 CVSS vulnerability in the Temporary Login plugin puts 40,000+ WordPress sites at risk of account takeover. Patch to version 1.1.0 now!
18 views
Daily Writeups
⤷ Title: Cybersecurity Pros Sentenced for Running ALPHV BlackCat Ransomware
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Sat, 02 May 2026 03:29:54 +0000
════════════════════════
⌗ Tags: #Cybercriminals #ALPHV/BlackCat #Cybercrime #Cybersecurity Insider Threat #Extortion #fbi #Healthcare Breach #infosec #Kevin Martin #RaaS #ransomware #Ryan Goldberg
Daily CyberSecurity
Cybersecurity Pros Sentenced for Running ALPHV BlackCat Ransomware
Two US cybersecurity professionals get 4 years in prison for acting as ALPHV BlackCat ransomware affiliates, extorting victims and leaking patient data.
17 views
Daily Writeups
⤷ Title: Waking the Sleepers: The BufferZoneCorp Campaign Poisoning Ruby and Go Ecosystems
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Sat, 02 May 2026 03:23:31 +0000
════════════════════════
⌗ Tags: #Malware #BufferZoneCorp #CI/CD security #Credential Theft #cybersecurity #Go Modules #infosec #knot_theory #malware #RubyGems #Socket #supply chain attack
Daily CyberSecurity
Waking the Sleepers: The BufferZoneCorp Campaign Poisoning Ruby and Go Ecosystems
Socket uncovers a BufferZoneCorp "sleeper" campaign targeting Ruby and Go. Malicious packages steal SSH keys and subvert CI/CD pipelines. Patch now!
14 views