Daily Writeups
@Daily_Writeups
3.52K subscribers
2 photos
129K links
Daily Bug Bounty / Cybersecurity Writeups
Source Code : https://github.com/Spix0r/writeup-miner
Download Telegram
About
Blog
Apps
Platform
Join
Daily Writeups
3.52K subscribers
Daily Writeups
⤷ Title: Cookies Explained: How Websites Remember You, And How Attackers Exploit It
════════════════════════
𐀪 Author: Amarachi Onyekachi
════════════════════════
ⴵ Time: Tue, 05 May 2026 06:42:46 GMT
════════════════════════
⌗ Tags: #ethical_hacking #cybersecurity #cookies #web_security #session_management
Medium
Cookies Explained: How Websites Remember You, And How Attackers Exploit It
How cookies work, why they matter, and how attackers exploit them.
36 views
Daily Writeups
⤷ Title: The CIA Triad: The Three Invisible Pillars of the Internet
════════════════════════
𐀪 Author: Jijo Shibu
════════════════════════
ⴵ Time: Tue, 05 May 2026 06:16:23 GMT
════════════════════════
⌗ Tags: #tech_education #information_security #beginners_guide #cybersecurity #ethical_hacking
Medium
The CIA Triad: The Three Invisible Pillars of the Internet
Before you can understand how data gets stolen, you have to understand the “museum rules” keeping it safe.
48 views
Daily Writeups
⤷ Title: Weaver E-cology RCE Flaw CVE-2026-22679 Actively Exploited via Debug API
════════════════════════
𐀪 Author: Unknown
════════════════════════
ⴵ Time: Tue, 05 May 2026 13:07:00 +0530
════════════════════════
⌗ Tags: No_Tags
39 views
Daily Writeups
⤷ Title: Microsoft Details Phishing Campaign Targeting 35,000 Users Across 26 Countries
════════════════════════
𐀪 Author: Unknown
════════════════════════
ⴵ Time: Tue, 05 May 2026 12:05:00 +0530
════════════════════════
⌗ Tags: No_Tags
34 views
Daily Writeups
⤷ Title: Supply Chains in the Crosshairs: Scan and Simulate Multi-Stage Attacks with Trajan
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Tue, 05 May 2026 08:24:29 +0000
════════════════════════
⌗ Tags: #Open Source Tool #Azure DevOps #CI/CD Security #DevSecOps #GitHub Actions #GitLab CI #jenkins #JFrog #Pentesting Tools #supply chain attack #Taint Tracking #Trajan #WebAssembly
Penetration Testing Tools
Supply Chains in the Crosshairs: Scan and Simulate Multi-Stage Attacks with Trajan
Trajan isn't just a scanner. It maps dependency graphs and uses built-in attack plugins to simulate real-world CI/CD supply chain compromises.
24 views
Daily Writeups
⤷ Title: Two Strikes, Half a Billion: How North Korean Hackers Seized 76% of All Stolen Crypto in Just 120 Days
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Tue, 05 May 2026 07:46:25 +0000
════════════════════════
⌗ Tags: #Cybercriminals #Bridge Exploit #Crypto Theft #Cybersecurity 2026 #DPRK #Drift Protocol #KelpDAO #LayerZero #Lazarus Group #North Korea #Solana #TraderTraitor #TRM Labs
Penetration Testing Tools
Two Strikes, Half a Billion: How North Korean Hackers Seized 76% of All Stolen Crypto in Just 120 Days
North Korean cyber-operatives have once again demonstrated how a handful of precision strikes can fundamentally reshape annual cryptocurrency
15 views
Daily Writeups
⤷ Title: The Five-Day Race: Hackers Weaponize Critical Weaver E-cology RCE via Exposed Debugging API
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Tue, 05 May 2026 07:42:03 +0000
════════════════════════
⌗ Tags: #Vulnerability #CVE_2026_22679 #Debugging API #enterprise security #Java Vulnerability #Office Automation Security #Patch Management #RCE #remote code execution #Tomcat #Vega Research #Weaver E_cology
Penetration Testing Tools
The Five-Day Race: Hackers Weaponize Critical Weaver E-cology RCE via Exposed Debugging API
Adversaries commenced the exploitation of a critical vulnerability within Weaver E-cology a mere few days following the release
9 views
Daily Writeups
⤷ Title: The Support Chat Trap: How a “Customer Screenshot” Led to a Critical Code-Signing Breach at DigiCert
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Tue, 05 May 2026 07:36:49 +0000
════════════════════════
⌗ Tags: #Malware #Certificate Revocation #Code Signing #Cyber Security 2026 #DigiCert #endpoint security #malware #security breach #Social Engineering #Support Portal Exploit #Zhong Stealer
Penetration Testing Tools
The Support Chat Trap: How a "Customer Screenshot" Led to a Critical Code-Signing Breach at DigiCert
A seemingly innocuous file transmitted via a support chat escalated into a significant crisis for DigiCert. An adversary
12 views
Daily Writeups
⤷ Title: The Billion-Dollar Blunder: How Hackers Inadvertently Sent Rockstar Games Stock Soaring with GTA Revenue Leaks
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Tue, 05 May 2026 07:27:55 +0000
════════════════════════
⌗ Tags: #Cybercriminals #Cybersecurity 2026 #GTA Online #GTA VI #Market Capitalization #Microtransactions #Revenue Leak #Rockstar Games #Shark Cards #ShinyHunters #Take_Two Interactive
Penetration Testing Tools
The Billion-Dollar Blunder: How Hackers Inadvertently Sent Rockstar Games Stock Soaring with GTA Revenue Leaks
In an ironic twist of fate, hackers attempted to coerce the architects of Grand Theft Auto, only to
7 views
Daily Writeups
⤷ Title: Zero Delay, Total Loss: How a Compromised Key and a Disabled Timelock Cost Wasabi Protocol $5 Million
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Tue, 05 May 2026 07:24:09 +0000
════════════════════════
⌗ Tags: #Cybercriminals #Admin Key Compromise #Blockaid #CertiK #Cryptocurrency Theft #Cyvers #DeFi Exploit #Ethereum #Governance Failure #Liquidity Provider #Smart Contract Security #Tornado Cash #Wasabi Protocol
Penetration Testing Tools
Zero Delay, Total Loss: How a Compromised Key and a Disabled Timelock Cost Wasabi Protocol $5 Million
The Wasabi Protocol was divested of millions of dollars within mere minutes, a catastrophe precipitated not by a
6 views
Daily Writeups
⤷ Title: Microsoft Defender Flaw Erased DigiCert Root Certificates and Paralyzed Windows Systems
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Tue, 05 May 2026 08:32:06 +0000
════════════════════════
⌗ Tags: #Malware #Browser Error #cyber security 2026 #DigiCert #EV Code Signing #false positive #Microsoft Defender #Root Certificate #SSL/TLS #Trojan:Win32/Cerdigicert.A!dha #Windows 10 #Windows 11 Security
Daily CyberSecurity
Microsoft Defender Flaw Erased DigiCert Root Certificates and Paralyzed Windows Systems
Microsoft Defender erroneously flagged DigiCert root certificates as "Cerdigicert" malware. Discover the fix and how to restore your system's trusted root store.
7 views
Daily Writeups
⤷ Title: The $1.5 Million Truce: Elon Musk Settles SEC Lawsuit Over “Hidden” Twitter Stake and Acquisition Gamesmanship
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Tue, 05 May 2026 08:27:41 +0000
════════════════════════
⌗ Tags: #Technology #Civil Penalty #Disclosure Violation #Elon Musk #Financial News #Gary Gensler #Regulatory Compliance #SEC #Securities Law #Settlement #Tesla #twitter #X
Daily CyberSecurity
The $1.5 Million Truce: Elon Musk Settles SEC Lawsuit Over "Hidden" Twitter Stake and Acquisition Gamesmanship
Elon Musk settles with the SEC for $1.5M over his delayed 2022 Twitter stake disclosure. The record-breaking fine ends years of legal "harassment" and litigation.
7 views
Daily Writeups
⤷ Title: Scammers Weaponize Amazon SES to Bypass Security
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Tue, 05 May 2026 08:15:32 +0000
════════════════════════
⌗ Tags: #Cybercriminals #Amazon SES #aws security #BEC #Cloud Security #Credential Theft #DKIM #DMARC #Email Security #IAM Keys #infosec #kaspersky #phishing #SPF
Daily CyberSecurity
Scammers Weaponize Amazon SES to Bypass Security
Scammers are leveraging Amazon SES and leaked IAM keys to bypass security filters. Learn how to protect your organization from this high-trust phishing surge.
6 views
Daily Writeups
⤷ Title: Apple Unveils End-to-End Encryption for iPhone-to-Android RCS Messaging
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Tue, 05 May 2026 07:06:17 +0000
════════════════════════
⌗ Tags: #Technology #android #Apple #cyber security 2026 #Digital Markets Act #E2EE #End_to_End Encryption #Google Messages #GSMA #iMessage #iOS 26.5 #Mobile Privacy #RCS
Daily CyberSecurity
Apple Unveils End-to-End Encryption for iPhone-to-Android RCS Messaging
Privacy without borders: Apple’s iOS 26.5 beta finally brings End-to-End Encryption to RCS. enjoy iMessage-level security when texting Android users.
11 views
Daily Writeups
⤷ Title: The New Wall: How the FCC’s Ban on Chinese Testing Labs will Inflate Flagship Phone Prices and Delay Launches
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Tue, 05 May 2026 07:02:59 +0000
════════════════════════
⌗ Tags: #Technology #Apple #china #FCC #Google Pixel #Hardware Engineering #MRA #national security #Radio Frequency Testing #samsung #Smartphone Certification #Supply Chain #Time to Market
Daily CyberSecurity
The New Wall: How the FCC’s Ban on Chinese Testing Labs will Inflate Flagship Phone Prices and Delay Launches
The FCC is banning equipment testing data from China. Discover how this "security" mandate will force Apple, Google, and Samsung to hike prices and delay US launches.
13 views
Daily Writeups
⤷ Title: The N-Day Nightmare: How SHADOW-EARTH-053 Breaches Governments Using “Old” Exploits
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Tue, 05 May 2026 07:02:51 +0000
════════════════════════
⌗ Tags: #Cyber Security #Vulnerability Report #Asia Cybersecurity #China_Aligned APT #Cyberespionage #DLL Sideloading #Godzilla #GodZilla Web Shell #NATO Security #ProxyLogon #SHADOW_EARTH_053 #ShadowPad #TrendAI Research #Web Shell
Daily CyberSecurity
The N-Day Nightmare: How SHADOW-EARTH-053 Breaches Governments Using "Old" Exploits
SHADOW-EARTH-053 is breaching governments and NATO using old ProxyLogon flaws and ShadowPad. Learn how this China-aligned group stays hidden via registry loading.
14 views
Daily Writeups
⤷ Title: The .env File Was Just Sitting There: How a Single Cognito Misconfiguration Unlocked a Fintech’s…
════════════════════════
𐀪 Author: SRCK
════════════════════════
ⴵ Time: Tue, 05 May 2026 08:28:39 GMT
════════════════════════
⌗ Tags: #bug_bounty #cybersecurity #cloud_security #penetration_testing #aws_security
Medium
The .env File Was Just Sitting There: How a Single Cognito Misconfiguration Unlocked a Fintech’s Cloud
TL;DR — Routine bug bounty. Fintech platform. Found GetCredentialsForIdentity response in Burp Suite returning live AWS credentials to the…
6 views
Daily Writeups
⤷ Title: The Social Honeypot — How I Set a Trap to Catch a Hacker, and the Result
════════════════════════
𐀪 Author: naonao
════════════════════════
ⴵ Time: Tue, 05 May 2026 07:55:33 GMT
════════════════════════
⌗ Tags: #cybersecurity #hacking
Medium
The Social Honeypot — How I Set a Trap to Catch a Hacker, and the Result
This is the story which I had tried to catch a hacker — the Shadow Behind the Screen.
5 views
Daily Writeups
⤷ Title: The End of Human Hackers? Enter “Mythos”. How Can you stop AI Taking Over the Kill Chain.
════════════════════════
𐀪 Author: Reggie Menacherry
════════════════════════
ⴵ Time: Tue, 05 May 2026 07:28:58 GMT
════════════════════════
⌗ Tags: #hacking #infosec #cybersecurity #ai #cyber_security_awareness
Medium
The End of Human Hackers? Enter “Mythos”. How Can you stop AI Taking Over the Kill Chain.
The cybersecurity community has long prepared for automation. We’ve seen scripts evolve into frameworks, frameworks into platforms, and now…
6 views
Daily Writeups
⤷ Title: Beyond 1.1.1.1: Advanced Cloudflare DNS Strategies Most People Ignore
════════════════════════
𐀪 Author: Andy Nguyen
════════════════════════
ⴵ Time: Tue, 05 May 2026 07:51:52 GMT
════════════════════════
⌗ Tags: #cloudflare #cybersecurity #dns #infosec #network_security
Medium
Beyond 1.1.1.1: Advanced Cloudflare DNS Strategies Most People Ignore
If you’re still using Cloudflare’s 1.1.1.1 DNS resolver without exploring its siblings, you’re missing out on critical security layers that…
10 views
Daily Writeups
⤷ Title: Inside the Fake RTO Challan Checker: How I Uncovered a Sophisticated Android Spyware Targeting…
════════════════════════
𐀪 Author: Karan Dhillon
════════════════════════
ⴵ Time: Tue, 05 May 2026 07:44:03 GMT
════════════════════════
⌗ Tags: #cybersecurity #android #malware #india #infosec
Medium
Inside the Fake RTO Challan Checker: How I Uncovered a Sophisticated Android Spyware Targeting Indians
A full technical teardown of a malware campaign hiding behind India’s traffic fine system
9 views