Daily Writeups
@Daily_Writeups
3.53K subscribers
2 photos
130K links
Daily Bug Bounty / Cybersecurity Writeups
Source Code : https://github.com/Spix0r/writeup-miner
Download Telegram
About
Blog
Apps
Platform
Join
Daily Writeups
3.53K subscribers
Daily Writeups
⤷ Title: Microsoft Defender Flaw Erased DigiCert Root Certificates and Paralyzed Windows Systems
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Tue, 05 May 2026 08:32:06 +0000
════════════════════════
⌗ Tags: #Malware #Browser Error #cyber security 2026 #DigiCert #EV Code Signing #false positive #Microsoft Defender #Root Certificate #SSL/TLS #Trojan:Win32/Cerdigicert.A!dha #Windows 10 #Windows 11 Security
Daily CyberSecurity
Microsoft Defender Flaw Erased DigiCert Root Certificates and Paralyzed Windows Systems
Microsoft Defender erroneously flagged DigiCert root certificates as "Cerdigicert" malware. Discover the fix and how to restore your system's trusted root store.
7 views
Daily Writeups
⤷ Title: The $1.5 Million Truce: Elon Musk Settles SEC Lawsuit Over “Hidden” Twitter Stake and Acquisition Gamesmanship
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Tue, 05 May 2026 08:27:41 +0000
════════════════════════
⌗ Tags: #Technology #Civil Penalty #Disclosure Violation #Elon Musk #Financial News #Gary Gensler #Regulatory Compliance #SEC #Securities Law #Settlement #Tesla #twitter #X
Daily CyberSecurity
The $1.5 Million Truce: Elon Musk Settles SEC Lawsuit Over "Hidden" Twitter Stake and Acquisition Gamesmanship
Elon Musk settles with the SEC for $1.5M over his delayed 2022 Twitter stake disclosure. The record-breaking fine ends years of legal "harassment" and litigation.
7 views
Daily Writeups
⤷ Title: Scammers Weaponize Amazon SES to Bypass Security
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Tue, 05 May 2026 08:15:32 +0000
════════════════════════
⌗ Tags: #Cybercriminals #Amazon SES #aws security #BEC #Cloud Security #Credential Theft #DKIM #DMARC #Email Security #IAM Keys #infosec #kaspersky #phishing #SPF
Daily CyberSecurity
Scammers Weaponize Amazon SES to Bypass Security
Scammers are leveraging Amazon SES and leaked IAM keys to bypass security filters. Learn how to protect your organization from this high-trust phishing surge.
6 views
Daily Writeups
⤷ Title: Apple Unveils End-to-End Encryption for iPhone-to-Android RCS Messaging
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Tue, 05 May 2026 07:06:17 +0000
════════════════════════
⌗ Tags: #Technology #android #Apple #cyber security 2026 #Digital Markets Act #E2EE #End_to_End Encryption #Google Messages #GSMA #iMessage #iOS 26.5 #Mobile Privacy #RCS
Daily CyberSecurity
Apple Unveils End-to-End Encryption for iPhone-to-Android RCS Messaging
Privacy without borders: Apple’s iOS 26.5 beta finally brings End-to-End Encryption to RCS. enjoy iMessage-level security when texting Android users.
11 views
Daily Writeups
⤷ Title: The New Wall: How the FCC’s Ban on Chinese Testing Labs will Inflate Flagship Phone Prices and Delay Launches
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Tue, 05 May 2026 07:02:59 +0000
════════════════════════
⌗ Tags: #Technology #Apple #china #FCC #Google Pixel #Hardware Engineering #MRA #national security #Radio Frequency Testing #samsung #Smartphone Certification #Supply Chain #Time to Market
Daily CyberSecurity
The New Wall: How the FCC’s Ban on Chinese Testing Labs will Inflate Flagship Phone Prices and Delay Launches
The FCC is banning equipment testing data from China. Discover how this "security" mandate will force Apple, Google, and Samsung to hike prices and delay US launches.
13 views
Daily Writeups
⤷ Title: The N-Day Nightmare: How SHADOW-EARTH-053 Breaches Governments Using “Old” Exploits
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Tue, 05 May 2026 07:02:51 +0000
════════════════════════
⌗ Tags: #Cyber Security #Vulnerability Report #Asia Cybersecurity #China_Aligned APT #Cyberespionage #DLL Sideloading #Godzilla #GodZilla Web Shell #NATO Security #ProxyLogon #SHADOW_EARTH_053 #ShadowPad #TrendAI Research #Web Shell
Daily CyberSecurity
The N-Day Nightmare: How SHADOW-EARTH-053 Breaches Governments Using "Old" Exploits
SHADOW-EARTH-053 is breaching governments and NATO using old ProxyLogon flaws and ShadowPad. Learn how this China-aligned group stays hidden via registry loading.
14 views
Daily Writeups
⤷ Title: The .env File Was Just Sitting There: How a Single Cognito Misconfiguration Unlocked a Fintech’s…
════════════════════════
𐀪 Author: SRCK
════════════════════════
ⴵ Time: Tue, 05 May 2026 08:28:39 GMT
════════════════════════
⌗ Tags: #bug_bounty #cybersecurity #cloud_security #penetration_testing #aws_security
Medium
The .env File Was Just Sitting There: How a Single Cognito Misconfiguration Unlocked a Fintech’s Cloud
TL;DR — Routine bug bounty. Fintech platform. Found GetCredentialsForIdentity response in Burp Suite returning live AWS credentials to the…
6 views
Daily Writeups
⤷ Title: The Social Honeypot — How I Set a Trap to Catch a Hacker, and the Result
════════════════════════
𐀪 Author: naonao
════════════════════════
ⴵ Time: Tue, 05 May 2026 07:55:33 GMT
════════════════════════
⌗ Tags: #cybersecurity #hacking
Medium
The Social Honeypot — How I Set a Trap to Catch a Hacker, and the Result
This is the story which I had tried to catch a hacker — the Shadow Behind the Screen.
5 views
Daily Writeups
⤷ Title: The End of Human Hackers? Enter “Mythos”. How Can you stop AI Taking Over the Kill Chain.
════════════════════════
𐀪 Author: Reggie Menacherry
════════════════════════
ⴵ Time: Tue, 05 May 2026 07:28:58 GMT
════════════════════════
⌗ Tags: #hacking #infosec #cybersecurity #ai #cyber_security_awareness
Medium
The End of Human Hackers? Enter “Mythos”. How Can you stop AI Taking Over the Kill Chain.
The cybersecurity community has long prepared for automation. We’ve seen scripts evolve into frameworks, frameworks into platforms, and now…
6 views
Daily Writeups
⤷ Title: Beyond 1.1.1.1: Advanced Cloudflare DNS Strategies Most People Ignore
════════════════════════
𐀪 Author: Andy Nguyen
════════════════════════
ⴵ Time: Tue, 05 May 2026 07:51:52 GMT
════════════════════════
⌗ Tags: #cloudflare #cybersecurity #dns #infosec #network_security
Medium
Beyond 1.1.1.1: Advanced Cloudflare DNS Strategies Most People Ignore
If you’re still using Cloudflare’s 1.1.1.1 DNS resolver without exploring its siblings, you’re missing out on critical security layers that…
10 views
Daily Writeups
⤷ Title: Inside the Fake RTO Challan Checker: How I Uncovered a Sophisticated Android Spyware Targeting…
════════════════════════
𐀪 Author: Karan Dhillon
════════════════════════
ⴵ Time: Tue, 05 May 2026 07:44:03 GMT
════════════════════════
⌗ Tags: #cybersecurity #android #malware #india #infosec
Medium
Inside the Fake RTO Challan Checker: How I Uncovered a Sophisticated Android Spyware Targeting Indians
A full technical teardown of a malware campaign hiding behind India’s traffic fine system
9 views
Daily Writeups
⤷ Title: SOC 2 Pentest Failures: What Auditors Actually Expect
════════════════════════
𐀪 Author: Pentest_Testing_Corp
════════════════════════
ⴵ Time: Tue, 05 May 2026 08:01:20 GMT
════════════════════════
⌗ Tags: #cybersecurity #compliance #api_security #penetration_testing #saas_security
Medium
SOC 2 Pentest Failures: What Auditors Actually Expect
Your SOC 2 Pentest Report Looks Fine. That’s Exactly the Problem.
6 views
Daily Writeups
⤷ Title: TryHackMe (THM) Dig Dug Walkthrough
════════════════════════
𐀪 Author: Mann Diwani
════════════════════════
ⴵ Time: Tue, 05 May 2026 07:03:20 GMT
════════════════════════
⌗ Tags: #nslookup #dig_dug #tryhackme_walkthrough #tryhackme #tryhackme_writeup
Medium
TryHackMe (THM) Dig Dug Walkthrough
🔗Room Link : https://tryhackme.com/room/digdug
4 views
Daily Writeups
⤷ Title: H4CKED — TryHackMe Walkthrough
════════════════════════
𐀪 Author: r3d
════════════════════════
ⴵ Time: Tue, 05 May 2026 08:35:12 GMT
════════════════════════
⌗ Tags: #ethical_hacking #linux #cybersecurity #networking #ctf
Medium
H4CKED — TryHackMe Walkthrough
In this challenge, we’re given a packet capture (.pcap) file from a machine that has already been compromised. Our job is twofold: first…
10 views
Daily Writeups
⤷ Title: Computer Security Course in Khanpur Extension | EINITIAL24 Academy
════════════════════════
𐀪 Author: EINITIAL24
════════════════════════
ⴵ Time: Tue, 05 May 2026 08:05:56 GMT
════════════════════════
⌗ Tags: #computer_security #ethical_hacking #cybersecurity #jobs #careers
Medium
Computer Security Course in Khanpur Extension | EINITIAL24 Academy
Introduction to Computer Security Course in Khanpur Extension
12 views
Daily Writeups
⤷ Title: ️ You Are Invited — Live Digital Forensics Investigation in Progress
════════════════════════
𐀪 Author: Dallen Sadru
════════════════════════
ⴵ Time: Tue, 05 May 2026 07:29:53 GMT
════════════════════════
⌗ Tags: #digital_forensics #offensive_security #ethical_hacking #cybersecurity
Medium
🕵️ You Are Invited — Live Digital Forensics Investigation in Progress
AstralGuard Cyber Academy is about to do something we have never done before and if you miss it this Wednesday you are genuinely going to…
25 views
Daily Writeups
⤷ Title: Is Cybersecurity a Lot of Coding? A Clear Answer for Beginners and Professionals
════════════════════════
𐀪 Author: Securetaintraining
════════════════════════
ⴵ Time: Tue, 05 May 2026 07:10:13 GMT
════════════════════════
⌗ Tags: #coding #ethical_hacking #cybersecurity #cyber_security_awareness #cybersecurity_training
Medium
Is Cybersecurity a Lot of Coding? A Clear Answer for Beginners and Professionals
Cybersecurity is not heavily dependent on coding, especially at the entry and mid levels. Many roles focus on monitoring, risk management…
41 views
Daily Writeups
⤷ Title: ScarCruft Hacks Gaming Platform to Deploy BirdCall Malware on Android and Windows
════════════════════════
𐀪 Author: Unknown
════════════════════════
ⴵ Time: Tue, 05 May 2026 14:37:00 +0530
════════════════════════
⌗ Tags: No_Tags
33 views
Daily Writeups
⤷ Title: FEMITBOT Network Abuses Telegram Mini Apps for Crypto Scams and Android Malware
════════════════════════
𐀪 Author: Deeba Ahmed
════════════════════════
ⴵ Time: Tue, 05 May 2026 10:34:59 +0000
════════════════════════
⌗ Tags: #Security #Android #Crypto #Malware #Scams and Fraud #Cyber Attack #Cyber Crime #Cybersecurity #FEMITBOT #Scams #Telegram #Telegram Mini
Hackread
FEMITBOT Network Abuses Telegram Mini Apps for Crypto Scams and Android Malware
Hackers use FEMITBOT to launch Telegram-based crypto scams and deliver Android malware through fake apps and trusted brand impersonation.
22 views
Daily Writeups
⤷ Title: Root RCE and Authentication Lockout Bypass: Public PoC Released for Critical OPNsense Firewall Vulnerabilities
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Tue, 05 May 2026 09:01:46 +0000
════════════════════════
⌗ Tags: #Vulnerability #Brute Force Bypass #CVE_2026_PoC #cybersecurity #firewall security #freebsd #infosec #OPNsense #Patch Alert #Remote Code Execution #Root RCE #XMLRPC
Daily CyberSecurity
Root RCE and Authentication Lockout Bypass: Public PoC Released for Critical OPNsense Firewall Vulnerabilities
Public PoC exploit released for OPNsense! A critical root-level RCE and lockout bypass allow total firewall takeover. Upgrade to OPNsense 26.1.7 immediately.
12 views
Daily Writeups
⤷ Title: The Compliance Trap: How a 13,000-Org Phishing Wave Bypasses MFA via AiTM Proxying
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Tue, 05 May 2026 09:00:50 +0000
════════════════════════
⌗ Tags: #Cybercriminals #AiTM #Cloudflare CAPTCHA #Credential Theft #cybersecurity #FIDO2 #infosec #MFA Bypass #Microsoft Defender #Paubox Hijacking #phishing #threat intelligence
Daily CyberSecurity
The Compliance Trap: How a 13,000-Org Phishing Wave Bypasses MFA via AiTM Proxying
Microsoft warns of a massive AiTM phishing campaign targeting 13,000+ orgs. Using fake disciplinary lures, attackers bypass MFA to hijack active sessions.
22 views