Daily Writeups
@Daily_Writeups
3.56K subscribers
2 photos
130K links
Daily Bug Bounty / Cybersecurity Writeups
Source Code : https://github.com/Spix0r/writeup-miner
Download Telegram
About
Blog
Apps
Platform
Join
Daily Writeups
3.56K subscribers
Daily Writeups
⤷ Title: Kenapa Banyak Sistem Diretas? Memahami Celah Keamanan dari Hal-Hal Sederhana
════════════════════════
𐀪 Author: Viona Salsabila Andini
════════════════════════
ⴵ Time: Wed, 06 May 2026 06:49:55 GMT
════════════════════════
⌗ Tags: #data_security #cyberattack #progamming #cybersecurity #infosec
Medium
Kenapa Banyak Sistem Diretas? Memahami Celah Keamanan dari Hal-Hal Sederhana
Kalau dengar kata cybersecurity, banyak orang langsung membayangkan hal yang kompleks — hacker canggih, kode berlapis-lapis, atau serangan…
13 views
Daily Writeups
⤷ Title: PCI DSS 4.0 Pentesting Mistakes SaaS Companies Make
════════════════════════
𐀪 Author: Pentest_Testing_Corp
════════════════════════
ⴵ Time: Wed, 06 May 2026 06:14:45 GMT
════════════════════════
⌗ Tags: #api_security #cybersecurity #penetration_testing #saas_security #cloud_security
Medium
PCI DSS 4.0 Pentesting Mistakes SaaS Companies Make
Why PCI DSS 4.0 Is Exposing Security Gaps Most SaaS Companies Never Knew They Had
14 views
Daily Writeups
⤷ Title: HTB Broken Authentication — Skill Assessment Writeup
════════════════════════
𐀪 Author: Hassan Elsayed
════════════════════════
ⴵ Time: Wed, 06 May 2026 05:54:24 GMT
════════════════════════
⌗ Tags: #web_security #penetration_testing #cybersecurity #hackthebox #ethical_hacking
Medium
HTB Broken Authentication — Skill Assessment Writeup
Introduction
15 views
Daily Writeups
⤷ Title: Git Happens
════════════════════════
𐀪 Author: Zuhaib Tariq
════════════════════════
ⴵ Time: Wed, 06 May 2026 05:34:22 GMT
════════════════════════
⌗ Tags: #ctf #ctf_writeup #tryhackme #cybersecurity
Medium
Git Happens
Run a port scan:
18 views
Daily Writeups
⤷ Title: Why Identity Matters in Modern Systems (And What Breaks Without It)
════════════════════════
𐀪 Author: Aditya Ramaswamy
════════════════════════
ⴵ Time: Wed, 06 May 2026 06:42:47 GMT
════════════════════════
⌗ Tags: #design_systems #api_security #identity_management #oauth2 #authentication
Medium
Why Identity Matters in Modern Systems (And What Breaks Without It)
Introduction
28 views
Daily Writeups
⤷ Title: Bulkoid Scam 2026: I Paid $217 for 13,500 X Followers 72 Hours Later Only 600 Remained (Full…
════════════════════════
𐀪 Author: Shay
════════════════════════
ⴵ Time: Wed, 06 May 2026 06:21:06 GMT
════════════════════════
⌗ Tags: #social_media #followers #scams_to_avoid #xs
Medium
Bulkoid Scam 2026: I Paid $217 for 13,500 X Followers 72 Hours Later Only 600 Remained (Full…
This is exactly what happened to me
37 views
Daily Writeups
⤷ Title: Palo Alto PAN-OS Flaw Under Active Exploitation Enables Remote Code Execution
════════════════════════
𐀪 Author: Unknown
════════════════════════
ⴵ Time: Wed, 06 May 2026 11:44:00 +0530
════════════════════════
⌗ Tags: No_Tags
25 views
Daily Writeups
⤷ Title: Massive “Low and Slow” DDoS Attack Hits Platform With 2.45 Billion in 5 Hours
════════════════════════
𐀪 Author: Deeba Ahmed
════════════════════════
ⴵ Time: Wed, 06 May 2026 07:59:56 +0000
════════════════════════
⌗ Tags: #Security #Cyber Attacks #Cyber Attack #Cybersecurity #DataDome #DDOS #IP Address
Hackread
Massive “Low and Slow” DDoS Attack Hits Platform With 2.45 Billion in 5 Hours
DataDome researchers uncovered a massive low and slow DDoS attack that delivered 2.45 billion requests using 1.2 million IP addresses.
26 views
Daily Writeups
⤷ Title: Living Off The Registry: Master AD CS Enumeration with the Native LOLBAS Toolkit
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Wed, 06 May 2026 08:38:36 +0000
════════════════════════
⌗ Tags: #Open Source Tool #Active Directory #AD CS #certreq.exe #certutil.exe #Credential Theft #LOLBAS #NET Framework #Pentesting #PowerShell #red teaming #RSAT #Windows Security
Penetration Testing Tools
Living Off The Registry: Master AD CS Enumeration with the Native LOLBAS Toolkit
Exploit Active Directory Certificate Services using only built-in Windows tools. No 3rd-party binaries—just certreq, certutil, and native PowerShell power.
14 views
Daily Writeups
⤷ Title: Rigged Game: How North Korea’s ScarCruft Group Infiltrated a Gaming Platform to Deploy BirdCall Spyware
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Wed, 06 May 2026 07:54:33 +0000
════════════════════════
⌗ Tags: #Malware #Android malware #APT37 #BirdCall #BirdCall Backdoor #Cybersecurity 2026 #ESET #North Korea #RoKRAT #ScarCruft #sqgame.net #supply chain attack #Windows Spyware #Yanbian
Penetration Testing Tools
Rigged Game: How North Korea’s ScarCruft Group Infiltrated a Gaming Platform to Deploy BirdCall Spyware
The seemingly innocuous download of a mobile game could culminate in a smartphone being compromised by sophisticated spyware.
13 views
Daily Writeups
⤷ Title: Quasar Linux (QLNX) Emerges to Subvert the Global Software Supply Chain
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Wed, 06 May 2026 07:50:51 +0000
════════════════════════
⌗ Tags: #Malware #AWS #Credential Harvester #DevSecOps #eBPF #GitHub Security #Kubernetes #Linux malware #malware analysis #QLNX #Quasar Linux #rootkit #supply chain attack #Trend Micro
Penetration Testing Tools
Quasar Linux (QLNX) Emerges to Subvert the Global Software Supply Chain
The novel Linux implant, Quasar Linux, poses a formidable threat not merely to individual workstations but to the
10 views
Daily Writeups
⤷ Title: The Invisible 4GB Update: Why Google Chrome is Secretly Loading Gemini Nano onto Your Hard Drive
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Wed, 06 May 2026 07:46:41 +0000
════════════════════════
⌗ Tags: #Google #AI Privacy #Alexander Hanff #browser security #Chrome Update #Dark Patterns #GDPR #Gemini Nano #Google Chrome #large language models #Tech Ethics #weights.bin
Penetration Testing Tools
The Invisible 4GB Update: Why Google Chrome is Secretly Loading Gemini Nano onto Your Hard Drive
A contentious debate has emerged surrounding Google Chrome following reports of the surreptitious deployment of a substantial AI
8 views
Daily Writeups
⤷ Title: The Administrator’s Shadow: How Hackers Turned a Popular GitHub Utility into an Invisible C2 Backdoor
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Wed, 06 May 2026 07:41:41 +0000
════════════════════════
⌗ Tags: #Malware #Behavioral Heuristics #C2 Server #Cybersecurity 2026 #Github #Huntress #Impacket #Komari #Living_off_the_land #NSSM #RDP #Remote Access Trojan #VPN Breach
Penetration Testing Tools
The Administrator’s Shadow: How Hackers Turned a Popular GitHub Utility into an Invisible C2 Backdoor
Adversaries no longer find it requisite to engineer sophisticated malware from its inception. Frequently, the appropriation of a
8 views
Daily Writeups
⤷ Title: Emergency Patch: Critical RCE Vulnerability in Apache HTTP Server 2.4.67 Threatens Millions of Systems
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Wed, 06 May 2026 07:31:31 +0000
════════════════════════
⌗ Tags: #Vulnerability #Apache HTTP Server #CVE_2026_23918 #CVE_2026_24072 #Cybersecurity 2026 #HTTP/2 #mod_rewrite #Patch Management #privilege escalation #RCE #remote code execution #Server Security
Penetration Testing Tools
Emergency Patch: Critical RCE Vulnerability in Apache HTTP Server 2.4.67 Threatens Millions of Systems
A critical vulnerability has been identified within the ubiquitous Apache web server, potentially facilitating the complete compromise of
8 views
Daily Writeups
⤷ Title: The $200 Billion Tether: Anthropic’s Massive Google Deal Exposes the “Circular Economy” of Silicon Valley AI
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Wed, 06 May 2026 08:50:41 +0000
════════════════════════
⌗ Tags: #Technology #AI Infrastructure #Amazon AWS #Anthropic #Cloud Computing #Google Cloud #Microsoft Azure #nvidia #OpenAI #Oracle #RAM Shortage #Silicon Valley #Tech Economics 2026 #Venture Capital
Daily CyberSecurity
The $200 Billion Tether: Anthropic’s Massive Google Deal Exposes the "Circular Economy" of Silicon Valley AI
Anthropic commits $200B to Google Cloud as the "Big Four" reach a $2T revenue backlog. Discover how AI startups are tethered to their own investors.
10 views
Daily Writeups
⤷ Title: Apple to Shatter the Walled Garden with iOS 27 “AI Extensions” and Third-Party Model Swapping
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Wed, 06 May 2026 08:23:11 +0000
════════════════════════
⌗ Tags: #Technology #AI Extensions #AI Model Marketplace #Anthropic #Apple #Apple Intelligence #ChatGPT #Claude #iOS 27 #iPadOS 27 #macOS 27 #Mark Gurman #OpenAI #Siri
Daily CyberSecurity
Apple to Shatter the Walled Garden with iOS 27 "AI Extensions" and Third-Party Model Swapping
Apple pivots to an "AI Marketplace" in iOS 27. New Extensions let users swap Apple Intelligence for GPT, Claude, and more to power Siri and Writing Tools.
6 views
Daily Writeups
⤷ Title: The AI Inflection Point: Android 17, Gemini 4, and the Shocking Debut of “Aluminium OS” at Google I/O 2026
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Wed, 06 May 2026 08:22:40 +0000
════════════════════════
⌗ Tags: #Android #Aluminium OS #Android 17 #Android XR #Chrome OS #Cinnamon Bun #Gemini 4 #Google I/O 2026 #Nano Banana 2 #Project Astra #Samsung Galaxy XR #Smart Glasses #Veo 4
Daily CyberSecurity
The AI Inflection Point: Android 17, Gemini 4, and the Shocking Debut of "Aluminium OS" at Google I/O 2026
Google I/O 2026 is here! From the Android 17 "Cinnamon Bun" reveal to the new Aluminium OS and Gemini 4, see how Google is redefining the future of computing.
6 views
Daily Writeups
⤷ Title: New Quasar Linux (QLNX) RAT Hijacks Cloud Keys and NPM Tokens
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Wed, 06 May 2026 08:11:06 +0000
════════════════════════
⌗ Tags: #Malware #AWS Credentials #DevOps Security #eBPF Rootkit #Fileless Malware #infosec #Linux RAT #npm Security #PyPI #QLNX #Quasar Linux #supply chain attack #Trend Micro
Daily CyberSecurity
New Quasar Linux (QLNX) RAT Hijacks Cloud Keys and NPM Tokens
Trend Micro uncovers QLNX, a fileless Linux RAT targeting AWS, NPM, and Kubernetes keys. Learn how its eBPF rootkit hides from even the deepest system scans.
14 views
Daily Writeups
⤷ Title: The Altman Realignment: Why OpenAI is Considering a “Google-Style” Split to Save Its IPO
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Wed, 06 May 2026 08:01:17 +0000
════════════════════════
⌗ Tags: #Technology #Alphabet Model #Anthropic #Consumer Hardware #Corporate Restructuring #IPO #Jony Ive #OpenAI #Robotics #Sam Altman #Sora #Tech Strategy 2026 #Venture Capital
Daily CyberSecurity
The Altman Realignment: Why OpenAI is Considering a "Google-Style" Split to Save Its IPO
OpenAI faces a $6.5B dilemma. Discover why Sam Altman may spin off robotics and hardware to protect OpenAI’s core profits ahead of its high-stakes IPO.
11 views
Daily Writeups
⤷ Title: White House Considers Mandatory Federal Vetting for All New AI Models
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Wed, 06 May 2026 07:28:06 +0000
════════════════════════
⌗ Tags: #Technology #AI Regulation #AI safety #Cybersecurity 2026 #Deepfakes #Electoral Integrity #Federal Task Force #Gemini #GPT #Meta Llama #OpenAI #UK AI Model #White House
Daily CyberSecurity
White House Considers Mandatory Federal Vetting for All New AI Models
The era of non-interference is over. The White House may soon mandate federal security reviews for all AI models before they can launch to the public.
9 views
Daily Writeups
⤷ Title: The Day Germany Disappeared: How a Single Cryptographic Error Paralyzed the .de Namespace
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Wed, 06 May 2026 07:20:53 +0000
════════════════════════
⌗ Tags: #Technology #.de domain #Amazon.de #cloudflare #cryptography #cyber security 2026 #DENIC #DNS Outage #DNSSEC #Network Infrastructure #Resolver Failure #Zone Signing Key
Daily CyberSecurity
The Day Germany Disappeared: How a Single Cryptographic Error Paralyzed the .de Namespace
A massive configuration error at DENIC paralyzed millions of .de domains. Discover how a routine DNSSEC key rotation caused a nationwide internet blackout.
5 views