Daily Writeups
@Daily_Writeups
3.49K subscribers
2 photos
128K links
Daily Bug Bounty / Cybersecurity Writeups
Source Code : https://github.com/Spix0r/writeup-miner
Download Telegram
About
Blog
Apps
Platform
Join
Daily Writeups
3.49K subscribers
Daily Writeups
⤷ Title: Git Happens
════════════════════════
𐀪 Author: Zuhaib Tariq
════════════════════════
ⴵ Time: Wed, 06 May 2026 05:34:22 GMT
════════════════════════
⌗ Tags: #ctf #ctf_writeup #tryhackme #cybersecurity
Medium
Git Happens
Run a port scan:
18 views
Daily Writeups
⤷ Title: Why Identity Matters in Modern Systems (And What Breaks Without It)
════════════════════════
𐀪 Author: Aditya Ramaswamy
════════════════════════
ⴵ Time: Wed, 06 May 2026 06:42:47 GMT
════════════════════════
⌗ Tags: #design_systems #api_security #identity_management #oauth2 #authentication
Medium
Why Identity Matters in Modern Systems (And What Breaks Without It)
Introduction
28 views
Daily Writeups
⤷ Title: Bulkoid Scam 2026: I Paid $217 for 13,500 X Followers 72 Hours Later Only 600 Remained (Full…
════════════════════════
𐀪 Author: Shay
════════════════════════
ⴵ Time: Wed, 06 May 2026 06:21:06 GMT
════════════════════════
⌗ Tags: #social_media #followers #scams_to_avoid #xs
Medium
Bulkoid Scam 2026: I Paid $217 for 13,500 X Followers 72 Hours Later Only 600 Remained (Full…
This is exactly what happened to me
37 views
Daily Writeups
⤷ Title: Palo Alto PAN-OS Flaw Under Active Exploitation Enables Remote Code Execution
════════════════════════
𐀪 Author: Unknown
════════════════════════
ⴵ Time: Wed, 06 May 2026 11:44:00 +0530
════════════════════════
⌗ Tags: No_Tags
25 views
Daily Writeups
⤷ Title: Massive “Low and Slow” DDoS Attack Hits Platform With 2.45 Billion in 5 Hours
════════════════════════
𐀪 Author: Deeba Ahmed
════════════════════════
ⴵ Time: Wed, 06 May 2026 07:59:56 +0000
════════════════════════
⌗ Tags: #Security #Cyber Attacks #Cyber Attack #Cybersecurity #DataDome #DDOS #IP Address
Hackread
Massive “Low and Slow” DDoS Attack Hits Platform With 2.45 Billion in 5 Hours
DataDome researchers uncovered a massive low and slow DDoS attack that delivered 2.45 billion requests using 1.2 million IP addresses.
26 views
Daily Writeups
⤷ Title: Living Off The Registry: Master AD CS Enumeration with the Native LOLBAS Toolkit
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Wed, 06 May 2026 08:38:36 +0000
════════════════════════
⌗ Tags: #Open Source Tool #Active Directory #AD CS #certreq.exe #certutil.exe #Credential Theft #LOLBAS #NET Framework #Pentesting #PowerShell #red teaming #RSAT #Windows Security
Penetration Testing Tools
Living Off The Registry: Master AD CS Enumeration with the Native LOLBAS Toolkit
Exploit Active Directory Certificate Services using only built-in Windows tools. No 3rd-party binaries—just certreq, certutil, and native PowerShell power.
14 views
Daily Writeups
⤷ Title: Rigged Game: How North Korea’s ScarCruft Group Infiltrated a Gaming Platform to Deploy BirdCall Spyware
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Wed, 06 May 2026 07:54:33 +0000
════════════════════════
⌗ Tags: #Malware #Android malware #APT37 #BirdCall #BirdCall Backdoor #Cybersecurity 2026 #ESET #North Korea #RoKRAT #ScarCruft #sqgame.net #supply chain attack #Windows Spyware #Yanbian
Penetration Testing Tools
Rigged Game: How North Korea’s ScarCruft Group Infiltrated a Gaming Platform to Deploy BirdCall Spyware
The seemingly innocuous download of a mobile game could culminate in a smartphone being compromised by sophisticated spyware.
13 views
Daily Writeups
⤷ Title: Quasar Linux (QLNX) Emerges to Subvert the Global Software Supply Chain
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Wed, 06 May 2026 07:50:51 +0000
════════════════════════
⌗ Tags: #Malware #AWS #Credential Harvester #DevSecOps #eBPF #GitHub Security #Kubernetes #Linux malware #malware analysis #QLNX #Quasar Linux #rootkit #supply chain attack #Trend Micro
Penetration Testing Tools
Quasar Linux (QLNX) Emerges to Subvert the Global Software Supply Chain
The novel Linux implant, Quasar Linux, poses a formidable threat not merely to individual workstations but to the
10 views
Daily Writeups
⤷ Title: The Invisible 4GB Update: Why Google Chrome is Secretly Loading Gemini Nano onto Your Hard Drive
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Wed, 06 May 2026 07:46:41 +0000
════════════════════════
⌗ Tags: #Google #AI Privacy #Alexander Hanff #browser security #Chrome Update #Dark Patterns #GDPR #Gemini Nano #Google Chrome #large language models #Tech Ethics #weights.bin
Penetration Testing Tools
The Invisible 4GB Update: Why Google Chrome is Secretly Loading Gemini Nano onto Your Hard Drive
A contentious debate has emerged surrounding Google Chrome following reports of the surreptitious deployment of a substantial AI
8 views
Daily Writeups
⤷ Title: The Administrator’s Shadow: How Hackers Turned a Popular GitHub Utility into an Invisible C2 Backdoor
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Wed, 06 May 2026 07:41:41 +0000
════════════════════════
⌗ Tags: #Malware #Behavioral Heuristics #C2 Server #Cybersecurity 2026 #Github #Huntress #Impacket #Komari #Living_off_the_land #NSSM #RDP #Remote Access Trojan #VPN Breach
Penetration Testing Tools
The Administrator’s Shadow: How Hackers Turned a Popular GitHub Utility into an Invisible C2 Backdoor
Adversaries no longer find it requisite to engineer sophisticated malware from its inception. Frequently, the appropriation of a
8 views
Daily Writeups
⤷ Title: Emergency Patch: Critical RCE Vulnerability in Apache HTTP Server 2.4.67 Threatens Millions of Systems
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Wed, 06 May 2026 07:31:31 +0000
════════════════════════
⌗ Tags: #Vulnerability #Apache HTTP Server #CVE_2026_23918 #CVE_2026_24072 #Cybersecurity 2026 #HTTP/2 #mod_rewrite #Patch Management #privilege escalation #RCE #remote code execution #Server Security
Penetration Testing Tools
Emergency Patch: Critical RCE Vulnerability in Apache HTTP Server 2.4.67 Threatens Millions of Systems
A critical vulnerability has been identified within the ubiquitous Apache web server, potentially facilitating the complete compromise of
8 views
Daily Writeups
⤷ Title: The $200 Billion Tether: Anthropic’s Massive Google Deal Exposes the “Circular Economy” of Silicon Valley AI
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Wed, 06 May 2026 08:50:41 +0000
════════════════════════
⌗ Tags: #Technology #AI Infrastructure #Amazon AWS #Anthropic #Cloud Computing #Google Cloud #Microsoft Azure #nvidia #OpenAI #Oracle #RAM Shortage #Silicon Valley #Tech Economics 2026 #Venture Capital
Daily CyberSecurity
The $200 Billion Tether: Anthropic’s Massive Google Deal Exposes the "Circular Economy" of Silicon Valley AI
Anthropic commits $200B to Google Cloud as the "Big Four" reach a $2T revenue backlog. Discover how AI startups are tethered to their own investors.
10 views
Daily Writeups
⤷ Title: Apple to Shatter the Walled Garden with iOS 27 “AI Extensions” and Third-Party Model Swapping
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Wed, 06 May 2026 08:23:11 +0000
════════════════════════
⌗ Tags: #Technology #AI Extensions #AI Model Marketplace #Anthropic #Apple #Apple Intelligence #ChatGPT #Claude #iOS 27 #iPadOS 27 #macOS 27 #Mark Gurman #OpenAI #Siri
Daily CyberSecurity
Apple to Shatter the Walled Garden with iOS 27 "AI Extensions" and Third-Party Model Swapping
Apple pivots to an "AI Marketplace" in iOS 27. New Extensions let users swap Apple Intelligence for GPT, Claude, and more to power Siri and Writing Tools.
6 views
Daily Writeups
⤷ Title: The AI Inflection Point: Android 17, Gemini 4, and the Shocking Debut of “Aluminium OS” at Google I/O 2026
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Wed, 06 May 2026 08:22:40 +0000
════════════════════════
⌗ Tags: #Android #Aluminium OS #Android 17 #Android XR #Chrome OS #Cinnamon Bun #Gemini 4 #Google I/O 2026 #Nano Banana 2 #Project Astra #Samsung Galaxy XR #Smart Glasses #Veo 4
Daily CyberSecurity
The AI Inflection Point: Android 17, Gemini 4, and the Shocking Debut of "Aluminium OS" at Google I/O 2026
Google I/O 2026 is here! From the Android 17 "Cinnamon Bun" reveal to the new Aluminium OS and Gemini 4, see how Google is redefining the future of computing.
6 views
Daily Writeups
⤷ Title: New Quasar Linux (QLNX) RAT Hijacks Cloud Keys and NPM Tokens
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Wed, 06 May 2026 08:11:06 +0000
════════════════════════
⌗ Tags: #Malware #AWS Credentials #DevOps Security #eBPF Rootkit #Fileless Malware #infosec #Linux RAT #npm Security #PyPI #QLNX #Quasar Linux #supply chain attack #Trend Micro
Daily CyberSecurity
New Quasar Linux (QLNX) RAT Hijacks Cloud Keys and NPM Tokens
Trend Micro uncovers QLNX, a fileless Linux RAT targeting AWS, NPM, and Kubernetes keys. Learn how its eBPF rootkit hides from even the deepest system scans.
14 views
Daily Writeups
⤷ Title: The Altman Realignment: Why OpenAI is Considering a “Google-Style” Split to Save Its IPO
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Wed, 06 May 2026 08:01:17 +0000
════════════════════════
⌗ Tags: #Technology #Alphabet Model #Anthropic #Consumer Hardware #Corporate Restructuring #IPO #Jony Ive #OpenAI #Robotics #Sam Altman #Sora #Tech Strategy 2026 #Venture Capital
Daily CyberSecurity
The Altman Realignment: Why OpenAI is Considering a "Google-Style" Split to Save Its IPO
OpenAI faces a $6.5B dilemma. Discover why Sam Altman may spin off robotics and hardware to protect OpenAI’s core profits ahead of its high-stakes IPO.
11 views
Daily Writeups
⤷ Title: White House Considers Mandatory Federal Vetting for All New AI Models
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Wed, 06 May 2026 07:28:06 +0000
════════════════════════
⌗ Tags: #Technology #AI Regulation #AI safety #Cybersecurity 2026 #Deepfakes #Electoral Integrity #Federal Task Force #Gemini #GPT #Meta Llama #OpenAI #UK AI Model #White House
Daily CyberSecurity
White House Considers Mandatory Federal Vetting for All New AI Models
The era of non-interference is over. The White House may soon mandate federal security reviews for all AI models before they can launch to the public.
9 views
Daily Writeups
⤷ Title: The Day Germany Disappeared: How a Single Cryptographic Error Paralyzed the .de Namespace
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Wed, 06 May 2026 07:20:53 +0000
════════════════════════
⌗ Tags: #Technology #.de domain #Amazon.de #cloudflare #cryptography #cyber security 2026 #DENIC #DNS Outage #DNSSEC #Network Infrastructure #Resolver Failure #Zone Signing Key
Daily CyberSecurity
The Day Germany Disappeared: How a Single Cryptographic Error Paralyzed the .de Namespace
A massive configuration error at DENIC paralyzed millions of .de domains. Discover how a routine DNSSEC key rotation caused a nationwide internet blackout.
5 views
Daily Writeups
⤷ Title: Skeletal Scans and Height Checks: Meta Deploys Radical “Visual Analysis” AI to Purge Underage Users
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Wed, 06 May 2026 07:18:12 +0000
════════════════════════
⌗ Tags: #Technology #Age Verification #AI #Child Safety #Digital Services Act #European Union #facebook #Instagram #Meta #privacy #Skeletal Structure #Teen Accounts #Visual Analysis
Daily CyberSecurity
Skeletal Scans and Height Checks: Meta Deploys Radical "Visual Analysis" AI to Purge Underage Users
Meta is scanning user height and skeletal structure to find kids under 13. See how this "Visual Analysis" AI works to purge underage accounts on Instagram.
14 views
Daily Writeups
⤷ Title: Cisco Talos Unmasks UAT-8302’s Global Government Espionage Network
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Wed, 06 May 2026 07:01:36 +0000
════════════════════════
⌗ Tags: #Cyber Security #Malware #APT #China_nexus #Cisco Talos #CloudSorcerer #Cyberespionage #Earth Estries #Microsoft Graph API #NetDraft #Nosy Door #Threat Intel #UAT_8302 #VShell
Daily CyberSecurity
Cisco Talos Unmasks UAT-8302’s Global Government Espionage Network
Cisco Talos exposes UAT-8302, a China-linked APT group infiltrating governments via NetDraft and CloudSorcerer. Learn how they share tools with notorious APTs.
7 views
Daily Writeups
⤷ Title: OpenAI lance un bug bounty pour sécuriser GPT-5.5
════════════════════════
𐀪 Author: Marc Barbezat
════════════════════════
ⴵ Time: Wed, 06 May 2026 08:31:13 GMT
════════════════════════
⌗ Tags: #vulnérabilité #openai #bug_bounty #cybersécurité #red_teaming
Medium
OpenAI lance un bug bounty pour sécuriser GPT-5.5
OpenAI lance un bug bounty pour sécuriser GPT-5.5 OpenAI déploie un programme de bug bounty pour corriger les failles de GPT-5.5, mais le montant des primes interroge certains spécialistes de la …
14 views