Daily Writeups
@Daily_Writeups
3.49K subscribers
2 photos
128K links
Daily Bug Bounty / Cybersecurity Writeups
Source Code : https://github.com/Spix0r/writeup-miner
Download Telegram
About
Blog
Apps
Platform
Join
Daily Writeups
3.49K subscribers
Daily Writeups
⤷ Title: Quasar Linux (QLNX) Emerges to Subvert the Global Software Supply Chain
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Wed, 06 May 2026 07:50:51 +0000
════════════════════════
⌗ Tags: #Malware #AWS #Credential Harvester #DevSecOps #eBPF #GitHub Security #Kubernetes #Linux malware #malware analysis #QLNX #Quasar Linux #rootkit #supply chain attack #Trend Micro
Penetration Testing Tools
Quasar Linux (QLNX) Emerges to Subvert the Global Software Supply Chain
The novel Linux implant, Quasar Linux, poses a formidable threat not merely to individual workstations but to the
10 views
Daily Writeups
⤷ Title: The Invisible 4GB Update: Why Google Chrome is Secretly Loading Gemini Nano onto Your Hard Drive
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Wed, 06 May 2026 07:46:41 +0000
════════════════════════
⌗ Tags: #Google #AI Privacy #Alexander Hanff #browser security #Chrome Update #Dark Patterns #GDPR #Gemini Nano #Google Chrome #large language models #Tech Ethics #weights.bin
Penetration Testing Tools
The Invisible 4GB Update: Why Google Chrome is Secretly Loading Gemini Nano onto Your Hard Drive
A contentious debate has emerged surrounding Google Chrome following reports of the surreptitious deployment of a substantial AI
8 views
Daily Writeups
⤷ Title: The Administrator’s Shadow: How Hackers Turned a Popular GitHub Utility into an Invisible C2 Backdoor
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Wed, 06 May 2026 07:41:41 +0000
════════════════════════
⌗ Tags: #Malware #Behavioral Heuristics #C2 Server #Cybersecurity 2026 #Github #Huntress #Impacket #Komari #Living_off_the_land #NSSM #RDP #Remote Access Trojan #VPN Breach
Penetration Testing Tools
The Administrator’s Shadow: How Hackers Turned a Popular GitHub Utility into an Invisible C2 Backdoor
Adversaries no longer find it requisite to engineer sophisticated malware from its inception. Frequently, the appropriation of a
8 views
Daily Writeups
⤷ Title: Emergency Patch: Critical RCE Vulnerability in Apache HTTP Server 2.4.67 Threatens Millions of Systems
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Wed, 06 May 2026 07:31:31 +0000
════════════════════════
⌗ Tags: #Vulnerability #Apache HTTP Server #CVE_2026_23918 #CVE_2026_24072 #Cybersecurity 2026 #HTTP/2 #mod_rewrite #Patch Management #privilege escalation #RCE #remote code execution #Server Security
Penetration Testing Tools
Emergency Patch: Critical RCE Vulnerability in Apache HTTP Server 2.4.67 Threatens Millions of Systems
A critical vulnerability has been identified within the ubiquitous Apache web server, potentially facilitating the complete compromise of
8 views
Daily Writeups
⤷ Title: The $200 Billion Tether: Anthropic’s Massive Google Deal Exposes the “Circular Economy” of Silicon Valley AI
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Wed, 06 May 2026 08:50:41 +0000
════════════════════════
⌗ Tags: #Technology #AI Infrastructure #Amazon AWS #Anthropic #Cloud Computing #Google Cloud #Microsoft Azure #nvidia #OpenAI #Oracle #RAM Shortage #Silicon Valley #Tech Economics 2026 #Venture Capital
Daily CyberSecurity
The $200 Billion Tether: Anthropic’s Massive Google Deal Exposes the "Circular Economy" of Silicon Valley AI
Anthropic commits $200B to Google Cloud as the "Big Four" reach a $2T revenue backlog. Discover how AI startups are tethered to their own investors.
10 views
Daily Writeups
⤷ Title: Apple to Shatter the Walled Garden with iOS 27 “AI Extensions” and Third-Party Model Swapping
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Wed, 06 May 2026 08:23:11 +0000
════════════════════════
⌗ Tags: #Technology #AI Extensions #AI Model Marketplace #Anthropic #Apple #Apple Intelligence #ChatGPT #Claude #iOS 27 #iPadOS 27 #macOS 27 #Mark Gurman #OpenAI #Siri
Daily CyberSecurity
Apple to Shatter the Walled Garden with iOS 27 "AI Extensions" and Third-Party Model Swapping
Apple pivots to an "AI Marketplace" in iOS 27. New Extensions let users swap Apple Intelligence for GPT, Claude, and more to power Siri and Writing Tools.
6 views
Daily Writeups
⤷ Title: The AI Inflection Point: Android 17, Gemini 4, and the Shocking Debut of “Aluminium OS” at Google I/O 2026
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Wed, 06 May 2026 08:22:40 +0000
════════════════════════
⌗ Tags: #Android #Aluminium OS #Android 17 #Android XR #Chrome OS #Cinnamon Bun #Gemini 4 #Google I/O 2026 #Nano Banana 2 #Project Astra #Samsung Galaxy XR #Smart Glasses #Veo 4
Daily CyberSecurity
The AI Inflection Point: Android 17, Gemini 4, and the Shocking Debut of "Aluminium OS" at Google I/O 2026
Google I/O 2026 is here! From the Android 17 "Cinnamon Bun" reveal to the new Aluminium OS and Gemini 4, see how Google is redefining the future of computing.
6 views
Daily Writeups
⤷ Title: New Quasar Linux (QLNX) RAT Hijacks Cloud Keys and NPM Tokens
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Wed, 06 May 2026 08:11:06 +0000
════════════════════════
⌗ Tags: #Malware #AWS Credentials #DevOps Security #eBPF Rootkit #Fileless Malware #infosec #Linux RAT #npm Security #PyPI #QLNX #Quasar Linux #supply chain attack #Trend Micro
Daily CyberSecurity
New Quasar Linux (QLNX) RAT Hijacks Cloud Keys and NPM Tokens
Trend Micro uncovers QLNX, a fileless Linux RAT targeting AWS, NPM, and Kubernetes keys. Learn how its eBPF rootkit hides from even the deepest system scans.
14 views
Daily Writeups
⤷ Title: The Altman Realignment: Why OpenAI is Considering a “Google-Style” Split to Save Its IPO
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Wed, 06 May 2026 08:01:17 +0000
════════════════════════
⌗ Tags: #Technology #Alphabet Model #Anthropic #Consumer Hardware #Corporate Restructuring #IPO #Jony Ive #OpenAI #Robotics #Sam Altman #Sora #Tech Strategy 2026 #Venture Capital
Daily CyberSecurity
The Altman Realignment: Why OpenAI is Considering a "Google-Style" Split to Save Its IPO
OpenAI faces a $6.5B dilemma. Discover why Sam Altman may spin off robotics and hardware to protect OpenAI’s core profits ahead of its high-stakes IPO.
11 views
Daily Writeups
⤷ Title: White House Considers Mandatory Federal Vetting for All New AI Models
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Wed, 06 May 2026 07:28:06 +0000
════════════════════════
⌗ Tags: #Technology #AI Regulation #AI safety #Cybersecurity 2026 #Deepfakes #Electoral Integrity #Federal Task Force #Gemini #GPT #Meta Llama #OpenAI #UK AI Model #White House
Daily CyberSecurity
White House Considers Mandatory Federal Vetting for All New AI Models
The era of non-interference is over. The White House may soon mandate federal security reviews for all AI models before they can launch to the public.
9 views
Daily Writeups
⤷ Title: The Day Germany Disappeared: How a Single Cryptographic Error Paralyzed the .de Namespace
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Wed, 06 May 2026 07:20:53 +0000
════════════════════════
⌗ Tags: #Technology #.de domain #Amazon.de #cloudflare #cryptography #cyber security 2026 #DENIC #DNS Outage #DNSSEC #Network Infrastructure #Resolver Failure #Zone Signing Key
Daily CyberSecurity
The Day Germany Disappeared: How a Single Cryptographic Error Paralyzed the .de Namespace
A massive configuration error at DENIC paralyzed millions of .de domains. Discover how a routine DNSSEC key rotation caused a nationwide internet blackout.
5 views
Daily Writeups
⤷ Title: Skeletal Scans and Height Checks: Meta Deploys Radical “Visual Analysis” AI to Purge Underage Users
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Wed, 06 May 2026 07:18:12 +0000
════════════════════════
⌗ Tags: #Technology #Age Verification #AI #Child Safety #Digital Services Act #European Union #facebook #Instagram #Meta #privacy #Skeletal Structure #Teen Accounts #Visual Analysis
Daily CyberSecurity
Skeletal Scans and Height Checks: Meta Deploys Radical "Visual Analysis" AI to Purge Underage Users
Meta is scanning user height and skeletal structure to find kids under 13. See how this "Visual Analysis" AI works to purge underage accounts on Instagram.
14 views
Daily Writeups
⤷ Title: Cisco Talos Unmasks UAT-8302’s Global Government Espionage Network
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Wed, 06 May 2026 07:01:36 +0000
════════════════════════
⌗ Tags: #Cyber Security #Malware #APT #China_nexus #Cisco Talos #CloudSorcerer #Cyberespionage #Earth Estries #Microsoft Graph API #NetDraft #Nosy Door #Threat Intel #UAT_8302 #VShell
Daily CyberSecurity
Cisco Talos Unmasks UAT-8302’s Global Government Espionage Network
Cisco Talos exposes UAT-8302, a China-linked APT group infiltrating governments via NetDraft and CloudSorcerer. Learn how they share tools with notorious APTs.
7 views
Daily Writeups
⤷ Title: OpenAI lance un bug bounty pour sécuriser GPT-5.5
════════════════════════
𐀪 Author: Marc Barbezat
════════════════════════
ⴵ Time: Wed, 06 May 2026 08:31:13 GMT
════════════════════════
⌗ Tags: #vulnérabilité #openai #bug_bounty #cybersécurité #red_teaming
Medium
OpenAI lance un bug bounty pour sécuriser GPT-5.5
OpenAI lance un bug bounty pour sécuriser GPT-5.5 OpenAI déploie un programme de bug bounty pour corriger les failles de GPT-5.5, mais le montant des primes interroge certains spécialistes de la …
14 views
Daily Writeups
⤷ Title: IDOR Hunting — Find Broken Authorization
════════════════════════
𐀪 Author: cyber-ninjaaa
════════════════════════
ⴵ Time: Wed, 06 May 2026 08:29:54 GMT
════════════════════════
⌗ Tags: #hacking #bug_bounty #cybersecurity
Medium
IDOR Hunting — Find Broken Authorization
Broken authorization is everywhere. Here’s how to actually find it.
12 views
Daily Writeups
⤷ Title: BUG-BOUNTY SERIES 10: SQL Injection (SQLi).
════════════════════════
𐀪 Author: Krisna Wahyu Andriawan
════════════════════════
ⴵ Time: Wed, 06 May 2026 08:04:53 GMT
════════════════════════
⌗ Tags: #bug_bounty #linux
Medium
BUG-BOUNTY SERIES 10: SQL Injection (SQLi). Teknik Eksploitasi Database yang Masih Relevan dan Berbahaya
Setelah memahami bagaimana HTTP bekerja pada Series 9, kita mulai masuk ke tahap eksploitasi vulnerability yang paling fundamental dalam…
10 views
Daily Writeups
⤷ Title: BUG-BOUNTY SERIES 9: Memahami HTTP untuk Bug Bounty.
════════════════════════
𐀪 Author: Krisna Wahyu Andriawan
════════════════════════
ⴵ Time: Wed, 06 May 2026 07:55:49 GMT
════════════════════════
⌗ Tags: #bug_bounty #linux
Medium
BUG-BOUNTY SERIES 9: Memahami HTTP untuk Bug Bounty. Fundamental Analisis Request & Response dalam Web Security
Setelah melalui tahap reconnaissance (Series 4–8), kita telah mengumpulkan berbagai informasi terkait target, mulai dari subdomain hingga…
14 views
Daily Writeups
⤷ Title: IDOR (Insecure Direct Object Reference): Celah Kecil dengan Dampak Besar
════════════════════════
𐀪 Author: Gama Waskita
════════════════════════
ⴵ Time: Wed, 06 May 2026 07:01:35 GMT
════════════════════════
⌗ Tags: #bug_bounty #owasp_top_10 #cybersecurity #programming #web_security
Medium
IDOR (Insecure Direct Object Reference): Celah Kecil dengan Dampak Besar
Celah kecil yang terlihat sepele, namun berdampak besar pada keamanan data pengguna.
10 views
Daily Writeups
⤷ Title: Secure Coding Practices Every Developer Should Know
════════════════════════
𐀪 Author: Kunal Arora
════════════════════════
ⴵ Time: Wed, 06 May 2026 08:20:54 GMT
════════════════════════
⌗ Tags: #vulnerability_prevention #secure_coding_practice #application_security #secure_programming
Medium
Secure Coding Practices Every Developer Should Know
Introduction
9 views
Daily Writeups
⤷ Title: Reflected XSS in E-Commerce Search — Bug Bounty Writeup
════════════════════════
𐀪 Author: Hassan Elsayed
════════════════════════
ⴵ Time: Wed, 06 May 2026 08:28:31 GMT
════════════════════════
⌗ Tags: #cybersecurity #web_security #hacking #penetration_testing
Medium
Reflected XSS in E-Commerce Search — Bug Bounty Writeup
Introduction
10 views
Daily Writeups
⤷ Title: Protecting Your Linux System Against DPRK (North Korean) Cyber Attacks
════════════════════════
𐀪 Author: Officer's Notes
════════════════════════
ⴵ Time: Wed, 06 May 2026 08:09:17 GMT
════════════════════════
⌗ Tags: #linux_tutorial #hacking #linux #security #cybersecurity
Medium
Protecting Your Linux System Against DPRK (North Korean) Cyber Attacks
North Korean state-sponsored threat actors have been actively targeting Linux users, particularly software developers, freelancers, and IT…
9 views