Daily Writeups
@Daily_Writeups
3.52K subscribers
2 photos
129K links
Daily Bug Bounty / Cybersecurity Writeups
Source Code : https://github.com/Spix0r/writeup-miner
Download Telegram
About
Blog
Apps
Platform
Join
Daily Writeups
3.52K subscribers
Daily Writeups
⤷ Title: One Missed Threat Per Week: What 25M Alerts Reveal About Low-Severity Risk
════════════════════════
𐀪 Author: Unknown
════════════════════════
ⴵ Time: Fri, 08 May 2026 16:00:00 +0530
════════════════════════
⌗ Tags: No_Tags
37 views
Daily Writeups
⤷ Title: New Linux PamDOORa Backdoor Uses PAM Modules to Steal SSH Credentials
════════════════════════
𐀪 Author: Unknown
════════════════════════
ⴵ Time: Fri, 08 May 2026 14:11:00 +0530
════════════════════════
⌗ Tags: No_Tags
34 views
Daily Writeups
⤷ Title: The Autonomous Blue Team: Build a Self-Healing SIEM with the AI Detection Engineering Lab
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Fri, 08 May 2026 09:13:19 +0000
════════════════════════
⌗ Tags: #Open Source Tool #AI security #Blue Team Automation #Claude Code #Detection Engineering #DevSecOps #Elastic Security #Fawkes C2 #MITRE ATT&CK #SIEM #Sigma Rules #Splunk #Threat Intel
Penetration Testing Tools
The Autonomous Blue Team: Build a Self-Healing SIEM with the AI Detection Engineering Lab
Deploy an AI-powered detection pipeline using Claude Code. Automate the full SIEM lifecycle, from Sigma rule authoring to MITRE ATT&CK validation and tuning.
28 views
Daily Writeups
⤷ Title: Hackers Hijack Microsoft 365 Accounts via Legitimate Device Code Flows
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Fri, 08 May 2026 09:07:51 +0000
════════════════════════
⌗ Tags: #Cybercriminals #Cyber Espionage #Device Code Flow #Graphish #M365 Hardening #Microsoft 365 #OAuth #Passwordless Security #phishing 2026 #Proofpoint #QR Code Phishing #SquarePhish2 #TA2723
Penetration Testing Tools
Hackers Hijack Microsoft 365 Accounts via Legitimate Device Code Flows
Both fraudulent actors and state-sponsored syndicates have commenced the large-scale deployment of a novel stratagem to usurp Microsoft
13 views
Daily Writeups
⤷ Title: Polish Intelligence Warns of Rising Cyber Incursions Against Municipal Water Systems
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Fri, 08 May 2026 09:04:46 +0000
════════════════════════
⌗ Tags: #Cybercriminals #ABW #Critical Infrastructure #Cyber Espionage #Cyber War 2026 #ICS #Industrial Control Systems #Infrastructure Defense #Jabłonna Lacka #National Security #Poland #Szczytno #Water Treatment Security
Penetration Testing Tools
Polish Intelligence Warns of Rising Cyber Incursions Against Municipal Water Systems
Polish intelligence services have issued a somber warning regarding a succession of incursions targeting water treatment facilities, where,
12 views
Daily Writeups
⤷ Title: The Great Split: How MITRE ATT&CK v19 Redefines Defense Evasion and Maps the AI Threat Landscape
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Fri, 08 May 2026 09:03:26 +0000
════════════════════════
⌗ Tags: #Information Security #AI security #cyber threat intelligence #Defense Evasion #EDR Bypass #ICS Security #InfoSec 2026 #MITRE ATT&CK v19 #Mobile Threats #SOC Strategy #Social Engineering #T1682 #T1685
Penetration Testing Tools
The Great Split: How MITRE ATT&CK v19 Redefines Defense Evasion and Maps the AI Threat Landscape
MITRE has unveiled ATT&CK v19, a monumental evolution of the framework utilized by security cohorts to delineate adversary
17 views
Daily Writeups
⤷ Title: North Korean “Laptop Farms” Infiltrated 70 U.S. Companies
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Fri, 08 May 2026 10:13:07 +0000
════════════════════════
⌗ Tags: #Cybercriminals #corporate espionage #cybersecurity #DPRK #Erick Prince #fbi #Insider Threat #Justice Department #Laptop Farm #Matthew Knoot #North Korea #Remote Desktop #Stolen Identity
Daily CyberSecurity
North Korean "Laptop Farms" Infiltrated 70 U.S. Companies
DOJ sentences U.S. enablers for running North Korean "laptop farms." Learn how the DPRK breached 70 companies and funded weapons via stolen identities.
12 views
Daily Writeups
⤷ Title: Highly Evasive NuGet Supply Chain Attack Hijacks 65,000 .NET Build Servers
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Fri, 08 May 2026 09:04:59 +0000
════════════════════════
⌗ Tags: #Malware #.NET Security #AppBound Bypass #CI/CD security #cybersecurity #DevSecOps #infosec #IR.* Packages #malware #NuGet #supply chain attack
Daily CyberSecurity
Highly Evasive NuGet Supply Chain Attack Hijacks 65,000 .NET Build Servers
Critical alert: A stealth NuGet supply chain attack has hijacked 65,000 .NET workstations. Audit your CI/CD for malicious IR.* packages immediately.
17 views
Daily Writeups
⤷ Title: When Bug Bounty Hunting Hit Me Back: How Losing $500 Led Me to a Web Cache Poisoning Bug.
════════════════════════
𐀪 Author: kjulius
════════════════════════
ⴵ Time: Fri, 08 May 2026 09:52:18 GMT
════════════════════════
⌗ Tags: #web_cache_poisoning #documentation #bug_bounty #cloudflare
Medium
When Bug Bounty Hunting Hit Me Back: How Losing $500 Led Me to a Web Cache Poisoning Bug.
Bug bounty hunting is exciting.
15 views
Daily Writeups
⤷ Title: How a YouTube Recommendation Led Me to Claim Free Coins Twice
════════════════════════
𐀪 Author: Gombos Ákos-Roland
════════════════════════
ⴵ Time: Fri, 08 May 2026 09:25:57 GMT
════════════════════════
⌗ Tags: #web_security #race_condition #penetration_testing #application_security #bug_bounty
Medium
How a YouTube Recommendation Led Me to Claim Free Coins Twice
It was a random Monday. Nothing special going on. YouTube decided to recommend me a video about abusing game economy endpoints and I…
21 views
Daily Writeups
⤷ Title: Broken Access Control / IDOR in Group Invitation Flow
════════════════════════
𐀪 Author: Ahmed Atef (0xMintsX)
════════════════════════
ⴵ Time: Fri, 08 May 2026 01:24:15 GMT
════════════════════════
⌗ Tags: #bug_bounty #access_control #cybersecurity #web_application_security #api_security
Medium
خلل في التحكم بالوصول / IDOR في تدفق دعوة المجموعة
{وَآتَاكُم م كُلِّ مَا سَأَلْتُمُوهُ ۚ وَإِن تَعُدُّوا نِعْمَتَ اللَّهِ لا تُحْصُوهُ ۗ }
21 views
Daily Writeups
⤷ Title: Rate Limit Bypass — Turbo Intruder Scripts
════════════════════════
𐀪 Author: Subhakreet
════════════════════════
ⴵ Time: Fri, 08 May 2026 09:47:48 GMT
════════════════════════
⌗ Tags: #bypass #pentesting #burpsuite #hacking
Medium
Rate Limit Bypass — Turbo Intruder Scripts
Rate limiting is a control that restricts how many requests a client can make to an endpoint within a given timeframe. When implemented…
14 views
Daily Writeups
⤷ Title: OSINT Industries CTF writeup: Holehe and the secret email
════════════════════════
𐀪 Author: Robert Nyinge
════════════════════════
ⴵ Time: Fri, 08 May 2026 09:05:16 GMT
════════════════════════
⌗ Tags: #cybersecurity #web_penetration_testing #osint #osint_industries #hacking
Medium
OSINT Industries CTF writeup: Holehe and the secret email
HI, another OSINT writeup …the challenge is by OSINT Industries, titled “Holehe and the secret email”. Here is a brief description of the…
23 views
Daily Writeups
⤷ Title: Building a Modern SOC Automation Lab: Integrating Wazuh, TheHive, and Shuffle
════════════════════════
𐀪 Author: Farras Fauzan
════════════════════════
ⴵ Time: Fri, 08 May 2026 10:27:49 GMT
════════════════════════
⌗ Tags: #soc #automation #infosec #cybersecurity #wazuh
Medium
Building a Modern SOC Automation Lab: Integrating Wazuh, TheHive, and Shuffle
Welcome back, everyone.
24 views
Daily Writeups
⤷ Title: Panduan Expert Penggunaan Tools Nuclei dalam Penetration Testing
════════════════════════
𐀪 Author: Ahmat Prayoga Sembiring
════════════════════════
ⴵ Time: Fri, 08 May 2026 09:28:14 GMT
════════════════════════
⌗ Tags: #ethical_hacking #penetration_testing #nucleus
Medium
Panduan Expert Penggunaan Tools Nuclei dalam Penetration Testing
Nuclei adalah tools penetration testing berbasis template YAML untuk mendeteksi kerentanan secara otomatis dan cepat. Tools ini membantu…
31 views
Daily Writeups
⤷ Title: SOC Workbooks and Lookups | TryHackMe
════════════════════════
𐀪 Author: Ryca
════════════════════════
ⴵ Time: Fri, 08 May 2026 10:26:37 GMT
════════════════════════
⌗ Tags: #blue_team #cybersecurity #tryhackme
Medium
SOC Workbooks and Lookups | TryHackMe
Discover useful corporate resources to help you structure and simplify L1 alert triage.
45 views
Daily Writeups
⤷ Title: Red Team Fundamentals | TryHackMe
════════════════════════
𐀪 Author: Ryca
════════════════════════
ⴵ Time: Fri, 08 May 2026 09:47:13 GMT
════════════════════════
⌗ Tags: #red_team #tryhackme #cybersecurity
Medium
Red Team Fundamentals | TryHackMe
Learn about the basics of a red engagement, the main components and stakeholders involved, and how red teaming differs from other cyber…
53 views
Daily Writeups
⤷ Title: Quasar Linux RAT Steals Developer Credentials for Software Supply Chain Compromise
════════════════════════
𐀪 Author: Unknown
════════════════════════
ⴵ Time: Fri, 08 May 2026 16:30:00 +0530
════════════════════════
⌗ Tags: No_Tags
49 views
Daily Writeups
⤷ Title: Critical Sandboxie Escape Flaws Grant Total SYSTEM Takeover
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Fri, 08 May 2026 12:42:37 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #buffer overflow #CVE_2026_34458 #CVE_2026_34459 #cybersecurity #infosec #INI Injection #Patch Alert #privilege escalation #Sandbox Escape #Sandboxie #SYSTEM Privilege
Daily CyberSecurity
Critical Sandboxie Escape Flaws Grant Total SYSTEM Takeover
Security researchers expose catastrophic flaws in Sandboxie. CVE-2026-34459 enables a direct sandbox escape to SYSTEM privileges. Update to v1.17.3 today.
46 views
Daily Writeups
⤷ Title: Self-Spreading TCLBANKER Trojan Hijacks WhatsApp to Drain Accounts
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Fri, 08 May 2026 12:02:20 +0000
════════════════════════
⌗ Tags: #Malware #Banking Trojan #cybersecurity #Elastic Security Labs #infosec #Malware Analysis #REF3076 #TCLBANKER #threat intelligence #Vishing #WhatsApp Hijacking
Daily CyberSecurity
Self-Spreading TCLBANKER Trojan Hijacks WhatsApp to Drain Accounts
Elastic Security Labs exposes TCLBANKER, an advanced banking trojan that hijacks WhatsApp to spread while blinding defenders with invisible WPF overlays.
26 views
Daily Writeups
⤷ Title: How I Approach a Fresh Target — The First 30 Minutes Matter Most
════════════════════════
𐀪 Author: ghostyjoe
════════════════════════
ⴵ Time: Fri, 08 May 2026 12:45:05 GMT
════════════════════════
⌗ Tags: #hacking #security #linux #bug_bounty #cybersecurity
Medium
🔍 How I Approach a Fresh Target — The First 30 Minutes Matter Most
✍️ Introduction
23 views