Daily Writeups
@Daily_Writeups
3.56K subscribers
2 photos
130K links
Daily Bug Bounty / Cybersecurity Writeups
Source Code : https://github.com/Spix0r/writeup-miner
Download Telegram
About
Blog
Apps
Platform
Join
Daily Writeups
3.56K subscribers
Daily Writeups
⤷ Title: Prompt Injection Was Just the Beginning: Real AI Supply Chain Attacks Are Here in 2026
════════════════════════
𐀪 Author: Akansha Shukla
════════════════════════
ⴵ Time: Sun, 10 May 2026 22:07:43 GMT
════════════════════════
⌗ Tags: #vector_database #indirect_prompt_injection #supply_chain_security #api_security #ai_security
Medium
Prompt Injection Was Just the Beginning: Real AI Supply Chain Attacks Are Here in 2026
How indirect prompt injection, vector database poisoning, and agentic trust exploits are reshaping enterprise AI security.
20 views
Daily Writeups
⤷ Title: Remote Code Execution via Insecure Deserialization in Wazuh XDR/SIEM (CVE-2026–25769)
════════════════════════
𐀪 Author: Kevin Dicks
════════════════════════
ⴵ Time: Sun, 10 May 2026 22:24:11 GMT
════════════════════════
⌗ Tags: #cve #insecure_deserialization #rce
Medium
Remote Code Execution via Insecure Deserialization in Wazuh XDR/SIEM (CVE-2026–25769)
Abstract
27 views
Daily Writeups
⤷ Title: Data Destruction and Memory Poisoning: Spring AI Vulnerabilities Threaten LLM Integrity
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Mon, 11 May 2026 00:27:25 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #AI security #CVE_2026_41705 #CVE_2026_41712 #CVE_2026_41713 #cybersecurity #Data Leakage #DevSecOps #LLM Vulnerabilities #Milvus VectorStore #Prompt injection #Spring AI
Daily CyberSecurity
Data Destruction and Memory Poisoning: Spring AI Vulnerabilities Threaten LLM Integrity
Protect your AI apps. Spring AI issues urgent patches for three critical vulnerabilities causing data destruction, memory poisoning, and user data leaks.
19 views
Daily Writeups
⤷ Title: Burp Suite Enterprise resource exhaustion via huge request body
════════════════════════
𐀪 Author: Armarms
════════════════════════
ⴵ Time: Mon, 11 May 2026 00:57:35 GMT
════════════════════════
⌗ Tags: #bug_bounty #vulnerability #application_security #cybersecurity #web_security
Medium
Burp Suite Enterprise resource exhaustion via huge request body
Burp Suite Enterprise resource exhaustion via huge request body The /api-internal/login endpoint had no request body size limits at all. Zero checks in Jetty, no proxy limits, nothing. I sent one …
18 views
Daily Writeups
⤷ Title: HackTheBox: Campfire-1 Sherlock Walkthrough
════════════════════════
𐀪 Author: Drew Arpino
════════════════════════
ⴵ Time: Sun, 10 May 2026 23:01:00 GMT
════════════════════════
⌗ Tags: #hackthebox_writeup #hackthebox_walkthrough #cybersecurity #dfir #hackthebox
Medium
HackTheBox: Campfire-1 Sherlock Walkthrough
Detecting Kerberoasting Activity: Correlating Kerberos Events, PowerShell Logs, and Prefetch Artifacts
20 views
Daily Writeups
⤷ Title: I Exploited a Banking API Using Burp Suite, JWT Manipulation, and Authorization Bypass Testing
════════════════════════
𐀪 Author: Hafsah Ashraf
════════════════════════
ⴵ Time: Sun, 10 May 2026 23:18:54 GMT
════════════════════════
⌗ Tags: #api_security #pentesting
Medium
I Exploited a Banking API Using Burp Suite, JWT Manipulation, and Authorization Bypass Testing
Most people learning cybersecurity spend time reading about vulnerabilities.
23 views
Daily Writeups
⤷ Title: Beyond Text: How Google Gemini’s New Multimodal RAG Turns Images and PDFs into Actionable Intelligence
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Mon, 11 May 2026 02:54:20 +0000
════════════════════════
⌗ Tags: #Technology #AI Development #AI Studio #enterprise AI #File Search #Gemini Embedding 2 #Google Cloud #Google Gemini API #Knowledge Base #Multimodal RAG #PDF Analysis #RAG Workflow #Vector Search
Daily CyberSecurity
Beyond Text: How Google Gemini’s New Multimodal RAG Turns Images and PDFs into Actionable Intelligence
Google Gemini API expands file search with Multimodal RAG. Featuring image-text retrieval, custom metadata, and page-level citations for enterprise AI.
17 views
Daily Writeups
⤷ Title: Optimization or Artifice? The Truth Behind the Windows 11 “Low Latency Profile” and CPU Speed Bursts
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Mon, 11 May 2026 02:50:47 +0000
════════════════════════
⌗ Tags: #Windows #CPU Boost #Hardware Performance #Low Latency Profile #Microsoft #Operating System Optimization #Scott Hanselman #Start Menu Fix #Tech News 2026 #UI Performance #Windows 11 #Windows 11 Lag
Daily CyberSecurity
Optimization or Artifice? The Truth Behind the Windows 11 "Low Latency Profile" and CPU Speed Bursts
Microsoft is testing a "Low Latency Profile" to fix Windows 11 UI lag with 3-second CPU bursts. Is it lazy engineering or a sophisticated industry standard?
17 views
Daily Writeups
⤷ Title: Patch Now: Apache CloudStack Plugs Proxmox and KVM Exploits in New LTS Release
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Mon, 11 May 2026 02:15:43 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #Apache CloudStack #Backup Plugin #Cloud Security #CVE_2026_25077 #CVE_2026_25199 #DevOps #Infrastructure Security #KVM RCE #Patch Alert #Proxmox #VM Hijacking
Daily CyberSecurity
Patch Now: Apache CloudStack Plugs Proxmox and KVM Exploits in New LTS Release
Urgent: Apache CloudStack patches critical flaws (CVE-2026-25199, CVE-2026-25077) enabling VM hijacking and KVM host RCE. Secure your cloud environment now.
10 views
Daily Writeups
⤷ Title: Root Access at Risk: Perl Injection and Symlink Flaws Hit cPanel & WHM
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Mon, 11 May 2026 02:00:35 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #CPanel #CVE_2026_29202 #CVE_2026_29203 #infosec #Linux Server #Patch Alert #Perl Injection #privilege escalation #Web Hosting Security #WHM #WP Squared
Daily CyberSecurity
Root Access at Risk: Perl Injection and Symlink Flaws Hit cPanel & WHM
Update cPanel immediately! High-severity vulnerabilities (CVSS 8.8) allow Perl injection and privilege escalation. Protect your hosting environment now.
15 views
Daily Writeups
⤷ Title: The Q1 2026 Exploit Surge: AI Discovers the Flaws, APTs Reap the Rewards
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Mon, 11 May 2026 01:26:59 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #AI Vulnerabilities #Authentication Bypass #Clawdbot #CVE #cybersecurity #infosec #kaspersky #LangChain #Linux Security #metasploit #Q1 2026 #threat intelligence #Windows Exploits
Daily CyberSecurity
The Q1 2026 Exploit Surge: AI Discovers the Flaws, APTs Reap the Rewards
Kaspersky reports a record surge in CVEs for Q1 2026. Discover how AI-driven exploits, authentication bypasses, and new C2 trends are reshaping cyber defense.
11 views
Daily Writeups
⤷ Title: Zero-Click Shell: Public Exploit and PoC Disclosed for Android’s Critical ADB Auth Bypass (CVE-2026-0073)
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Mon, 11 May 2026 01:00:27 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #ADB #Android security #Auth Bypass #BARGHEST #CVE_2026_0073 #Exploit #infosec #mobile security #PoC #Wireless Debugging #Zero_Click
Daily CyberSecurity
Zero-Click Shell: Public Exploit and PoC Disclosed for Android’s Critical ADB Auth Bypass (CVE-2026-0073)
A critical vulnerability existing within the core of Android’s developer tools has been exposed, revealing a zero-click avenue for attackers to silently hijack mobile devices over Wi-Fi. Det…
16 views
Daily Writeups
⤷ Title: Hacker Typer: The Ultimate Fake Hacking Screen for Pranks, Presentations, and Content Creation
════════════════════════
𐀪 Author: Website Developer
════════════════════════
ⴵ Time: Mon, 11 May 2026 02:36:13 GMT
════════════════════════
⌗ Tags: #hacking #hacker_typer #hacker #hacker_tool #i_need_a_hacker_to_change
Medium
Hacker Typer: The Ultimate Fake Hacking Screen for Pranks, Presentations, and Content Creation
15 views
Daily Writeups
⤷ Title: How to Perform ADCS Attacks | ESC1 | Windows and Linux Guide
════════════════════════
𐀪 Author: SilentExploit
════════════════════════
ⴵ Time: Mon, 11 May 2026 01:11:24 GMT
════════════════════════
⌗ Tags: #technology #hacking #oscp #ethical_hacking #tech
Medium
How to Perform ADCS Attacks | ESC1 | Windows and Linux Guide
In this series I will be replicating Active Directory Certificate Service Attacks in both Windows and Linux environment. Today, we are…
16 views
Daily Writeups
⤷ Title: Deception Technology in 2026: How Fake Environments Are Catching Real Attackers
════════════════════════
𐀪 Author: Parth Patel
════════════════════════
ⴵ Time: Mon, 11 May 2026 02:31:00 GMT
════════════════════════
⌗ Tags: #deception_technology #threat_detection #honeypot #cybersecurity #infosec
Medium
🪤 Deception Technology in 2026: How Fake Environments Are Catching Real Attackers
In 2016, a financial institution’s security team noticed something strange: an attacker had been quietly navigating their network for three…
27 views
Daily Writeups
⤷ Title: Academic Lockdown: How the ShinyHunters Attack on Canvas LMS Paralyzed Thousands of Schools During Finals
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Mon, 11 May 2026 03:36:27 +0000
════════════════════════
⌗ Tags: #Cybercriminals #Academic Disruption #Canvas LMS #Cyberattack 2026 #data breach #EdTech Security #Harvard #Higher Education Security #Instructure #ransomware #ShinyHunters #Student Data Privacy
Penetration Testing Tools
Academic Lockdown: How the ShinyHunters Attack on Canvas LMS Paralyzed Thousands of Schools During Finals
Canvas, one of the preeminent learning management systems in the United States, descended into maintenance mode this Thursday,
17 views
Daily Writeups
⤷ Title: The Kernel Kill Switch: Sasha Levin’s New “Last Line of Defense” for Linux Vulnerability Mitigation
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Mon, 11 May 2026 03:29:48 +0000
════════════════════════
⌗ Tags: #Linux #AF_ALG #Cybersecurity 2026 #Infosec #Kernel Taint #Kernel Vulnerability #Killswitch Patch #kprobe #Linux Kernel #Linux Security #Sasha Levin #SRE Tools #Sysadmin
Penetration Testing Tools
The Kernel Kill Switch: Sasha Levin’s New "Last Line of Defense" for Linux Vulnerability Mitigation
Administrators of expansive Linux fleets are being presented with an emergency “kill switch” designed to neutralize vulnerable segments
18 views
Daily Writeups
⤷ Title: The Terminal Trap: How the “ClickFix” Scam Tricks Mac Users into Self-Infecting with Data-Stealing Malware
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Mon, 11 May 2026 03:25:10 +0000
════════════════════════
⌗ Tags: #Malware #AMOS #Apple XProtect #ClickFix #Cryptocurrency Theft #Cybersecurity 2026 #Data Stealer #Keychain Security #macos #MacSync #malware #Shub Stealer #Terminal
Penetration Testing Tools
The Terminal Trap: How the "ClickFix" Scam Tricks Mac Users into Self-Infecting with Data-Stealing Malware
macOS users are once again being enticed by “simplistic remedies” for system optimization or disk purification, yet following
14 views
Daily Writeups
⤷ Title: Deep Diagnostics: Microsoft Supercharges Sysinternals with AI-Era Process Tracking and Linux Support
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Mon, 11 May 2026 03:21:06 +0000
════════════════════════
⌗ Tags: #Microsoft #Autoruns #Debian 13 #DebugView #IT Administration #Linux Security #Powertoys #ProcDump #Process Explorer #RHEL 10 #Sysinternals #Sysmon #Windows Troubleshooting
Penetration Testing Tools
Deep Diagnostics: Microsoft Supercharges Sysinternals with AI-Era Process Tracking and Linux Support
Microsoft has modernized several quintessential utilities within the Sysinternals Suite, a collection frequently utilized by system administrators, support
11 views
Daily Writeups
⤷ Title: Cloud Gaming Compromise: NVIDIA Partner GFN.am Hit by Data Breach Exposing Millions of Records
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Mon, 11 May 2026 03:14:49 +0000
════════════════════════
⌗ Tags: #Data Leak #Armenia #Cloud Gaming #Cybersecurity 2026 #data breach #data leak #Game Security #GeForce NOW #GFN Alliance #GFN.am #Nvidia #ShinyHunters #two_factor authentication
Penetration Testing Tools
Cloud Gaming Compromise: NVIDIA Partner GFN.am Hit by Data Breach Exposing Millions of Records
NVIDIA has corroborated a data breach involving a subset of GeForce NOW subscribers, though the incursion was notably
11 views
Daily Writeups
⤷ Title: 53 Seconds, 85 Transactions: How the Ekubo Router Exploit Siphoned $1.4M in Wrapped Bitcoin
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Mon, 11 May 2026 03:10:45 +0000
════════════════════════
⌗ Tags: #Cybercriminals #Arbitrum #DeFi Exploit #Ekubo #Ethereum #EVM Security #RAILGUN #Smart Contract Vulnerability #Starknet #Tornado Cash #Wallet Permissions #WBTC #Wrapped Bitcoin
Penetration Testing Tools
53 Seconds, 85 Transactions: How the Ekubo Router Exploit Siphoned $1.4M in Wrapped Bitcoin
The decentralized exchange Ekubo, established upon the Starknet platform, suffered a loss of approximately $1.4 million in Bitcoin
10 views