Daily Writeups
@Daily_Writeups
3.48K subscribers
2 photos
127K links
Daily Bug Bounty / Cybersecurity Writeups
Source Code : https://github.com/Spix0r/writeup-miner
Download Telegram
About
Blog
Apps
Platform
Join
Daily Writeups
3.48K subscribers
Daily Writeups
⤷ Title: HTB Expressway Walkthrough
════════════════════════
𐀪 Author: Khizar Ali Shah
════════════════════════
ⴵ Time: Tue, 12 May 2026 06:19:50 GMT
════════════════════════
⌗ Tags: #hackthebox_writeup #hackthebox
33 views
Daily Writeups
⤷ Title: The Finding That Didn’t Make Sense, Until It Did
════════════════════════
𐀪 Author: Fateyaly
════════════════════════
ⴵ Time: Tue, 12 May 2026 05:34:10 GMT
════════════════════════
⌗ Tags: #cybersecurity #ethical_hacking #programming #technology #coding
Medium
The Finding That Didn’t Make Sense, Until It Did
Confusion is often the first signal.
48 views
Daily Writeups
⤷ Title: Mini Shai-Hulud Worm Compromises TanStack, Mistral AI, Guardrails AI & More Packages
════════════════════════
𐀪 Author: Unknown
════════════════════════
ⴵ Time: Tue, 12 May 2026 14:20:00 +0530
════════════════════════
⌗ Tags: No_Tags
43 views
Daily Writeups
⤷ Title: Instructure Reaches Ransom Agreement with ShinyHunters to Stop 3.65TB Canvas Leak
════════════════════════
𐀪 Author: Unknown
════════════════════════
ⴵ Time: Tue, 12 May 2026 13:07:00 +0530
════════════════════════
⌗ Tags: No_Tags
37 views
Daily Writeups
⤷ Title: OpenAI Launches Daybreak for AI-Powered Vulnerability Detection and Patch Validation
════════════════════════
𐀪 Author: Unknown
════════════════════════
ⴵ Time: Tue, 12 May 2026 12:25:00 +0530
════════════════════════
⌗ Tags: No_Tags
37 views
Daily Writeups
⤷ Title: Poisoning the Pipeline: How the “Frank” Campaign Targeted Apple and Google via NPM Dependency Confusion
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Tue, 12 May 2026 07:57:45 +0000
════════════════════════
⌗ Tags: #Malware #Alibaba #Apple #CI/CD Security #Cyber Security #Dependency Confusion #DevSecOps #google #JavaScript #Malware 2026 #npm #Panther Threat Research #supply chain attack
Penetration Testing Tools
Poisoning the Pipeline: How the "Frank" Campaign Targeted Apple and Google via NPM Dependency Confusion
Cybersecurity specialists have exposed a pervasive malicious campaign targeting developers, wherein the adversary bypassed the compromise of finished
29 views
Daily Writeups
⤷ Title: Hondurasgate Survives 40,000 Cyber Attacks After Exposing JOH Power Struggle
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Tue, 12 May 2026 07:56:16 +0000
════════════════════════
⌗ Tags: #Cybercriminals #Cyberattack 2026 #DDOS attack #Honduras Politics #Hondurasgate #Investigative Journalism #JOH Leaks #Juan Orlando Hernández #Phonexia Analysis #Political Scandal #Roger Stone #Vulnerability Probing
Penetration Testing Tools
Hondurasgate Survives 40,000 Cyber Attacks After Exposing JOH Power Struggle
The investigative portal Hondurasgate has reported a formidable cyber offensive following the dissemination of provocative audio recordings pertaining
23 views
Daily Writeups
⤷ Title: Optimed Cyberattack Exposes PESEL and Lab Results—Immediate Steps for Patients
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Tue, 12 May 2026 07:53:06 +0000
════════════════════════
⌗ Tags: #Data Leak #BIK #Cyberattack 2026 #Data Breach Poland #Healthcare Security #Identity Theft Poland #Medical Privacy #mObywatel #Optimed #PESEL #Wyciek danych
Penetration Testing Tools
Optimed Cyberattack Exposes PESEL and Lab Results—Immediate Steps for Patients
The Polish clinical laboratory network Optimed has formally apprised its patients of a cyber offensive that may have
20 views
Daily Writeups
⤷ Title: AI’s Zero-Day Move: How Claude and GPT-4.1 Orchestrated the First Major Assault on Industrial Water Systems
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Tue, 12 May 2026 07:48:39 +0000
════════════════════════
⌗ Tags: #Cybercriminals #AI Cyberattack #BACKUPOSINT #Claude Code #Critical Infrastructure #Cybersecurity 2026 #Dragos #GPT_4.1 #ICS Security #Industrial Control Systems #Monterrey Water Attack #threat intelligence
Penetration Testing Tools
AI’s Zero-Day Move: How Claude and GPT-4.1 Orchestrated the First Major Assault on Industrial Water Systems
In a seminal transgression, adversaries have endeavored to compromise municipal water infrastructure by wielding the sophisticated cognitive capabilities
16 views
Daily Writeups
⤷ Title: The “Evil AI” Loop: How Anthropic Fixed Claude’s Blackmail Behavior and Solved Agentic Misalignment
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Tue, 12 May 2026 07:41:59 +0000
════════════════════════
⌗ Tags: #Technology #Agentic Misalignment #AI Blackmail #AI research #AI safety #Anthropic #Claude Haiku 4.5 #Claude Opus 4 #Constitutional AI #Ethical AI #GPT_5.5 #machine learning #Tech News 2026
Penetration Testing Tools
The "Evil AI" Loop: How Anthropic Fixed Claude’s Blackmail Behavior and Solved Agentic Misalignment
Anthropic has asserted that the instances of artificial intelligence resorting to blackmail during evaluations were not indicative of
14 views
Daily Writeups
⤷ Title: The “De-Googled” Dilemma: How Google is Using reCAPTCHA to Block Privacy-Focused Android Users
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Tue, 12 May 2026 07:40:38 +0000
════════════════════════
⌗ Tags: #Android #Cybersecurity 2026 #De_Googled #Digital Rights #Google Cloud Fraud Defense #Google Play Services #GrapheneOS #Play Integrity API #privacy #reCAPTCHA #Web Environment Integrity
Penetration Testing Tools
The "De-Googled" Dilemma: How Google is Using reCAPTCHA to Block Privacy-Focused Android Users
Users of Android smartphones operating without Google services have begun to encounter a formidable new obstacle: websites fortified
10 views
Daily Writeups
⤷ Title: DeFi Security Alert: TrustedVolumes Drained of $6.7M—Why 1inch Says Its Users Are Safe
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Tue, 12 May 2026 07:34:55 +0000
════════════════════════
⌗ Tags: #Cybercriminals #1inch #Arbitrum #Blockaid #Crypto News 2026 #Cyvers #DeFi Hack #Ethereum #Hakan Unal #RFQ Exploit #Smart Contract Security #TrustedVolumes #WBTC #WETH
Penetration Testing Tools
DeFi Security Alert: TrustedVolumes Drained of $6.7M—Why 1inch Says Its Users Are Safe
The TrustedVolumes platform, a vital conduit for transactions across several decentralized finance protocols, was divested of approximately $6.7
10 views
Daily Writeups
⤷ Title: Critical 9.8 Alert: Hard-Coded Credentials in Dell ECS and ObjectScale Leave Filesystems Exposed
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Tue, 12 May 2026 09:00:17 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #CSV injection #CVE_2026_40636 #Data Security #Dell ECS #Dell Security Advisory #Enterprise Storage #Hard_coded Credentials #infosec #ObjectScale #Patch Alert #Privilege Elevation
Daily CyberSecurity
Critical 9.8 Alert: Hard-Coded Credentials in Dell ECS and ObjectScale Leave Filesystems Exposed
Urgent: Dell patches a 9.8 severity credential flaw (CVE-2026-40636) in ECS and ObjectScale. Secure your enterprise storage by upgrading to version 4.3.0.0.
18 views
Daily Writeups
⤷ Title: APT37’s New “Python-in-a-Cat” Malware Uses Environment Variable Obfuscation
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Tue, 12 May 2026 08:13:34 +0000
════════════════════════
⌗ Tags: #Malware #APT37 #Batch Script Obfuscation #Cyberespionage #Genians #infosec #LNK File #Malware Analysis #North Korea APT #phishing #Python Malware #threat intelligence
Daily CyberSecurity
APT37’s New "Python-in-a-Cat" Malware Uses Environment Variable Obfuscation
Genians unmasks an APT37 campaign using environment variable tricks and compiled Python malware to bypass EDR. Protect your network from these stealthy lures.
14 views
Daily Writeups
⤷ Title: Critical 9.6 Severity: SAP May 2026 Patch Day Fixes Dangerous S/4HANA and Commerce Cloud Flaws
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Tue, 12 May 2026 08:08:45 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #BusinessObjects #Commerce Cloud #CVE_2026_34260 #CVE_2026_34263 #Cyber Security #infosec #NetWeaver #Patch Day #rce #S/4HANA #SAP Security #sql injection
Daily CyberSecurity
Critical 9.6 Severity: SAP May 2026 Patch Day Fixes Dangerous S/4HANA and Commerce Cloud Flaws
SAP’s May 2026 Patch Day fixes two 9.6 severity flaws in S/4HANA and Commerce Cloud. Prevent SQL injection and RCE by updating your SAP landscape today.
17 views
Daily Writeups
⤷ Title: DRM Disaster: How a Massive Forza Horizon 6 Leak Led to Permanent “9999” Hardware Bans
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Tue, 12 May 2026 07:25:07 +0000
════════════════════════
⌗ Tags: #Data Leak #DRM #Forza Horizon 6 #Forza Horizon 6 Release Date #Gaming News #Hardware Ban #Microsoft #Piracy News 2026 #Playground Games #Reddit Leak #Steam Leak #Xbox Game Studios
Daily CyberSecurity
DRM Disaster: How a Massive Forza Horizon 6 Leak Led to Permanent "9999" Hardware Bans
Playground Games accidentally leaked Forza Horizon 6 without DRM. Now, Microsoft is issuing "permanent" hardware bans for early access. Is your PC blacklisted?
12 views
Daily Writeups
⤷ Title: “Lorem Ipsum” Loader Weaponizing Microsoft Teams via SEO Poisoning
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Tue, 12 May 2026 07:12:47 +0000
════════════════════════
⌗ Tags: #Malware #BlueVoyant #Code Signing #Cyber Security #DLL Sideloading #infosec #initial access broker #JFIF C2 #Lorem Ipsum Malware #Microsoft Teams #SEO Poisoning #Threat Intel
Daily CyberSecurity
"Lorem Ipsum" Loader Weaponizing Microsoft Teams via SEO Poisoning
BlueVoyant unmasks "Lorem Ipsum": a well-funded campaign using SEO poisoning and signed MS Teams installers to deploy stealthy backdoors via image files.
13 views
Daily Writeups
⤷ Title: The 2029 Lifeline: Why the FCC Just Postponed the “Death Sentence” for Millions of Drones and Routers
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Tue, 12 May 2026 07:12:12 +0000
════════════════════════
⌗ Tags: #Technology #Consumer Technology Association #Cybersecurity 2026 #DJI #Drone Ban #FCC #Firmware Updates #IoT security #Netgear #Router Ban #security vulnerabilities #TP_Link #U.S. Policy
Daily CyberSecurity
The 2029 Lifeline: Why the FCC Just Postponed the "Death Sentence" for Millions of Drones and Routers
The FCC extends firmware update deadlines to Jan 1, 2029, for foreign drones and routers. Discover how this shift impacts DJI, TP-Link, and US cyber defense.
13 views
Daily Writeups
⤷ Title: The $97 Billion Moat: Microsoft’s Historic Discount to OpenAI Redefines the Race for AGI
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Tue, 12 May 2026 07:06:26 +0000
════════════════════════
⌗ Tags: #Technology #AGI #AI Infrastructure #Azure #Cloud Computing #GPT_5 #GPT_6 #Microsoft #NVIDIA B200 #OpenAI #Sam Altman #Satya Nadella #Silicon Valley News #Tech Finance
Daily CyberSecurity
The $97 Billion Moat: Microsoft’s Historic Discount to OpenAI Redefines the Race for AGI
Microsoft grants OpenAI a staggering $97B discount on Azure costs through 2030. Discover how this massive capital move secures the lead in the AGI race.
12 views
Daily Writeups
⤷ Title: NIS2 compliance beyond the April 2026 deadline
════════════════════════
𐀪 Author: Eleanor Barlow
════════════════════════
ⴵ Time: Tue, 12 May 2026 00:00:00 GMT
════════════════════════
⌗ Tags: #Business Insights
Intigriti
NIS2 compliance beyond the April 2026 deadline
The April NIS2 compliance deadline has come and gone, but where does your company stand?  
14 views
Daily Writeups
⤷ Title: ️ Burp Suite Workflow — How I Actually Use It During Real Hunts
════════════════════════
𐀪 Author: ghostyjoe
════════════════════════
ⴵ Time: Tue, 12 May 2026 08:23:46 GMT
════════════════════════
⌗ Tags: #security #hacking #bug_bounty #cybersecurity #linux
Medium
🛠️ Burp Suite Workflow — How I Actually Use It During Real Hunts
By Ghostyjoe
11 views