Daily Writeups
@Daily_Writeups
3.56K subscribers
2 photos
130K links
Daily Bug Bounty / Cybersecurity Writeups
Source Code : https://github.com/Spix0r/writeup-miner
Download Telegram
About
Blog
Apps
Platform
Join
Daily Writeups
3.56K subscribers
Daily Writeups
⤷ Title: Checkmarx Fails Again: TeamPCP Hijacks Jenkins Plugin to Harvest Developer Credentials
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Wed, 13 May 2026 08:16:40 +0000
════════════════════════
⌗ Tags: #Malware #Checkmarx #Credential Harvesting #Cybersecurity 2026 #DevOps Security #Infosec #jenkins #Jenkins Marketplace #Malware Alert #Shai_Hulud #supply chain attack #TeamPCP
Penetration Testing Tools
Checkmarx Fails Again: TeamPCP Hijacks Jenkins Plugin to Harvest Developer Credentials
Unidentified adversaries have subverted the Checkmarx plugin for Jenkins, embedding deleterious code designed for credential exfiltration. This incursion
15 views
Daily Writeups
⤷ Title: Chrome for Android Gains Gemini 3.1, Nano Banana Image Synthesis, and “Auto Browse” Powers
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Wed, 13 May 2026 08:06:09 +0000
════════════════════════
⌗ Tags: #Technology #AI Browsing #android #Auto Browse #Gemini 3.1 #Google Calendar #google chrome #Google Keep #Mobile AI #Nano Banana Model #Prompt Injection Security #Tech News 2026
Daily CyberSecurity
Chrome for Android Gains Gemini 3.1, Nano Banana Image Synthesis, and "Auto Browse" Powers
Google transforms Chrome into an "Intelligent Browsing Companion" with Gemini 3.1. Explore Auto Browse, real-time image synthesis, and AI webpage deconstruction.
14 views
Daily Writeups
⤷ Title: Android 17 Adds Native AirDrop Support and “Zero-Friction” iOS Migration
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Wed, 13 May 2026 07:55:01 +0000
════════════════════════
⌗ Tags: #Android #Advanced Professional Video #AirDrop #Android 17 #Google I/O 2026 #Instagram Android Update #iOS Migration #Noto 3D #Pause Point #Pixel 10 #Quick Share #Samsung Galaxy S26
Daily CyberSecurity
Android 17 Adds Native AirDrop Support and "Zero-Friction" iOS Migration
Google I/O 2026 bombshell: Android 17's Quick Share adds native AirDrop support and a "one-tap" iOS migration tool. See the new Noto 3D emojis and Pause Point.
8 views
Daily Writeups
⤷ Title: The “Unbreakable” OS: Android 17 Unveils AI-Powered Fraud Defense and Thief-Proof Biometrics
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Wed, 13 May 2026 07:40:18 +0000
════════════════════════
⌗ Tags: #Android #AI security #Android 17 #Android Security Roadmap #Anti_Theft Lock #Cybersecurity 2026 #fraud detection #google #Live Threat Detection #OTP Shield #Privacy Permissions
Daily CyberSecurity
The "Unbreakable" OS: Android 17 Unveils AI-Powered Fraud Defense and Thief-Proof Biometrics
Google’s 2026 Android roadmap turns AI into a "Live Threat Detection" sentinel. Explore Android 17’s new anti-theft biometrics and banking fraud intercepts.
8 views
Daily Writeups
⤷ Title: Security Alert: Cemu Emulator Linux Releases Compromised via GitHub Backdoor (May 2026)
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Wed, 13 May 2026 07:19:11 +0000
════════════════════════
⌗ Tags: #Malware #backdoor #cemu #Cemu_2.6_x86_64.AppImage #Cybersecurity 2026 #Emulation Security #GitHub Breach #infosec #Linux Malware #Malware Alert #Pro_Russian Hackers #Wii U Emulator
Daily CyberSecurity
Security Alert: Cemu Emulator Linux Releases Compromised via GitHub Backdoor (May 2026)
Critical: Cemu 2.6 Linux binaries were backdoored via a developer's stolen GitHub token. If you downloaded Cemu for Linux between May 6–12, audit your system now.
11 views
Daily Writeups
⤷ Title: Agentic AI is Automating Live Intrusions in Latin America
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Wed, 13 May 2026 07:02:14 +0000
════════════════════════
⌗ Tags: #Cybercriminals #Agentic AI #AI Cyber Attacks #Anthropic Claude #infosec #Jailbreaking #Malware Analysis #SHADOW_AETHER_040 #SHADOW_AETHER_064 #threat intelligence #TrendAI Research #Vibe Coding
Daily CyberSecurity
Agentic AI is Automating Live Intrusions in Latin America
TrendAI exposes SHADOW-AETHER: threat groups using agentic AI to "vibe code" custom backdoors and automate intrusions across government and financial sectors.
17 views
Daily Writeups
⤷ Title: Exploiting Insecure Output Handling in LLMs via Indirect Prompt Injection (XSS)
════════════════════════
𐀪 Author: Mukilan Baskaran
════════════════════════
ⴵ Time: Wed, 13 May 2026 08:20:48 GMT
════════════════════════
⌗ Tags: #ethical_hacking #bug_bounty #ai #cybersecurity #llm
Medium
🚨 Exploiting Insecure Output Handling in LLMs via Indirect Prompt Injection (XSS)
How a Product Review Became a Weapon Against an AI Chatbot 🤖💥
14 views
Daily Writeups
⤷ Title: Thinking Beyond Automation — Why Scanners Miss Real Bugs
════════════════════════
𐀪 Author: ghostyjoe
════════════════════════
ⴵ Time: Wed, 13 May 2026 08:41:51 GMT
════════════════════════
⌗ Tags: #hacking #linux #security #cybersecurity #bug_bounty
Medium
🧠 Thinking Beyond Automation — Why Scanners Miss Real Bugs
By Ghostyjoe
11 views
Daily Writeups
⤷ Title: OWASP Application Security Risk 10:2025 A05 Injection
════════════════════════
𐀪 Author: Tiago Silva
════════════════════════
ⴵ Time: Wed, 13 May 2026 06:54:27 GMT
════════════════════════
⌗ Tags: #owasp #information_security #application_security #cybersecurity #technology
Medium
OWASP Application Security Risk 10:2025 A05 Injection
Background.
7 views
Daily Writeups
⤷ Title: Grond’s Dynamic Impact: A Kinetic-Frequency Analysis of Brute-Force Siegecraft in Modern Cyber…
════════════════════════
𐀪 Author: Nazli Aydin (Misselbereth)
════════════════════════
ⴵ Time: Wed, 13 May 2026 08:27:35 GMT
════════════════════════
⌗ Tags: #tech #software_engineering #hacking #cybersecurity #lord_of_the_rings
Medium
Grond’s Dynamic Impact: A Kinetic-Frequency Analysis of Brute-Force Siegecraft in Modern Cyber Walls
How the Hammer of the Underworld (and a Really Persistent Python Script) Teaches Us Everything About Resonance, Resilience, and Why Your…
6 views
Daily Writeups
⤷ Title: Boot-to-Root Walkthrough: Compromising Devarea on HackTheBox — By BitR1FT
════════════════════════
𐀪 Author: BitR1ft
════════════════════════
ⴵ Time: Wed, 13 May 2026 07:56:10 GMT
════════════════════════
⌗ Tags: #infosec #cybersecurity #bitr1ft #hackthebox
Medium
Boot-to-Root Walkthrough: Compromising Devarea on HackTheBox — By BitR1FT
Today, we are taking on Devarea, a machine that tests your ability to string together multiple misconfigurations. We’ll start by…
8 views
Daily Writeups
⤷ Title: Pwning CCTV on HackTheBox — A Boot-to-Root Walkthrough by BitR1FT
════════════════════════
𐀪 Author: BitR1ft
════════════════════════
ⴵ Time: Wed, 13 May 2026 07:49:22 GMT
════════════════════════
⌗ Tags: #bitr1ft #hackthebox #infosec #cybersecurity
Medium
Pwning CCTV on HackTheBox — A Boot-to-Root Walkthrough by BitR1FT
Today, we are tackling CCTV, an Easy-rated Linux machine that revolves entirely around a surveillance theme.
10 views
Daily Writeups
⤷ Title: Cross-Site Scripting(XSS- A Web Application Vulnerability)
════════════════════════
𐀪 Author: swostika poudel
════════════════════════
ⴵ Time: Wed, 13 May 2026 08:34:01 GMT
════════════════════════
⌗ Tags: #websecurity_vulnerability #cross_site_scripting #ethical_hacking
Medium
Cross-Site Scripting(XSS- A Web Application Vulnerability)
Cross-Site Scripting (XSS) is a web security vulnerability that occurs when a trusted website allows users to input malicious scripts…
14 views
Daily Writeups
⤷ Title: Understanding the OSI Model: The Backbone of Computer Networking
════════════════════════
𐀪 Author: Singhreetika
════════════════════════
ⴵ Time: Wed, 13 May 2026 08:02:25 GMT
════════════════════════
⌗ Tags: #information_technology #cybersecurity #networking #osi_model #ethical_hacking
Medium
Understanding the OSI Model: The Backbone of Computer Networking
The first time I heard about the OSI Model, it honestly sounded confusing. Seven layers, protocols, routing, packets — it felt like too…
19 views
Daily Writeups
⤷ Title: The Duplicate That Shouldn’t Have Been a Duplicate
════════════════════════
𐀪 Author: Fateyaly
════════════════════════
ⴵ Time: Wed, 13 May 2026 05:43:41 GMT
════════════════════════
⌗ Tags: #programming #ethical_hacking #cybersecurity #technology #coding
Medium
The Duplicate That Shouldn’t Have Been a Duplicate
And what it taught me about timing and depth.
15 views
Daily Writeups
⤷ Title: Shellshock Vulnerability Explained: Causes, Risks, and Security Impact
════════════════════════
𐀪 Author: Darshika Madhuhansani
════════════════════════
ⴵ Time: Wed, 13 May 2026 05:24:09 GMT
════════════════════════
⌗ Tags: #linux #information_security #cybersecurity #ethical_hacking #shellshock
Medium
Shellshock Vulnerability Explained: Causes, Risks, and Security Impact
Introduction
25 views
Daily Writeups
⤷ Title: How to Find Subdomains Using Shodan and the Favicon Hash Trick
════════════════════════
𐀪 Author: MD Mehedi Hasan
════════════════════════
ⴵ Time: Wed, 13 May 2026 07:37:16 GMT
════════════════════════
⌗ Tags: #bug_bounty_tips #shodan #recon #subdomain_enumeration #faviconhash
Medium
How to Find Subdomains Using Shodan and the Favicon Hash Trick
Subdomain enumeration is the foundation of any serious bug bounty reconnaissance. While tools like Sublist3r, Amass, and crt.sh are…
49 views
Daily Writeups
⤷ Title: GemStuffer Abuses 150+ RubyGems to Exfiltrate Scraped U.K. Council Portal Data
════════════════════════
𐀪 Author: Unknown
════════════════════════
ⴵ Time: Wed, 13 May 2026 13:38:54 +0530
════════════════════════
⌗ Tags: No_Tags
36 views
Daily Writeups
⤷ Title: Why Canadian Telecom Providers Are Prime Targets for Cyberattacks
════════════════════════
𐀪 Author: Owais Sultan
════════════════════════
ⴵ Time: Wed, 13 May 2026 10:06:33 +0000
════════════════════════
⌗ Tags: #Security #Cyber Attacks #Canada #Cyber Attack #Cyber Crime #Cybersecurity #data breach #Privacy #SIM Swapping #Telecom
Hackread
Why Canadian Telecom Providers Are Prime Targets for Cyberattacks
Follow us on all major social media platforms @Hackread
30 views
Daily Writeups
⤷ Title: Meet Xalgorix: The World’s Most Powerful Open-Source Autonomous AI Pentesting Agent
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Wed, 13 May 2026 09:05:06 +0000
════════════════════════
⌗ Tags: #Open Source Tool #AI Pentesting #Autonomous Security Agent #Cybersecurity 2026 #DAST #ethical hacking #open source #Penetration Testing #red teaming #Self_Hosted AI #Xalgorix #Zero_Day Hunter
Penetration Testing Tools
Meet Xalgorix: The World’s Most Powerful Open-Source Autonomous AI Pentesting Agent
Xalgorix is a free, self-hosted autonomous AI pentesting agent. Automate 70+ security tools, hunt zero-days, and generate branded PDF reports with zero fees.
19 views
Daily Writeups
⤷ Title: Local File Inclusion(LFI) + Directory Traversal in Bug Bounty
════════════════════════
𐀪 Author: Daemi Jack
════════════════════════
ⴵ Time: Wed, 13 May 2026 10:38:46 GMT
════════════════════════
⌗ Tags: #bug_bounty #cybersecurity #ctf_writeup
Medium
Local File Inclusion(LFI) + Directory Traversal in Bug Bounty
Since I started my journey in cybersecurity, one vulnerability has consistently appeared throughout my research: Local File Inclusion…
16 views