Daily Writeups
@Daily_Writeups
3.56K subscribers
2 photos
130K links
Daily Bug Bounty / Cybersecurity Writeups
Source Code : https://github.com/Spix0r/writeup-miner
Download Telegram
About
Blog
Apps
Platform
Join
Daily Writeups
3.56K subscribers
Daily Writeups
⤷ Title: Kimsuky Core Upgrades Weaponize Rust Backdoors and VSCode Remote Tunneling
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Wed, 20 May 2026 06:45:58 +0000
════════════════════════
⌗ Tags: #Malware #AppleSeed #cyber_espionage #HelloDoor #infosec #Kimsuky #MemLoad #PebbleDash #Rust Backdoor #threat intelligence #TryCloudflare #VSCode Remote Tunneling
Daily CyberSecurity
Kimsuky Core Upgrades Weaponize Rust Backdoors and VSCode Remote Tunneling
Kimsuky APT evolves its arsenal with "HelloDoor," a new Rust-based backdoor, and hijacks trusted VSCode Remote Tunneling to bypass corporate firewalls.
13 views
Daily Writeups
⤷ Title: Google Cloud Abruptly Shuts Down Railway, Sparking Catastrophic Infrastructure Outage
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Wed, 20 May 2026 06:43:11 +0000
════════════════════════
⌗ Tags: #Technology #Automated Enforcement Algorithms #Cloud Concentration Risk #Google Cloud Account Suspension #Infrastructure Automation Failure #Multi_Cloud Redundancy #Non_Enterprise Build Throttle #Railway Outage 2026 #Site Reliability Engineering #Unilateral Cloud Termination #UniSuper GCP Incident
Daily CyberSecurity
Google Cloud Abruptly Shuts Down Railway, Sparking Catastrophic Infrastructure Outage
Developer cloud platform Railway suffers a widespread, catastrophic infrastructure outage after Google Cloud abruptly suspends its corporate account.
11 views
Daily Writeups
⤷ Title: Inside the Breach: How TeamPCP Poisoned a VS Code Extension to Exfiltrate 3,800 GitHub Repositories
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Wed, 20 May 2026 06:39:53 +0000
════════════════════════
⌗ Tags: #Data Leak #Credential Harvesting Payload #Cryptographic Token Rotation #Developer Endpoint Isolation #Forensic Log Analysis #GitHub Copilot Leak #GitHub Enterprise Server #GitHub Source Code Breach #supply chain attack #TeamPCP Syndicate #VS Code Extension Worm
Daily CyberSecurity
Inside the Breach: How TeamPCP Poisoned a VS Code Extension to Exfiltrate 3,800 GitHub Repositories
GitHub confirms a perimeter breach by TeamPCP. An administrative VS Code extension supply-chain worm exfiltrated 3,800 proprietary core source repositories.
11 views
Daily Writeups
⤷ Title: Multi-Stage PyInstaller Loader Weaponizes AMSI Patching to Deploy XWorm RAT
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Wed, 20 May 2026 06:13:42 +0000
════════════════════════
⌗ Tags: #Malware #AMSI Bypass #Cyber Security #defense evasion #infosec #Malware Analysis #Point Wild #PyInstaller Loader #rat #Remote Access Trojan #VirtualProtect #XWorm
Daily CyberSecurity
Multi-Stage PyInstaller Loader Weaponizes AMSI Patching to Deploy XWorm RAT
Point Wild exposes a sophisticated PyInstaller loader using in-memory AMSI patching and SHA-512 decryption to drop XWorm V7.4. Patch now!
11 views
Daily Writeups
⤷ Title: How I Discovered Account Takeover (ATO) via XSS and Open redirect
════════════════════════
𐀪 Author: JEETPAL
════════════════════════
ⴵ Time: Wed, 20 May 2026 06:45:24 GMT
════════════════════════
⌗ Tags: #bug_bounty #bugbounty_writeup #bug_bounty_hunter #bug_bounty_tips #bug_bounty_writeup
Medium
How I Discovered Account Takeover (ATO) via XSS and Open redirect
Hello Everyone,
11 views
Daily Writeups
⤷ Title: How I Bypassed OTP Verification on Quick Heal — Account Takeover Without Valid OTP [RESOLVED]
════════════════════════
𐀪 Author: PradyumnTiwareNexus
════════════════════════
ⴵ Time: Wed, 20 May 2026 05:27:29 GMT
════════════════════════
⌗ Tags: #bug_bounty #ethical_hacking #cybersecurity #web_security #infosec
Medium
🔐 How I Bypassed OTP Verification on Quick Heal — Account Takeover Without Valid OTP [RESOLVED]
👋 Hey Hackers!
10 views
Daily Writeups
⤷ Title: The Day My Non-Tech Friend Asked Me to ‘Hack’ His Ex’s Instagram
════════════════════════
𐀪 Author: Vijay Kumar Gupta
════════════════════════
ⴵ Time: Wed, 20 May 2026 06:46:00 GMT
════════════════════════
⌗ Tags: #life #hacking #careers #cybersecurity #non_tech
Medium
The Day My Non-Tech Friend Asked Me to ‘Hack’ His Ex’s Instagram
Or: How I Learned to Say No (And Why You Should Too)
12 views
Daily Writeups
⤷ Title: Two Critical Attacks, One Week: NGINX Is Being Exploited and Your Email Gateway Has 7 Open Wounds
════════════════════════
𐀪 Author: Yuvraj Singh
════════════════════════
ⴵ Time: Wed, 20 May 2026 06:29:59 GMT
════════════════════════
⌗ Tags: #cybersecurity #hacking #email_security #vulnerability #tech_news_today
Medium
Two Critical Attacks, One Week: NGINX Is Being Exploited and Your Email Gateway Has 7 Open Wounds
CVE-2026–42945 is live in the wild. SEPPMail has a CVSS 10.0 flaw. If either is in your stack, this is your five-alarm briefing.
17 views
Daily Writeups
⤷ Title: How Modern Scam Call Centers Operate — Inside The Scam Industry (Part 1)
════════════════════════
𐀪 Author: ghostyjoe
════════════════════════
ⴵ Time: Wed, 20 May 2026 05:37:51 GMT
════════════════════════
⌗ Tags: #security #make_money_online #hacking #cybersecurity #social_media
Medium
📞 How Modern Scam Call Centers Operate — Inside The Scam Industry (Part 1)
SCAN SMARTER, NOT HARDER — by Ghostyjoe™
7 views
Daily Writeups
⤷ Title: Active Directory Basics
════════════════════════
𐀪 Author: ExploitHunter
════════════════════════
ⴵ Time: Wed, 20 May 2026 05:24:44 GMT
════════════════════════
⌗ Tags: #infosec #web_development #cybersecurity #ethical_hacking #cyber_security_awareness
Medium
Active Directory Basics
Introduction
10 views
Daily Writeups
⤷ Title: Evolution of Cloud
════════════════════════
𐀪 Author: ExploitHunter
════════════════════════
ⴵ Time: Wed, 20 May 2026 05:22:23 GMT
════════════════════════
⌗ Tags: #cyber_security_awareness #web_development #cybersecurity #cloud_computing #infosec
Medium
Evolution of Cloud
Cloud Benefits and Characteristics
21 views
Daily Writeups
⤷ Title: [CopyFail and DirtyFrag] — Privilege Escalation on Ubuntu
════════════════════════
𐀪 Author: Bash Overflow
════════════════════════
ⴵ Time: Wed, 20 May 2026 05:14:27 GMT
════════════════════════
⌗ Tags: #penetration_testing #copyfail #ubuntu #linux_priv_esc #dirty_frag
Medium
[CopyFail and DirtyFrag] — Privilege Escalation on Ubuntu
Two kernel exploits. One root shell. No race conditions, no disk traces, no way your file integrity checks will catch it.
34 views
Daily Writeups
⤷ Title: Connecting Burp Suite with GitHub Copilot via MCP Server
════════════════════════
𐀪 Author: Albert
════════════════════════
ⴵ Time: Wed, 20 May 2026 05:02:28 GMT
════════════════════════
⌗ Tags: #penetration_testing #generative_ai_tools #burpsuite #mcp_server #github_copilot
Medium
Connecting Burp Suite with GitHub Copilot via MCP Server
How to bring AI directly into your web vulnerability analysis workflow.
43 views
Daily Writeups
⤷ Title: Shai-Hulud Malware Hits @antv Ecosystem, Poisoning Hundreds of npm Packages
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Wed, 20 May 2026 08:04:06 +0000
════════════════════════
⌗ Tags: #Malware #@antv Malicious Packages #atool Maintainer Account #CI/CD Secret Stealer #Claude Code Backdoor #OIDC Token Hijacking #Session P2P Network #Shai_Hulud npm Attack #Sigstore Provenance Forgery #Software Supply Chain Worm #Visual Studio Code Malware
Penetration Testing Tools
Shai-Hulud Malware Hits @antv Ecosystem, Poisoning Hundreds of npm Packages
The npm ecosystem has been subjected to a massive, highly coordinated supply-chain assault. Within a compressed one-hour envelope,
34 views
Daily Writeups
⤷ Title: Bypassing the Guardrails: New “DirtyDecrypt” Linux Flaw Overwrites Root Files in Memory
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Wed, 20 May 2026 08:02:12 +0000
════════════════════════
⌗ Tags: #Vulnerability #CONFIG_RXGK Kernel Parameter #Container Escape Exploit #Copy_on_Write Bypass #CVE_2026_31635 #Fedora Arch Linux Vulnerable #Linux DirtyDecrypt Vulnerability #Linux Kernel Sasha Levin #RxGK Page Cache Corruption #rxgk_decrypt_skb Local Privilege Escalation #Zellic Threat Research
Penetration Testing Tools
Bypassing the Guardrails: New "DirtyDecrypt" Linux Flaw Overwrites Root Files in Memory
The Linux ecosystem has been destabilized by successive operational waves for several weeks; scarcely had the industry turbulence
21 views
Daily Writeups
⤷ Title: Under the PyInstaller Mask: Point Wild Exposes XWorm V7.4 Stealth Loader and AMSI Bypass
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Wed, 20 May 2026 07:49:06 +0000
════════════════════════
⌗ Tags: #Malware #.NET Reflection Plugins #AES Encrypted C2 Configuration #AMSI Bypass In_Memory Execution #Fileless Remote Administrative Trojan #Hidden System File Attributes #Point Wild Threat Intelligence #PyInstaller Loader Forensic #Runtime Windows API Resolving #Win.Kernel_Svc_AJ8iOw.exe #XWorm V7.4 Malware
Information Security News
Under the PyInstaller Mask: Point Wild Exposes XWorm V7.4 Stealth Loader and AMSI Bypass - Information Security News
Threat intelligence architects at Point Wild have dissectively mapped a contemporary XWorm V7.4 infection pipeline, demonstrating how a seemingly innocuous, Python-based installation package systematically mutates into a formidable remote administrative implant.…
23 views
Daily Writeups
⤷ Title: China-Linked Hackers Deploy “TencShell” Backdoor via Faux Web Font Files
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Wed, 20 May 2026 07:45:33 +0000
════════════════════════
⌗ Tags: #Malware #Cato CTRL Threat Research #Donut Shellcode In_Memory Execution #Fileless Position_Independent Code #Rshell Framework Customization #State_Sponsored Cyber Espionage #Tencent API Impersonation #TencShell Backdoor Malware #Third_Party Identity Compromise #Web Font Masquerading #Windows Registry Persistence
Information Security News
China-Linked Hackers Deploy "TencShell" Backdoor via Faux Web Font Files - Information Security News
In April 2026, threat intelligence specialists at Cato CTRL neutralized a sophisticated network intrusion attempt targeting a major multinational manufacturing enterprise. The adversaries sought to establish a persistent foothold within the corporate perimeter…
19 views
Daily Writeups
⤷ Title: The Zero-Detection Shadow: Unit 42 Exposes Advanced Gremlin Stealer Hijacking Live Browser WebSockets
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Wed, 20 May 2026 07:42:37 +0000
════════════════════════
⌗ Tags: #Malware #.NET Resource Obfuscation #Chromium Identity Theft #Code Virtualization Bytecode #Cookie Protection Bypass #Cryptojacking Clipboard Hijacker #Gremlin Stealer Malware #Unit 42 Palo Alto Networks #WebSocket Session Hijacking #XOR Encoded Payload #Zero Detection C2 Infrastructure
Information Security News
The Zero-Detection Shadow: Unit 42 Exposes Advanced Gremlin Stealer Hijacking Live Browser WebSockets - Information Security News
The exfiltration of administrative credentials and volatile session tokens increasingly manifests not as a rudimentary brute-force incursion, but as a meticulously obfuscated mechanism engineered to maintain absolute silence until the definitive moment of…
11 views
Daily Writeups
⤷ Title: Developer Alert: Poisoned Nx Console VS Code Extension Steals AWS, npm, and GitHub Tokens
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Wed, 20 May 2026 07:37:38 +0000
════════════════════════
⌗ Tags: #Malware #Bun JavaScript Runtime #Dangling Orphan Commit #DNS Tunneling Exfiltration #GitHub Token Theft #Multi_Stage Credential Harvester #Nx Console Extension Compromise #rwl.angular_console #Sigstore Supply Chain Poisoning #StepSecurity Forensic Audit #Visual Studio Code Marketplace
Penetration Testing Tools
Developer Alert: Poisoned Nx Console VS Code Extension Steals AWS, npm, and GitHub Tokens
The highly popular Nx Console extension for Visual Studio Code has been compromised via a weaponized supply-chain injection.
10 views
Daily Writeups
⤷ Title: Net Closed: Interpol’s Operation Ramz Bags 200 Cybercriminals and Smashes 53 Command Servers
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Wed, 20 May 2026 07:35:12 +0000
════════════════════════
⌗ Tags: #Cybercriminals #Command and Control Server Seizure #Cybercrime Arrests 2026 #Human Trafficking Scam Network #Interpol Operation Ramz #Middle East Cyber Crime #Operation Red Card 2.0 #Operation Synergia III #Phishing_as_a_Service Node Dismantled #Private Sector Threat Intelligence #Sovereign Nation Law Enforcement
Information Security News
Net Closed: Interpol's Operation Ramz Bags 200 Cybercriminals and Smashes 53 Command Servers - Information Security News
Interpol has coordinated the apprehension of over 200 individuals implicated in a sophisticated cybercrime matrix operating across the Middle East and North Africa. Designated as Operation Ramz, the multi-jurisdictional law enforcement surge spanned 13...
6 views
Daily Writeups
⤷ Title: Extortion in the Classroom: FBI Warns of ShinyHunters Cyber Attack on National Distance-Learning Platform
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Wed, 20 May 2026 07:30:05 +0000
════════════════════════
⌗ Tags: #Cybercriminals #Academic Ransomware Extortion #Distance Learning Platform Breach #FBI Threat Warning #IC3 Data Leak #Internet Crime Complaint Center #PII Exfiltration Defense #ShinyHunters Cyber Intrusion #Spear_Phishing Campaign Mitigation #Student Data Privacy #Swatting Incursions
Information Security News
Extortion in the Classroom: FBI Warns of ShinyHunters Cyber Attack on National Distance-Learning Platform - Information Security…
The United States Federal Bureau of Investigation (FBI) has issued an official warning regarding the cascading aftermath of a cyber-intrusion orchestrated by the notorious threat syndicate ShinyHunters against a major distance-learning platform utilized by...
8 views