Daily Writeups
@Daily_Writeups
3.55K subscribers
2 photos
130K links
Daily Bug Bounty / Cybersecurity Writeups
Source Code : https://github.com/Spix0r/writeup-miner
Download Telegram
About
Blog
Apps
Platform
Join
Daily Writeups
3.55K subscribers
Daily Writeups
⤷ Title: Under the PyInstaller Mask: Point Wild Exposes XWorm V7.4 Stealth Loader and AMSI Bypass
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Wed, 20 May 2026 07:49:06 +0000
════════════════════════
⌗ Tags: #Malware #.NET Reflection Plugins #AES Encrypted C2 Configuration #AMSI Bypass In_Memory Execution #Fileless Remote Administrative Trojan #Hidden System File Attributes #Point Wild Threat Intelligence #PyInstaller Loader Forensic #Runtime Windows API Resolving #Win.Kernel_Svc_AJ8iOw.exe #XWorm V7.4 Malware
Information Security News
Under the PyInstaller Mask: Point Wild Exposes XWorm V7.4 Stealth Loader and AMSI Bypass - Information Security News
Threat intelligence architects at Point Wild have dissectively mapped a contemporary XWorm V7.4 infection pipeline, demonstrating how a seemingly innocuous, Python-based installation package systematically mutates into a formidable remote administrative implant.…
23 views
Daily Writeups
⤷ Title: China-Linked Hackers Deploy “TencShell” Backdoor via Faux Web Font Files
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Wed, 20 May 2026 07:45:33 +0000
════════════════════════
⌗ Tags: #Malware #Cato CTRL Threat Research #Donut Shellcode In_Memory Execution #Fileless Position_Independent Code #Rshell Framework Customization #State_Sponsored Cyber Espionage #Tencent API Impersonation #TencShell Backdoor Malware #Third_Party Identity Compromise #Web Font Masquerading #Windows Registry Persistence
Information Security News
China-Linked Hackers Deploy "TencShell" Backdoor via Faux Web Font Files - Information Security News
In April 2026, threat intelligence specialists at Cato CTRL neutralized a sophisticated network intrusion attempt targeting a major multinational manufacturing enterprise. The adversaries sought to establish a persistent foothold within the corporate perimeter…
19 views
Daily Writeups
⤷ Title: The Zero-Detection Shadow: Unit 42 Exposes Advanced Gremlin Stealer Hijacking Live Browser WebSockets
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Wed, 20 May 2026 07:42:37 +0000
════════════════════════
⌗ Tags: #Malware #.NET Resource Obfuscation #Chromium Identity Theft #Code Virtualization Bytecode #Cookie Protection Bypass #Cryptojacking Clipboard Hijacker #Gremlin Stealer Malware #Unit 42 Palo Alto Networks #WebSocket Session Hijacking #XOR Encoded Payload #Zero Detection C2 Infrastructure
Information Security News
The Zero-Detection Shadow: Unit 42 Exposes Advanced Gremlin Stealer Hijacking Live Browser WebSockets - Information Security News
The exfiltration of administrative credentials and volatile session tokens increasingly manifests not as a rudimentary brute-force incursion, but as a meticulously obfuscated mechanism engineered to maintain absolute silence until the definitive moment of…
11 views
Daily Writeups
⤷ Title: Developer Alert: Poisoned Nx Console VS Code Extension Steals AWS, npm, and GitHub Tokens
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Wed, 20 May 2026 07:37:38 +0000
════════════════════════
⌗ Tags: #Malware #Bun JavaScript Runtime #Dangling Orphan Commit #DNS Tunneling Exfiltration #GitHub Token Theft #Multi_Stage Credential Harvester #Nx Console Extension Compromise #rwl.angular_console #Sigstore Supply Chain Poisoning #StepSecurity Forensic Audit #Visual Studio Code Marketplace
Penetration Testing Tools
Developer Alert: Poisoned Nx Console VS Code Extension Steals AWS, npm, and GitHub Tokens
The highly popular Nx Console extension for Visual Studio Code has been compromised via a weaponized supply-chain injection.
10 views
Daily Writeups
⤷ Title: Net Closed: Interpol’s Operation Ramz Bags 200 Cybercriminals and Smashes 53 Command Servers
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Wed, 20 May 2026 07:35:12 +0000
════════════════════════
⌗ Tags: #Cybercriminals #Command and Control Server Seizure #Cybercrime Arrests 2026 #Human Trafficking Scam Network #Interpol Operation Ramz #Middle East Cyber Crime #Operation Red Card 2.0 #Operation Synergia III #Phishing_as_a_Service Node Dismantled #Private Sector Threat Intelligence #Sovereign Nation Law Enforcement
Information Security News
Net Closed: Interpol's Operation Ramz Bags 200 Cybercriminals and Smashes 53 Command Servers - Information Security News
Interpol has coordinated the apprehension of over 200 individuals implicated in a sophisticated cybercrime matrix operating across the Middle East and North Africa. Designated as Operation Ramz, the multi-jurisdictional law enforcement surge spanned 13...
6 views
Daily Writeups
⤷ Title: Extortion in the Classroom: FBI Warns of ShinyHunters Cyber Attack on National Distance-Learning Platform
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Wed, 20 May 2026 07:30:05 +0000
════════════════════════
⌗ Tags: #Cybercriminals #Academic Ransomware Extortion #Distance Learning Platform Breach #FBI Threat Warning #IC3 Data Leak #Internet Crime Complaint Center #PII Exfiltration Defense #ShinyHunters Cyber Intrusion #Spear_Phishing Campaign Mitigation #Student Data Privacy #Swatting Incursions
Information Security News
Extortion in the Classroom: FBI Warns of ShinyHunters Cyber Attack on National Distance-Learning Platform - Information Security…
The United States Federal Bureau of Investigation (FBI) has issued an official warning regarding the cascading aftermath of a cyber-intrusion orchestrated by the notorious threat syndicate ShinyHunters against a major distance-learning platform utilized by...
8 views
Daily Writeups
⤷ Title: The Script Editor Trap: New macOS “Reaper” Malware Bypasses Terminal Defenses to Steal Keychains
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Wed, 20 May 2026 07:22:37 +0000
════════════════════════
⌗ Tags: #Malware #applescript URI Scheme #Gatekeeper xattr Evasion #Keychain Exfiltration #LaunchAgent Persistence #macOS Reaper Malware #macOS Tahoe Security Bypass #Remote Access Trojan #Script Editor Exploit #SentinelOne Threat Intel #SHub Infostealer
Information Security News
The Script Editor Trap: New macOS "Reaper" Malware Bypasses Terminal Defenses to Steal Keychains - Information Security News
A novel exploitation technique has surfaced on macOS, designed to deceive users via a counterfeit “security update.” The malicious payload, designated as Reaper—an advanced iteration of the SHub information stealer—no longer relies on social...
14 views
Daily Writeups
⤷ Title: Inside UNC6671’s “BlackFile” Cloud Extortion Campaigns
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Wed, 20 May 2026 08:56:06 +0000
════════════════════════
⌗ Tags: #Cybercriminals #adversary_in_the_middle #AiTM Proxy #BlackFile #Cloud Security #Google Threat Intelligence #infosec #MFA Bypass #Microsoft 365 Security #Okta Compromise #UNC6671 #Vishing Campaign
Daily CyberSecurity
Inside UNC6671’s “BlackFile” Cloud Extortion Campaigns
A sophisticated identity-centric threat actor operating under the brand “BlackFile” has spent the early months of 2026 disrupting corporate cloud environments across the globe. A detai…
14 views
Daily Writeups
⤷ Title: Google Drops Antigravity 2.0 to Orchestrate Teams of Autonomous Coding Agents
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Wed, 20 May 2026 08:53:02 +0000
════════════════════════
⌗ Tags: #Technology #Antigravity CLI #Antigravity SDK #Autonomous AI Agents #Bare_Metal OS Generation #Code Bender Security #Enterprise Software Automation #Gemini 3.5 Flash #Google Antigravity 2.0 #Sub_agent Teamwork #Vibe Coding
Daily CyberSecurity
Google Drops Antigravity 2.0 to Orchestrate Teams of Autonomous Coding Agents
At the Google I/O 2026 developer symposium, the technology exposition that elicited the most profound excitement among software engineers was undoubtedly the monumental unveiling of Antigravity 2.…
25 views
Daily Writeups
⤷ Title: Zero-Trust Voice: Discord Finalizes Mandatory “DAVE” Encryption for All Audio and Video Streams
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Wed, 20 May 2026 07:49:06 +0000
════════════════════════
⌗ Tags: #Technology #Automated Content Moderation #Client Update Requirements #Discord DAVE Protocol #End_to_End Encryption #Messaging Layer Security #Multi_Party Cryptographic Handshake #Selective Forwarding Unit #Trail of Bits Audit #User Data Sovereignty #WebRTC Encoded Transform
Daily CyberSecurity
Zero-Trust Voice: Discord Finalizes Mandatory “DAVE” Encryption for All Audio and Video Streams
Discord, the widely celebrated communications architecture tailored for the global gaming constituency, has announced the universal initialization of mandatory end-to-end encryption (E2EE) across …
13 views
Daily Writeups
⤷ Title: Velvet Chollima Leaves Backend Keys Inside Critical GitLab Dead-Drop Malware
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Wed, 20 May 2026 07:16:41 +0000
════════════════════════
⌗ Tags: #Malware #Cryptocurrency Theft #cyber_espionage #EV Code Signing #GitLab Dead_Drop #infosec #Keylogger #Malware Analysis #OPSEC Failure #threat intelligence #Tralert FX #Velvet Chollima
Daily CyberSecurity
Velvet Chollima Leaves Backend Keys Inside Critical GitLab Dead-Drop Malware
A routine investigation into a low-detection installer has blown the doors off a highly organized, financially motivated cyber-espionage campaign. Orchestrated by a single operator or small team l…
20 views
Daily Writeups
⤷ Title: Bypassing the Frontend Obfuscation: How I Uncovered a Company’s Entire Internal Architecture…
════════════════════════
𐀪 Author: Priyansh
════════════════════════
ⴵ Time: Wed, 20 May 2026 08:05:00 GMT
════════════════════════
⌗ Tags: #bug_bounty #bug_bounty_writeup #bug_bounty_tips #bugs #hacking
Medium
Bypassing the Frontend Obfuscation: How I Uncovered a Company’s Entire Internal Architecture…
As bug bounty hunters, we are trained to find the chink in the armor. But what happens when the target has no visible cracks?
20 views
Daily Writeups
⤷ Title: Android API Security Testing: Where the Real Bounties Live in 2025
════════════════════════
𐀪 Author: Akifkhan
════════════════════════
ⴵ Time: Wed, 20 May 2026 07:26:57 GMT
════════════════════════
⌗ Tags: #penetration_testing #cybersecurity #android #bug_bounty #ctf
Medium
Android API Security Testing: Where the Real Bounties Live in 2025
Tags: android-security api-security mobile-pentesting bug-bounty burp-suite idor broken-authentication ethical-hacking cybersecurity…
19 views
Daily Writeups
⤷ Title: Your SDK Dependencies May Be Parsing Untrusted XML Without Protection
════════════════════════
𐀪 Author: Eldor Zufarov
════════════════════════
ⴵ Time: Wed, 20 May 2026 07:47:22 GMT
════════════════════════
⌗ Tags: #devsecops #saas_security #cybersecurity #application_security #python
Medium
Your SDK Dependencies May Be Parsing Untrusted XML Without Protection
Your SDK dependencies may be parsing untrusted XML without protection — and you wouldn’t know until an incident.
12 views
Daily Writeups
⤷ Title: The AI That Found a 27-Year-Old Security Vulnerability — And What It Means for All of Us
════════════════════════
𐀪 Author: BARRON VAN DEN BERG
════════════════════════
ⴵ Time: Wed, 20 May 2026 08:36:41 GMT
════════════════════════
⌗ Tags: #hacking #information_security #technology #cybersecurity #artificial_intelligence
Medium
The AI That Found a 27-Year-Old Security Vulnerability — And What It Means for All of Us
Anthropic’s Claude Mythos just changed cybersecurity forever. Here’s the full story.
15 views
Daily Writeups
⤷ Title: A HACKER GROUP JUST STOLE 4,000 OF GITHUB’S OWN PRIVATE REPOSITORIES..
════════════════════════
𐀪 Author: Abe Toluwani
════════════════════════
ⴵ Time: Wed, 20 May 2026 08:12:23 GMT
════════════════════════
⌗ Tags: #hacking #github #security_breach #cyberattack #data_breach
Medium
A HACKER GROUP JUST STOLE 4,000 OF GITHUB’S OWN PRIVATE REPOSITORIES..
Earlier today GitHub announced that were investigating unauthorized access to GitHub’s internal repositories and claims that no customer…
13 views
Daily Writeups
⤷ Title: The $11.5M Forged Transfer in the Verus-Ethereum Bridge Hack
════════════════════════
𐀪 Author: Alice Hsu
════════════════════════
ⴵ Time: Wed, 20 May 2026 07:56:01 GMT
════════════════════════
⌗ Tags: #hacking #blockchain #vulnerability #defi
Medium
The $11.5M Forged Transfer in the Verus-Ethereum Bridge Hack
Incident Overview
9 views
Daily Writeups
⤷ Title: Malware types
════════════════════════
𐀪 Author: Mahdi
════════════════════════
ⴵ Time: Wed, 20 May 2026 07:35:24 GMT
════════════════════════
⌗ Tags: #cybersecurity #programming #malware #hacking #infosec
Medium
Malware types
Have you ever heard about WannaCry, Lockbit, ILOVEYOU, and Stuxnet? These are some of the most well-known malware (malicious software) in…
7 views
Daily Writeups
⤷ Title: Beyond the Sandbox: Why 2026’s Zero-Day Threat Landscape Demands a Next-Generation Cybersecurity…
════════════════════════
𐀪 Author: Varun Papnai
════════════════════════
ⴵ Time: Wed, 20 May 2026 06:55:49 GMT
════════════════════════
⌗ Tags: #cybersecurity #hacking #ethical_hacking
Medium
Beyond the Sandbox: Why 2026’s Zero-Day Threat Landscape Demands a Next-Generation Cybersecurity…
The playbook for architectural defense and corporate penetration testing has been completely rewritten. We have entered an era dominated by…
8 views
Daily Writeups
⤷ Title: OverTheWire Bandit Walkthrough — Level 8 → 9 | 30-Day Cybersecurity Learning Journey (Day 9)
════════════════════════
𐀪 Author: William | Cybersecurity & SOC Analyst
════════════════════════
ⴵ Time: Wed, 20 May 2026 07:51:58 GMT
════════════════════════
⌗ Tags: #data_security #security #cybersecurity #linux #infosec
Medium
OverTheWire Bandit Walkthrough — Level 8 → 9 | 30-Day Cybersecurity Learning Journey (Day 9)
OverTheWire Bandit Walkthrough — Level 8 → 9 | 30-Day Cybersecurity Learning Journey (Day 9) Using sort and uniq to isolate a single unique line from thousands of duplicates and why …
12 views
Daily Writeups
⤷ Title: Shivam Shukla: Cyber Crime Officer Promoting Digital Safety in India
════════════════════════
𐀪 Author: Shivam Shukla
════════════════════════
ⴵ Time: Wed, 20 May 2026 08:01:15 GMT
════════════════════════
⌗ Tags: #cybercrime_investigation #ai #ethical_hacking #digital_forensics #cyber_security_awareness
Medium
Shivam Shukla: Cyber Crime Officer Promoting Digital Safety in India
In the modern digital era, cybercrime has become one of the fastest-growing threats worldwide. From online fraud and cyberbullying to…
18 views