Daily Writeups
@Daily_Writeups
3.49K subscribers
2 photos
128K links
Daily Bug Bounty / Cybersecurity Writeups
Source Code : https://github.com/Spix0r/writeup-miner
Download Telegram
About
Blog
Apps
Platform
Join
Daily Writeups
3.49K subscribers
Daily Writeups
⤷ Title: Shadow Protocol: Kernel Meltdown — Official Room
════════════════════════
𐀪 Author: Youanes safwat
════════════════════════
ⴵ Time: Wed, 27 May 2026 21:51:09 GMT
════════════════════════
⌗ Tags: #tryhackme
Medium
Shadow Protocol: Kernel Meltdown — Official Room
Chaining Prototype Pollution, Privileged Container Breakouts, and Linux Kernel Page-Cache Manipulation to Achieve Full Cloud-Infrastructure…
19 views
Daily Writeups
⤷ Title: TryHackMe Writeup: Umbrella
════════════════════════
𐀪 Author: Berkay AĞGÜL
════════════════════════
ⴵ Time: Wed, 27 May 2026 21:24:53 GMT
════════════════════════
⌗ Tags: #tryhackme_writeup #cybersecurity #tryhackme_walkthrough #cybercrime #tryhackme
19 views
Daily Writeups
⤷ Title: CVE-2025–54123 Hoverfly ≤1.11.3 Command Injection (RCE) Case Study & Patch Diffing
════════════════════════
𐀪 Author: phantom_hat
════════════════════════
ⴵ Time: Wed, 27 May 2026 23:02:16 GMT
════════════════════════
⌗ Tags: #vulnerability_research #command_injection #rce #vulnerability #code_review
Medium
CVE-2025–54123 Hoverfly ≤1.11.3 Command Injection (RCE) Case Study & Patch Diffing
﷽
28 views
Daily Writeups
⤷ Title: New Critical Flaw Discovered in Atril Document Viewer
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Thu, 28 May 2026 00:21:17 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #Atril Document Viewer #CVE_2026_46529 #Linux Security Flaw #MATE Desktop Bug #Remote Code Execution
Daily CyberSecurity
New Critical Flaw Discovered in Atril Document Viewer
Security researchers recently discovered a dangerous security flaw in a popular open-source application. Specifically, developers recently uncovered a severe Atril single-click RCE vulnerability t…
19 views
Daily Writeups
⤷ Title: I Built a Prompt That Turns Any AI Into a Tier-3 SOC Analyst. Here’s How It Works.
════════════════════════
𐀪 Author: SecPrompts
════════════════════════
ⴵ Time: Wed, 27 May 2026 23:25:30 GMT
════════════════════════
⌗ Tags: #infosec #technology #productivity #artificial_intelligence #cybersecurity
Medium
I Built a Prompt That Turns Any AI Into a Tier-3 SOC Analyst. Here’s How It Works.
Your log files are a goldmine for attackers. Most IT teams don’t find out until it’s too late.
18 views
Daily Writeups
⤷ Title: TryHackMe Challenge — Sneaky Patch
════════════════════════
𐀪 Author: seshadri vasudevan
════════════════════════
ⴵ Time: Thu, 28 May 2026 00:39:22 GMT
════════════════════════
⌗ Tags: #tryhackme #tryhackme_writeup #tryhackme_walkthrough
Medium
TryHackMe Challenge — Sneaky Patch
A high-value system has been compromised. Security analysts have detected suspicious activity within the kernel, but the attacker’s…
32 views
Daily Writeups
⤷ Title: CALDERA for Threat Emulation & Blue Team Detection | TryHackMe Walkthrough
════════════════════════
𐀪 Author: Mohamed-Mahmoud
════════════════════════
ⴵ Time: Wed, 27 May 2026 22:56:11 GMT
════════════════════════
⌗ Tags: #tryhackme #security #security_operation_center #cybersecurity #caldera
Medium
CALDERA for Threat Emulation & Blue Team Detection | TryHackMe Walkthrough
Caldera Github : https://github.com/apache/caldera
27 views
Daily Writeups
⤷ Title: Algorithmic Infiltration: Unveiling the SolarWinds Penetration of the United States Treasury
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Thu, 28 May 2026 02:26:14 +0000
════════════════════════
⌗ Tags: #Cybercriminals #administrative account hijacking telemetry #Bloomberg threat intelligence report #federal cyber espionage timeline #Freedom of Information Act lawsuit #government network persistence bounds #Orion platform supply chain attack #secure mail application exploit #SolarWinds Treasury breach report #Treasury Inspector General audit #treasury.gov email exfiltration
Information Security News
SolarWinds Treasury Breach Report Reveals New Mail Exploit
A newly unredacted SolarWinds Treasury breach report reveals how hackers hijacked a top administrative account to compromise the agency's Secure Mail system.
18 views
Daily Writeups
⤷ Title: The Neutralization of Glassworm: A Coordinated Inversion of Multi-Tiered Supply Chain Infrastructure
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Thu, 28 May 2026 02:18:46 +0000
════════════════════════
⌗ Tags: #Malware #BitTorrent DHT malware communication #CrowdStrike GlasswormRAT analysis #developer workstation sinkhole IP #Glassworm botnet takedown #Google Calendar C2 tunneling #npm PyPI postinstall hooks #OpenVSX malicious extensions #software supply chain contamination #Solana blockchain C2 ledger #YARA threat signature rules
Information Security News
Glassworm Botnet Takedown: CrowdStrike Blasts Developer Malware
CrowdStrike, Google, and Shadowserver execute a major Glassworm botnet takedown, dismantling a 4-channel malware network targeting software developers.
23 views
Daily Writeups
⤷ Title: Cryptographic Homogeneity and Supply-Chain Contamination: Deconstructing the CVE-2026-5426 Incursion
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Thu, 28 May 2026 02:06:13 +0000
════════════════════════
⌗ Tags: #Vulnerability #ASP.NET hardcoded machineKey exploit #BLUEBEAM Godzilla web shell #Cobalt Strike BEACON dropper #Digital Knowledge LMS breach #IIS w3wp.exe memory forensics #KnowledgeDeliver CVE_2026_5426 patch #Mandiant threat intelligence telemetry #ViewState deserialization vulnerability #watering hole cyber attack #Windows Event ID 1316 anomaly
Information Security News
KnowledgeDeliver CVE-2026-5426 Patch Fixes Critical RCE
Mandiant warns of CVE-2026-5426: a critical KnowledgeDeliver patch fixing hardcoded ASP.NET machine keys exploited to deploy BLUEBEAM web shells.
15 views
Daily Writeups
⤷ Title: Cryptographic Misalignments: HP Firmware Revisions Trigger BitLocker Recovery Loops
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Thu, 28 May 2026 02:02:27 +0000
════════════════════════
⌗ Tags: #Technology #Windows #BitLocker loop workaround #enterprise fleet device remediation #HP April 2026 BIOS update bug #HP BitLocker recovery loop #HP EliteBook boot freeze #Secure Boot Configuration F10 #UEFI CA 2023 certificate error #UEFICA2023Status registry stuck #Windows 11 Secure Boot servicing #ZBook boot logo crash
Information Security News
HP BitLocker Recovery Loop: How to Fix April 2026 BIOS Bug
Stuck in a rolling HP BitLocker recovery loop? Learn how to configure your BIOS Secure Boot settings to fix the UEFI CA 2023 certificate error.
12 views
Daily Writeups
⤷ Title: Mozilla Deploys Vital Maintenance Patch for Firefox v151 Ecosystem
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Thu, 28 May 2026 01:49:15 +0000
════════════════════════
⌗ Tags: #Technology #Firefox 151.0.2 update #Firefox disk cache full error #iframe select menu portability #input field text selection problem #macOS smart card certificate bug #Mozilla Firefox patch release #Progressive Web Application alphanumeric sorting #Sogou input method crash #Split View tab glitch #WebKit style rule layout fix
Information Security News
Firefox 151.0.2 Update Fixes Sogou Crash & Split View Bugs
Mozilla rolls out the Firefox 151.0.2 update to resolve critical Split View glitches, macOS smart card failures, and a major Windows Sogou crash.
15 views
Daily Writeups
⤷ Title: Veeam Patches Critical Remote Code Execution and Privilege Escalation Flaws
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Thu, 28 May 2026 02:35:55 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #Backup Security #CVE_2026_32996 #CVE_2026_32997 #CVE_2026_32998 #privilege escalation #Remote Code Execution #Veeam
Daily CyberSecurity
Veeam Patches Critical Remote Code Execution and Privilege Escalation Flaws
Learn about the new Veeam security vulnerabilities, including a critical 9.4 RCE flaw in Service Provider Console, and how to patch your systems.
13 views
Daily Writeups
⤷ Title: The Sunset of OpenAI’s Promotional Quotas: A Shift in the ChatGPT Pro Pricing Matrix
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Thu, 28 May 2026 02:28:36 +0000
════════════════════════
⌗ Tags: #Technology #ChatGPT usage allocation reductions #Codex usage caps June 2026 #generative AI cost management #machine learning token allocation #OpenAI API pricing models #OpenAI intermediate tier limits #OpenAI Plus vs Pro tier #OpenAI subscription quota changes #Sam Altman OpenAI developer pricing #technical developer subscription tiers
Daily CyberSecurity
The Sunset of OpenAI's Promotional Quotas: A Shift in the ChatGPT Pro Pricing Matrix
OpenAI subscription quota changes take effect June 2026 as the double-allocation promo ends. Learn how your Codex limits and tier allocations will shift.
18 views
Daily Writeups
⤷ Title: Critical Roundcube Webmail Security Updates Fix Severe Flaws
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Thu, 28 May 2026 02:00:59 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #CVE_2026_48842 #Open Source Mail #Roundcube #security patch #sql injection #webmail #XSS
Daily CyberSecurity
Critical Roundcube Webmail Security Updates Fix Severe Flaws
Roundcube Webmail security updates address critical vulnerabilities, including pre-auth SQL injection and code evaluation flaws. Update your patch now.
16 views
Daily Writeups
⤷ Title: Popular npm Package shell-quote Patches Critical Command Injection Bug
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Thu, 28 May 2026 01:32:55 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #Command Injection #CVE_2026_9277 #Node.js Security #npm Package #Patch Update #shell_quote
Daily CyberSecurity
Popular npm Package shell-quote Patches Critical Command Injection Bug
Maintainers recently patched a critical flaw in a highly popular ecosystem component. Specifically, developers resolved a dangerous shell-quote command injection vulnerability tracking as CVE-2026…
16 views
Daily Writeups
⤷ Title: Host-Root Escape Vulnerability Uncovered in Kata Containers
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Thu, 28 May 2026 01:00:23 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #Cloud Security #container escape #CVE_2026_47243 #Kata Containers #PoC Exploit #virtualization #vulnerability disclosure
Daily CyberSecurity
Host-Root Escape Vulnerability Uncovered in Kata Containers
Explore the critical Kata Containers container escape vulnerability (CVE-2026-47243). Technical details and PoC exploit code are now fully public.
26 views
Daily Writeups
⤷ Title: The FBI Just Flagged a New Phishing Kit That’s Eating Microsoft Accounts for Breakfast
════════════════════════
𐀪 Author: Muneeb
════════════════════════
ⴵ Time: Thu, 28 May 2026 01:07:46 GMT
════════════════════════
⌗ Tags: #fbi #microsoft #coding #technology #hacking
Medium
The FBI Just Flagged a New Phishing Kit That’s Eating Microsoft Accounts for Breakfast
The FBI put out a public warning last week about a phishing kit called Kali365, and if you’re running a business on Microsoft 365, it’s…
18 views
Daily Writeups
⤷ Title: Guided Pentest: Infrastructure Walkthrough | TryHackMe
════════════════════════
𐀪 Author: Akshat Kumar
════════════════════════
ⴵ Time: Thu, 28 May 2026 02:46:00 GMT
════════════════════════
⌗ Tags: #penetration_testing #tryhackme #tryhackme_writeup #tryhackme_walkthrough #red_team
Medium
Guided Pentest: Infrastructure Walkthrough | TryHackMe
Task 1: Introduction
25 views
Daily Writeups
⤷ Title: Hacking with Raspberry Pico: Data Exfiltration with a Captive Portal
════════════════════════
𐀪 Author: Sebastian
════════════════════════
ⴵ Time: Thu, 28 May 2026 04:48:26 GMT
════════════════════════
⌗ Tags: #raspberry_pi #raspberry_pico #hacking
Medium
Hacking with Raspberry Pico: Data Exfiltration with a Captive Portal
Hacking with Raspberry Pico: Data Exfiltration with a Captive Portal The Raspberry Pico microcontroller is a stunning device that can be employed in several application areas, from reading sensor …
42 views
Daily Writeups
⤷ Title: One Person Breached Nine Governments Using Claude and ChatGPT. The Forensic Report Is Public.
════════════════════════
𐀪 Author: Nafisa Nazneen Choudhury
════════════════════════
ⴵ Time: Thu, 28 May 2026 03:36:51 GMT
════════════════════════
⌗ Tags: #hacking #cybersecurity #chatgpt #artificial_intelligence #ai
Medium
One Person Breached Nine Governments Using Claude and ChatGPT. The Forensic Report Is Public.
The Mexico cyberattack rewrites every assumption about how AI-enabled crime scales, and the numbers are sharper than the headlines admit.
36 views