Daily Writeups
@Daily_Writeups
3.56K subscribers
2 photos
130K links
Daily Bug Bounty / Cybersecurity Writeups
Source Code : https://github.com/Spix0r/writeup-miner
Download Telegram
About
Blog
Apps
Platform
Join
Daily Writeups
3.56K subscribers
Daily Writeups
⤷ Title: CALDERA for Threat Emulation & Blue Team Detection | TryHackMe Walkthrough
════════════════════════
𐀪 Author: Mohamed-Mahmoud
════════════════════════
ⴵ Time: Wed, 27 May 2026 22:56:11 GMT
════════════════════════
⌗ Tags: #tryhackme #security #security_operation_center #cybersecurity #caldera
Medium
CALDERA for Threat Emulation & Blue Team Detection | TryHackMe Walkthrough
Caldera Github : https://github.com/apache/caldera
28 views
Daily Writeups
⤷ Title: Algorithmic Infiltration: Unveiling the SolarWinds Penetration of the United States Treasury
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Thu, 28 May 2026 02:26:14 +0000
════════════════════════
⌗ Tags: #Cybercriminals #administrative account hijacking telemetry #Bloomberg threat intelligence report #federal cyber espionage timeline #Freedom of Information Act lawsuit #government network persistence bounds #Orion platform supply chain attack #secure mail application exploit #SolarWinds Treasury breach report #Treasury Inspector General audit #treasury.gov email exfiltration
Information Security News
SolarWinds Treasury Breach Report Reveals New Mail Exploit
A newly unredacted SolarWinds Treasury breach report reveals how hackers hijacked a top administrative account to compromise the agency's Secure Mail system.
18 views
Daily Writeups
⤷ Title: The Neutralization of Glassworm: A Coordinated Inversion of Multi-Tiered Supply Chain Infrastructure
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Thu, 28 May 2026 02:18:46 +0000
════════════════════════
⌗ Tags: #Malware #BitTorrent DHT malware communication #CrowdStrike GlasswormRAT analysis #developer workstation sinkhole IP #Glassworm botnet takedown #Google Calendar C2 tunneling #npm PyPI postinstall hooks #OpenVSX malicious extensions #software supply chain contamination #Solana blockchain C2 ledger #YARA threat signature rules
Information Security News
Glassworm Botnet Takedown: CrowdStrike Blasts Developer Malware
CrowdStrike, Google, and Shadowserver execute a major Glassworm botnet takedown, dismantling a 4-channel malware network targeting software developers.
23 views
Daily Writeups
⤷ Title: Cryptographic Homogeneity and Supply-Chain Contamination: Deconstructing the CVE-2026-5426 Incursion
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Thu, 28 May 2026 02:06:13 +0000
════════════════════════
⌗ Tags: #Vulnerability #ASP.NET hardcoded machineKey exploit #BLUEBEAM Godzilla web shell #Cobalt Strike BEACON dropper #Digital Knowledge LMS breach #IIS w3wp.exe memory forensics #KnowledgeDeliver CVE_2026_5426 patch #Mandiant threat intelligence telemetry #ViewState deserialization vulnerability #watering hole cyber attack #Windows Event ID 1316 anomaly
Information Security News
KnowledgeDeliver CVE-2026-5426 Patch Fixes Critical RCE
Mandiant warns of CVE-2026-5426: a critical KnowledgeDeliver patch fixing hardcoded ASP.NET machine keys exploited to deploy BLUEBEAM web shells.
15 views
Daily Writeups
⤷ Title: Cryptographic Misalignments: HP Firmware Revisions Trigger BitLocker Recovery Loops
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Thu, 28 May 2026 02:02:27 +0000
════════════════════════
⌗ Tags: #Technology #Windows #BitLocker loop workaround #enterprise fleet device remediation #HP April 2026 BIOS update bug #HP BitLocker recovery loop #HP EliteBook boot freeze #Secure Boot Configuration F10 #UEFI CA 2023 certificate error #UEFICA2023Status registry stuck #Windows 11 Secure Boot servicing #ZBook boot logo crash
Information Security News
HP BitLocker Recovery Loop: How to Fix April 2026 BIOS Bug
Stuck in a rolling HP BitLocker recovery loop? Learn how to configure your BIOS Secure Boot settings to fix the UEFI CA 2023 certificate error.
12 views
Daily Writeups
⤷ Title: Mozilla Deploys Vital Maintenance Patch for Firefox v151 Ecosystem
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Thu, 28 May 2026 01:49:15 +0000
════════════════════════
⌗ Tags: #Technology #Firefox 151.0.2 update #Firefox disk cache full error #iframe select menu portability #input field text selection problem #macOS smart card certificate bug #Mozilla Firefox patch release #Progressive Web Application alphanumeric sorting #Sogou input method crash #Split View tab glitch #WebKit style rule layout fix
Information Security News
Firefox 151.0.2 Update Fixes Sogou Crash & Split View Bugs
Mozilla rolls out the Firefox 151.0.2 update to resolve critical Split View glitches, macOS smart card failures, and a major Windows Sogou crash.
15 views
Daily Writeups
⤷ Title: Veeam Patches Critical Remote Code Execution and Privilege Escalation Flaws
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Thu, 28 May 2026 02:35:55 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #Backup Security #CVE_2026_32996 #CVE_2026_32997 #CVE_2026_32998 #privilege escalation #Remote Code Execution #Veeam
Daily CyberSecurity
Veeam Patches Critical Remote Code Execution and Privilege Escalation Flaws
Learn about the new Veeam security vulnerabilities, including a critical 9.4 RCE flaw in Service Provider Console, and how to patch your systems.
13 views
Daily Writeups
⤷ Title: The Sunset of OpenAI’s Promotional Quotas: A Shift in the ChatGPT Pro Pricing Matrix
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Thu, 28 May 2026 02:28:36 +0000
════════════════════════
⌗ Tags: #Technology #ChatGPT usage allocation reductions #Codex usage caps June 2026 #generative AI cost management #machine learning token allocation #OpenAI API pricing models #OpenAI intermediate tier limits #OpenAI Plus vs Pro tier #OpenAI subscription quota changes #Sam Altman OpenAI developer pricing #technical developer subscription tiers
Daily CyberSecurity
The Sunset of OpenAI's Promotional Quotas: A Shift in the ChatGPT Pro Pricing Matrix
OpenAI subscription quota changes take effect June 2026 as the double-allocation promo ends. Learn how your Codex limits and tier allocations will shift.
18 views
Daily Writeups
⤷ Title: Critical Roundcube Webmail Security Updates Fix Severe Flaws
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Thu, 28 May 2026 02:00:59 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #CVE_2026_48842 #Open Source Mail #Roundcube #security patch #sql injection #webmail #XSS
Daily CyberSecurity
Critical Roundcube Webmail Security Updates Fix Severe Flaws
Roundcube Webmail security updates address critical vulnerabilities, including pre-auth SQL injection and code evaluation flaws. Update your patch now.
16 views
Daily Writeups
⤷ Title: Popular npm Package shell-quote Patches Critical Command Injection Bug
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Thu, 28 May 2026 01:32:55 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #Command Injection #CVE_2026_9277 #Node.js Security #npm Package #Patch Update #shell_quote
Daily CyberSecurity
Popular npm Package shell-quote Patches Critical Command Injection Bug
Maintainers recently patched a critical flaw in a highly popular ecosystem component. Specifically, developers resolved a dangerous shell-quote command injection vulnerability tracking as CVE-2026…
16 views
Daily Writeups
⤷ Title: Host-Root Escape Vulnerability Uncovered in Kata Containers
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Thu, 28 May 2026 01:00:23 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #Cloud Security #container escape #CVE_2026_47243 #Kata Containers #PoC Exploit #virtualization #vulnerability disclosure
Daily CyberSecurity
Host-Root Escape Vulnerability Uncovered in Kata Containers
Explore the critical Kata Containers container escape vulnerability (CVE-2026-47243). Technical details and PoC exploit code are now fully public.
26 views
Daily Writeups
⤷ Title: The FBI Just Flagged a New Phishing Kit That’s Eating Microsoft Accounts for Breakfast
════════════════════════
𐀪 Author: Muneeb
════════════════════════
ⴵ Time: Thu, 28 May 2026 01:07:46 GMT
════════════════════════
⌗ Tags: #fbi #microsoft #coding #technology #hacking
Medium
The FBI Just Flagged a New Phishing Kit That’s Eating Microsoft Accounts for Breakfast
The FBI put out a public warning last week about a phishing kit called Kali365, and if you’re running a business on Microsoft 365, it’s…
18 views
Daily Writeups
⤷ Title: Guided Pentest: Infrastructure Walkthrough | TryHackMe
════════════════════════
𐀪 Author: Akshat Kumar
════════════════════════
ⴵ Time: Thu, 28 May 2026 02:46:00 GMT
════════════════════════
⌗ Tags: #penetration_testing #tryhackme #tryhackme_writeup #tryhackme_walkthrough #red_team
Medium
Guided Pentest: Infrastructure Walkthrough | TryHackMe
Task 1: Introduction
25 views
Daily Writeups
⤷ Title: Hacking with Raspberry Pico: Data Exfiltration with a Captive Portal
════════════════════════
𐀪 Author: Sebastian
════════════════════════
ⴵ Time: Thu, 28 May 2026 04:48:26 GMT
════════════════════════
⌗ Tags: #raspberry_pi #raspberry_pico #hacking
Medium
Hacking with Raspberry Pico: Data Exfiltration with a Captive Portal
Hacking with Raspberry Pico: Data Exfiltration with a Captive Portal The Raspberry Pico microcontroller is a stunning device that can be employed in several application areas, from reading sensor …
42 views
Daily Writeups
⤷ Title: One Person Breached Nine Governments Using Claude and ChatGPT. The Forensic Report Is Public.
════════════════════════
𐀪 Author: Nafisa Nazneen Choudhury
════════════════════════
ⴵ Time: Thu, 28 May 2026 03:36:51 GMT
════════════════════════
⌗ Tags: #hacking #cybersecurity #chatgpt #artificial_intelligence #ai
Medium
One Person Breached Nine Governments Using Claude and ChatGPT. The Forensic Report Is Public.
The Mexico cyberattack rewrites every assumption about how AI-enabled crime scales, and the numbers are sharper than the headlines admit.
36 views
Daily Writeups
⤷ Title: TakeOver Room on TryHackMe Review
════════════════════════
𐀪 Author: Jarred Stoll
════════════════════════
ⴵ Time: Thu, 28 May 2026 03:29:10 GMT
════════════════════════
⌗ Tags: #tryhackme #tryhackme_writeup #hacking
Medium
TakeOver Room on TryHackMe Review
Just a quick overview of what this will cover. This will go over what I did to complete the TakeOver room on the TryHackMe platform. The…
24 views
Daily Writeups
⤷ Title: Understanding Network Attacks Through the OSI Model — Part 2: Visualizing Attack Kill Chain &…
════════════════════════
𐀪 Author: LeiFeng
════════════════════════
ⴵ Time: Wed, 27 May 2026 07:58:13 GMT
════════════════════════
⌗ Tags: #network_security #infosec #osi_model #cybersecurity
Medium
Understanding Network Attacks Through the OSI Model — Part 2: Visualizing Attack Kill Chain & Defense Configuration Guide
中文版
23 views
Daily Writeups
⤷ Title: ReportVerse (Medium) — SSRF via PDF Renderer | Webverse Labs Writeup
════════════════════════
𐀪 Author: Razzle Mouse
════════════════════════
ⴵ Time: Thu, 28 May 2026 03:30:32 GMT
════════════════════════
⌗ Tags: #ssrf
Medium
ReportVerse (Medium) — SSRF via PDF Renderer | Webverse Labs Writeup
Platform: Webverse Labs
37 views
Daily Writeups
⤷ Title: The One GraphQL Query That Finds IDORs in Seconds (And Why Most Hunters Skip It)
════════════════════════
𐀪 Author: Decline
════════════════════════
ⴵ Time: Thu, 28 May 2026 04:58:44 GMT
════════════════════════
⌗ Tags: #bug_hunting #bug_bounty_writeup #bug_bounty_tips #bugbounty_writeup #bug_bounty
Medium
The One GraphQL Query That Finds IDORs in Seconds (And Why Most Hunters Skip It)
Everyone checks for introspection. Nobody checks this.
61 views
Daily Writeups
⤷ Title: New CypherLoc Scareware Kit Implements Sophisticated Browser Locks
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Thu, 28 May 2026 06:04:05 +0000
════════════════════════
⌗ Tags: #Cybercriminals #Barracuda Research #Browser Lock #CypherLoc #infosec #Phishing Campaign #Scareware #Tech Support Scam
Daily CyberSecurity
New CypherLoc Scareware Kit Implements Sophisticated Browser Locks
Barracuda Research warns of the CypherLoc scareware kit. Learn how this browser-locking threat uses psychological manipulation to scam users.
41 views
Daily Writeups
⤷ Title: Emerging Deprecation Protocols Within the Codex Model Ecosystem
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Thu, 28 May 2026 04:38:05 +0000
════════════════════════
⌗ Tags: #Technology #AI code generation regressions #API enterprise model lifecycle #ChatGPT premium model configurations #custom engineering development pipelines #free tier GPT_5.5 default #GPT_5.3_Codex retired ChatGPT #GPT_5.5 model degradation latency #OpenAI Codex Spark architecture #OpenAI June 2 deprecation #OpenAI legacy model deprecation
Daily CyberSecurity
Emerging Deprecation Protocols Within the Codex Model Ecosystem
OpenAI confirms an upcoming legacy model deprecation on June 2, retiring GPT-5.2 and GPT-5.3-Codex from ChatGPT while forcing a shift to GPT-5.5.
35 views