Daily Writeups
@Daily_Writeups
3.55K subscribers
2 photos
130K links
Daily Bug Bounty / Cybersecurity Writeups
Source Code : https://github.com/Spix0r/writeup-miner
Download Telegram
About
Blog
Apps
Platform
Join
Daily Writeups
3.55K subscribers
Daily Writeups
⤷ Title: The Sunset of OpenAI’s Promotional Quotas: A Shift in the ChatGPT Pro Pricing Matrix
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Thu, 28 May 2026 02:28:36 +0000
════════════════════════
⌗ Tags: #Technology #ChatGPT usage allocation reductions #Codex usage caps June 2026 #generative AI cost management #machine learning token allocation #OpenAI API pricing models #OpenAI intermediate tier limits #OpenAI Plus vs Pro tier #OpenAI subscription quota changes #Sam Altman OpenAI developer pricing #technical developer subscription tiers
Daily CyberSecurity
The Sunset of OpenAI's Promotional Quotas: A Shift in the ChatGPT Pro Pricing Matrix
OpenAI subscription quota changes take effect June 2026 as the double-allocation promo ends. Learn how your Codex limits and tier allocations will shift.
18 views
Daily Writeups
⤷ Title: Critical Roundcube Webmail Security Updates Fix Severe Flaws
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Thu, 28 May 2026 02:00:59 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #CVE_2026_48842 #Open Source Mail #Roundcube #security patch #sql injection #webmail #XSS
Daily CyberSecurity
Critical Roundcube Webmail Security Updates Fix Severe Flaws
Roundcube Webmail security updates address critical vulnerabilities, including pre-auth SQL injection and code evaluation flaws. Update your patch now.
16 views
Daily Writeups
⤷ Title: Popular npm Package shell-quote Patches Critical Command Injection Bug
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Thu, 28 May 2026 01:32:55 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #Command Injection #CVE_2026_9277 #Node.js Security #npm Package #Patch Update #shell_quote
Daily CyberSecurity
Popular npm Package shell-quote Patches Critical Command Injection Bug
Maintainers recently patched a critical flaw in a highly popular ecosystem component. Specifically, developers resolved a dangerous shell-quote command injection vulnerability tracking as CVE-2026…
16 views
Daily Writeups
⤷ Title: Host-Root Escape Vulnerability Uncovered in Kata Containers
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Thu, 28 May 2026 01:00:23 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #Cloud Security #container escape #CVE_2026_47243 #Kata Containers #PoC Exploit #virtualization #vulnerability disclosure
Daily CyberSecurity
Host-Root Escape Vulnerability Uncovered in Kata Containers
Explore the critical Kata Containers container escape vulnerability (CVE-2026-47243). Technical details and PoC exploit code are now fully public.
26 views
Daily Writeups
⤷ Title: The FBI Just Flagged a New Phishing Kit That’s Eating Microsoft Accounts for Breakfast
════════════════════════
𐀪 Author: Muneeb
════════════════════════
ⴵ Time: Thu, 28 May 2026 01:07:46 GMT
════════════════════════
⌗ Tags: #fbi #microsoft #coding #technology #hacking
Medium
The FBI Just Flagged a New Phishing Kit That’s Eating Microsoft Accounts for Breakfast
The FBI put out a public warning last week about a phishing kit called Kali365, and if you’re running a business on Microsoft 365, it’s…
18 views
Daily Writeups
⤷ Title: Guided Pentest: Infrastructure Walkthrough | TryHackMe
════════════════════════
𐀪 Author: Akshat Kumar
════════════════════════
ⴵ Time: Thu, 28 May 2026 02:46:00 GMT
════════════════════════
⌗ Tags: #penetration_testing #tryhackme #tryhackme_writeup #tryhackme_walkthrough #red_team
Medium
Guided Pentest: Infrastructure Walkthrough | TryHackMe
Task 1: Introduction
25 views
Daily Writeups
⤷ Title: Hacking with Raspberry Pico: Data Exfiltration with a Captive Portal
════════════════════════
𐀪 Author: Sebastian
════════════════════════
ⴵ Time: Thu, 28 May 2026 04:48:26 GMT
════════════════════════
⌗ Tags: #raspberry_pi #raspberry_pico #hacking
Medium
Hacking with Raspberry Pico: Data Exfiltration with a Captive Portal
Hacking with Raspberry Pico: Data Exfiltration with a Captive Portal The Raspberry Pico microcontroller is a stunning device that can be employed in several application areas, from reading sensor …
42 views
Daily Writeups
⤷ Title: One Person Breached Nine Governments Using Claude and ChatGPT. The Forensic Report Is Public.
════════════════════════
𐀪 Author: Nafisa Nazneen Choudhury
════════════════════════
ⴵ Time: Thu, 28 May 2026 03:36:51 GMT
════════════════════════
⌗ Tags: #hacking #cybersecurity #chatgpt #artificial_intelligence #ai
Medium
One Person Breached Nine Governments Using Claude and ChatGPT. The Forensic Report Is Public.
The Mexico cyberattack rewrites every assumption about how AI-enabled crime scales, and the numbers are sharper than the headlines admit.
36 views
Daily Writeups
⤷ Title: TakeOver Room on TryHackMe Review
════════════════════════
𐀪 Author: Jarred Stoll
════════════════════════
ⴵ Time: Thu, 28 May 2026 03:29:10 GMT
════════════════════════
⌗ Tags: #tryhackme #tryhackme_writeup #hacking
Medium
TakeOver Room on TryHackMe Review
Just a quick overview of what this will cover. This will go over what I did to complete the TakeOver room on the TryHackMe platform. The…
24 views
Daily Writeups
⤷ Title: Understanding Network Attacks Through the OSI Model — Part 2: Visualizing Attack Kill Chain &…
════════════════════════
𐀪 Author: LeiFeng
════════════════════════
ⴵ Time: Wed, 27 May 2026 07:58:13 GMT
════════════════════════
⌗ Tags: #network_security #infosec #osi_model #cybersecurity
Medium
Understanding Network Attacks Through the OSI Model — Part 2: Visualizing Attack Kill Chain & Defense Configuration Guide
中文版
23 views
Daily Writeups
⤷ Title: ReportVerse (Medium) — SSRF via PDF Renderer | Webverse Labs Writeup
════════════════════════
𐀪 Author: Razzle Mouse
════════════════════════
ⴵ Time: Thu, 28 May 2026 03:30:32 GMT
════════════════════════
⌗ Tags: #ssrf
Medium
ReportVerse (Medium) — SSRF via PDF Renderer | Webverse Labs Writeup
Platform: Webverse Labs
37 views
Daily Writeups
⤷ Title: The One GraphQL Query That Finds IDORs in Seconds (And Why Most Hunters Skip It)
════════════════════════
𐀪 Author: Decline
════════════════════════
ⴵ Time: Thu, 28 May 2026 04:58:44 GMT
════════════════════════
⌗ Tags: #bug_hunting #bug_bounty_writeup #bug_bounty_tips #bugbounty_writeup #bug_bounty
Medium
The One GraphQL Query That Finds IDORs in Seconds (And Why Most Hunters Skip It)
Everyone checks for introspection. Nobody checks this.
61 views
Daily Writeups
⤷ Title: New CypherLoc Scareware Kit Implements Sophisticated Browser Locks
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Thu, 28 May 2026 06:04:05 +0000
════════════════════════
⌗ Tags: #Cybercriminals #Barracuda Research #Browser Lock #CypherLoc #infosec #Phishing Campaign #Scareware #Tech Support Scam
Daily CyberSecurity
New CypherLoc Scareware Kit Implements Sophisticated Browser Locks
Barracuda Research warns of the CypherLoc scareware kit. Learn how this browser-locking threat uses psychological manipulation to scam users.
40 views
Daily Writeups
⤷ Title: Emerging Deprecation Protocols Within the Codex Model Ecosystem
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Thu, 28 May 2026 04:38:05 +0000
════════════════════════
⌗ Tags: #Technology #AI code generation regressions #API enterprise model lifecycle #ChatGPT premium model configurations #custom engineering development pipelines #free tier GPT_5.5 default #GPT_5.3_Codex retired ChatGPT #GPT_5.5 model degradation latency #OpenAI Codex Spark architecture #OpenAI June 2 deprecation #OpenAI legacy model deprecation
Daily CyberSecurity
Emerging Deprecation Protocols Within the Codex Model Ecosystem
OpenAI confirms an upcoming legacy model deprecation on June 2, retiring GPT-5.2 and GPT-5.3-Codex from ChatGPT while forcing a shift to GPT-5.5.
35 views
Daily Writeups
⤷ Title: Critical FortiClient EMS Exploitation Campaign Spreads New EKZ Infostealer Payload
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Thu, 28 May 2026 04:25:31 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #Arctic Wolf #credential stealer #CVE_2026_35616 #EKZ Infostealer #endpoint security #FortiClient EMS #PowerShell Malware
Daily CyberSecurity
Critical FortiClient EMS Exploitation Campaign Spreads New EKZ Infostealer Payload
Arctic Wolf warns of a new FortiClient EMS exploitation campaign using CVE-2026-35616 to deploy the stealthy EKZ Infostealer malware.
26 views
Daily Writeups
⤷ Title: Telemetry Interception: The Unauthorized Routing of Motorola’s Amazon Gateway
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Thu, 28 May 2026 03:32:30 +0000
════════════════════════
⌗ Tags: #Technology #Allison Yi product management statement #Amazon affiliate code injection #Android launcher app hijacking #Device Native mobile ad monetization #disable Motorola Smart Feed #kira_abboud.com tracking domain #mobile bloatware browser detour #Motorola Razr 60 Ultra app drawer bug #Motorola Smart Feed redirect
Daily CyberSecurity
Telemetry Interception: The Unauthorized Routing of Motorola's Amazon Gateway
Users uncover a weird Motorola Smart Feed redirect that forces the Amazon app through third-party tracking links. Motorola claims it was a glitch and fixed it.
21 views
Daily Writeups
⤷ Title: Windows DNS Client RCE: 9.8 CVSS & Public PoC Disclosed
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Thu, 28 May 2026 03:17:51 +0000
════════════════════════
⌗ Tags: #Vulnerability #CVSS 9.8 #heap overflow #Public PoC Exploit #Remote Code Execution #Windows DNS Client
Daily CyberSecurity
Windows DNS Client RCE: 9.8 CVSS & Public PoC Disclosed
A critical Windows DNS Client RCE vulnerability (CVE-2026-41096) with a 9.8 CVSS has public PoC exploit code. Learn how to detect and patch it.
22 views
Daily Writeups
⤷ Title: IBM Patches Critical Authentication Bypass in Engineering Platform
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Thu, 28 May 2026 03:03:03 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #Authentication Bypass #CVE_2026_3660 #IBM #IBM ELM #Jazz Foundation #Security Bulletin #Software Patch
Daily CyberSecurity
IBM Patches Critical Authentication Bypass in Engineering Platform
IBM patched a critical IBM Jazz Foundation vulnerability (CVE-2026-3660) with a 9.8 CVSS score. Learn how to secure your property files now.
18 views
Daily Writeups
⤷ Title: I Found a Critical Vulnerability — They Paid Me $15,500
════════════════════════
𐀪 Author: cyber security
════════════════════════
ⴵ Time: Thu, 28 May 2026 05:56:13 GMT
════════════════════════
⌗ Tags: #ethical_hacking #infosec #technology #cybersecurity #bug_bounty
Medium
I Found a Critical Vulnerability — They Paid Me $15,500
How a simple URL tweak exposed millions of private records, and what it taught me about the $81 million industry most people have never…
29 views
Daily Writeups
⤷ Title: Domain Compromise & Dual RMM Abuse
════════════════════════
𐀪 Author: Shahzeb M
════════════════════════
ⴵ Time: Thu, 28 May 2026 05:32:45 GMT
════════════════════════
⌗ Tags: #cybersecurity #hacking #threat_hunting #blue_team #incident_response
Medium
Domain Compromise & Dual RMM Abuse
IR Number: IR-2026–0518–001
22 views
Daily Writeups
⤷ Title: Intercepting Network Traffic Through ARP Spoofing
════════════════════════
𐀪 Author: Aastha Thakker
════════════════════════
ⴵ Time: Thu, 28 May 2026 06:16:00 GMT
════════════════════════
⌗ Tags: #cybersecurity #networking #ethical_hacking #arp_spoofing #infosec
Medium
Intercepting Network Traffic Through ARP Spoofing
Your laptop trusts ARP replies without verifying who sent them.
34 views